Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB2E14AED72D11EFA3384276762E951A.roa
File: EB2E14AED72D11EFA3384276762E951A.roa (raw, json)
Hash identifier: k1aU3Np7/y31aYIAKo7X5N4lks4V1PuvbuCMUEL1Gvw=
Subject key identifier: 4F:22:0A:0B:1E:4B:AD:9C:54:B1:E6:F7:EC:06:D7:7D:D6:1D:04:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB2E14AED72D11EFA3384276762E951A.roa
Signing time: Mon 20 Jan 2025 12:56:09 +0000
ROA not before: Mon 20 Jan 2025 12:56:05 +0000
ROA not after: Sat 01 Feb 2025 12:56:05 +0000
asID: 6079
IP address blocks: 45.197.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68747 (0x10c8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 12:56:05 2025 GMT
Not After : Feb 1 12:56:05 2025 GMT
Subject: CN=678e47e9-83b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:41:12:fc:21:44:d9:70:ee:91:6c:dd:fd:ce:
25:24:13:d3:26:9e:c8:1c:7d:85:26:04:71:db:d5:
c4:b5:ff:7f:b0:c3:a5:70:88:ad:b4:55:70:4e:58:
44:77:66:87:cb:4b:82:0d:64:6b:bb:25:78:1b:27:
3d:77:47:4a:fd:fe:b0:d4:a7:6f:e6:09:17:8b:a3:
2c:e8:d3:7d:77:d3:f8:87:69:0b:5d:48:58:6b:63:
71:47:cd:26:d9:b1:01:bd:51:f4:75:7b:d3:4d:e6:
8a:30:7b:aa:20:d0:fe:d8:16:0d:c0:a1:13:f8:22:
6a:88:a8:11:75:8a:f0:9c:63:01:83:6d:c5:c6:ad:
98:8d:9f:55:f4:1c:80:74:07:26:ad:14:bc:6d:c4:
24:3a:0e:5b:82:e5:20:ad:1a:d2:01:a0:ad:f8:8f:
02:ea:49:ee:5d:94:8d:18:a5:6e:b8:c8:95:73:17:
dc:98:da:36:4d:de:19:7b:bf:55:a6:e0:cb:f0:99:
26:a6:a2:b7:a1:46:89:96:20:d7:3e:16:00:cf:6b:
68:c9:db:f4:df:9e:9b:69:34:a8:9b:91:63:4c:cc:
14:77:6a:5c:bb:48:ee:43:f5:70:22:6d:3d:22:3b:
38:87:6a:2f:5b:b1:61:f4:6e:d5:93:b6:41:c8:cc:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:22:0A:0B:1E:4B:AD:9C:54:B1:E6:F7:EC:06:D7:7D:D6:1D:04:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB2E14AED72D11EFA3384276762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.240.0/20
Signature Algorithm: sha256WithRSAEncryption
71:f6:5b:6d:c2:20:7d:29:c2:4e:a6:d4:f9:b9:e2:b1:bb:f1:
b4:00:a2:e0:9f:44:d1:2a:6a:0b:58:d9:c9:51:89:32:d4:83:
7d:51:76:6c:ed:97:ca:e4:bf:22:92:48:4b:ba:b3:5b:12:78:
00:7f:a1:bd:e8:b0:e3:e3:81:69:2a:9d:1c:2a:ee:51:13:0a:
ac:d4:18:8a:99:33:6a:96:4a:29:c9:31:33:0c:e7:09:08:07:
18:1a:ea:af:4d:18:eb:e5:9d:25:02:ed:17:88:52:fb:24:53:
ad:38:3b:06:ab:5c:1c:6e:56:72:01:e9:03:5d:81:89:e9:d8:
4a:d3:59:d5:90:b3:f9:29:c8:ef:97:a7:f4:2d:cd:ab:22:41:
18:45:39:ff:e7:14:33:4e:11:9c:e0:87:67:a9:50:92:f8:1f:
1d:9a:ff:b3:34:0a:70:4e:d6:b4:33:44:b7:81:36:07:f9:ec:
1e:26:2f:c8:01:8e:3b:1a:b8:55:eb:f7:06:a0:cf:79:32:2c:
b5:a1:3a:f8:63:1c:8a:3a:2b:24:43:e6:10:72:cb:9c:6c:14:
8b:97:c9:f1:8f:96:f9:ed:c4:9e:53:ec:26:b4:f3:2b:b6:b2:
86:52:a8:bb:f4:53:6a:c2:2f:e8:98:6d:7b:d9:59:a4:0d:f0:
e2:12:48:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:59 2025 by rpki-client