Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB75453CD72711EFBABE3D51762E951A.roa
File: EB75453CD72711EFBABE3D51762E951A.roa (raw, json)
Hash identifier: Aqi4vbqRM6NwsybNVwybsoa7R9k2sH2S57JBQW7StxY=
Subject key identifier: 3B:E6:F8:25:0D:95:B4:B7:6F:26:53:7C:07:80:FE:F1:D0:B8:73:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB75453CD72711EFBABE3D51762E951A.roa
Signing time: Mon 20 Jan 2025 12:13:13 +0000
ROA not before: Mon 20 Jan 2025 12:13:09 +0000
ROA not after: Sat 01 Feb 2025 12:13:09 +0000
asID: 6079
IP address blocks: 45.203.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68715 (0x10c6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 12:13:09 2025 GMT
Not After : Feb 1 12:13:09 2025 GMT
Subject: CN=678e3dd9-2555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:97:56:d0:f9:c5:2e:09:f7:40:d8:4a:10:
94:23:7f:30:a3:48:cf:d8:40:f3:b5:cb:00:1c:d6:
bc:e6:f4:c7:c2:35:23:5a:aa:a6:15:8f:35:67:87:
f3:6a:ba:8f:25:be:76:64:46:5b:f9:9d:10:da:26:
90:bd:0f:ea:96:b6:82:18:2b:60:bf:43:f8:5c:c5:
42:23:09:a5:c6:34:af:e8:4f:4c:94:7f:97:d4:a8:
4a:10:85:02:99:7d:e7:37:59:96:15:6c:aa:85:6d:
95:76:3a:6e:6a:bb:49:3d:db:53:66:a6:23:a0:3c:
9c:99:cd:fd:46:60:cd:2f:fa:98:9b:46:71:df:9d:
a2:b7:37:e4:fc:de:67:31:be:8a:c9:a5:f7:4a:70:
57:3f:4e:24:93:a1:5b:69:e0:f2:c8:e1:ef:86:2e:
8a:f8:76:9f:5e:45:4f:ec:ea:b4:e8:58:4a:ef:16:
be:9f:f9:46:25:cb:09:cf:0f:9b:a4:38:81:3a:a9:
7c:25:d1:56:8b:f8:90:e9:74:00:39:eb:ce:fc:79:
a7:78:51:a0:fa:8c:81:3e:ea:45:b8:84:e2:25:82:
22:a1:73:fc:f0:c9:7d:ab:87:72:42:19:fa:55:5f:
ee:fb:b1:4e:af:f5:04:63:bc:b2:67:cd:05:8b:6a:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E6:F8:25:0D:95:B4:B7:6F:26:53:7C:07:80:FE:F1:D0:B8:73:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB75453CD72711EFBABE3D51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.139.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b8:36:26:36:52:8f:c7:8c:80:d7:53:89:27:b1:bd:9f:e6:
ca:ee:f4:d9:9c:56:a4:1a:ce:1d:f3:e0:53:3e:5d:32:47:66:
41:ba:07:21:12:e1:ef:e2:98:cd:ce:e8:2a:12:f3:ac:dd:af:
e2:84:39:71:e3:53:c0:f4:74:7e:4f:f0:ef:a8:43:ac:02:62:
68:57:b0:cd:82:81:d8:f0:70:a0:da:e8:5b:e4:d2:1d:60:e5:
61:74:2b:5f:cd:ac:26:ab:1e:71:61:74:23:86:b8:c5:f8:5f:
ec:29:24:d6:04:74:b0:fe:ba:13:06:fd:36:f4:37:6a:75:cf:
71:dc:5f:d8:1d:3c:aa:56:42:09:1e:bf:b2:63:85:a5:9b:62:
7f:e1:1a:ec:44:01:1b:41:d4:2c:b6:bb:d7:af:3a:60:6c:21:
40:da:5c:7c:15:12:10:b9:88:c5:0d:40:a7:7d:dd:74:8d:f4:
04:cd:58:d5:10:e0:f3:78:18:a5:82:7d:48:dc:5b:ff:6f:8e:
4f:29:29:c8:dd:5e:f6:0f:02:56:da:5d:57:89:98:9b:c4:2e:
50:a9:9d:0d:bc:84:92:ea:4d:d8:d7:88:0e:b9:f4:a0:f9:cf:
c0:3c:2d:20:a7:f5:bc:58:c5:74:b6:f4:72:b7:9a:90:4b:f4:
78:b2:67:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:53:51 2025 by rpki-client