Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC2B071CDD6411EF8F43B3A1762E951A.roa
File: EC2B071CDD6411EF8F43B3A1762E951A.roa (raw, json)
Hash identifier: /cJnPrauuXifntWPsSHmRmQat5PCYNV87kBUMBetTBw=
Subject key identifier: 9A:13:A6:46:F3:A4:17:2B:6A:75:C0:89:CA:DF:2D:26:32:FF:29:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011582
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC2B071CDD6411EF8F43B3A1762E951A.roa
Signing time: Tue 28 Jan 2025 10:45:00 +0000
ROA not before: Tue 28 Jan 2025 10:44:56 +0000
ROA not after: Tue 11 Feb 2025 10:44:56 +0000
asID: 395793
IP address blocks: 45.192.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71042 (0x11582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 10:44:56 2025 GMT
Not After : Feb 11 10:44:56 2025 GMT
Subject: CN=6798b52c-e7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:77:33:11:3f:fa:5f:2d:59:a8:3a:9f:3a:
47:a4:3d:73:aa:80:3a:68:85:f1:6c:3e:6b:05:6e:
3d:6d:ca:89:ce:96:55:fa:17:6d:6e:1e:d5:72:b2:
35:c0:7c:81:dd:f9:a2:09:10:1a:4c:34:e3:8a:b0:
a2:3b:5d:19:fb:d5:ea:e2:9d:76:eb:48:9d:d8:c0:
0a:92:c2:ed:a8:40:1d:91:43:81:a2:c2:89:ea:d7:
1f:de:d7:96:a6:ac:c7:c6:d6:cd:9c:ce:e3:df:35:
21:cb:56:01:d1:01:18:f1:0e:21:c1:b9:28:20:cb:
44:cc:58:29:7e:4b:24:96:76:41:98:c2:aa:3d:72:
8d:0f:bd:f6:ba:04:54:48:2a:bb:c9:bd:4b:17:be:
da:d2:77:a1:fb:87:3a:b1:dc:28:28:b0:c7:a5:c5:
12:62:8a:f2:85:70:e4:98:70:57:c3:14:17:ef:cc:
86:a5:92:f8:39:38:48:70:d4:ff:32:29:93:f0:72:
f2:88:49:36:2f:37:ce:58:0a:56:a5:cd:f1:ff:da:
0d:5d:59:8a:5a:07:91:44:ba:18:36:1d:b7:cc:35:
04:6b:db:97:70:12:c2:38:6c:ad:9d:5b:61:38:c5:
dc:df:46:7d:0c:21:71:1c:7c:2a:37:05:3a:cd:d2:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:13:A6:46:F3:A4:17:2B:6A:75:C0:89:CA:DF:2D:26:32:FF:29:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC2B071CDD6411EF8F43B3A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.244.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:eb:b9:29:72:52:27:55:5d:d7:92:12:70:61:06:74:11:1a:
83:7f:8a:97:c2:30:2b:2f:55:ce:27:c8:72:ea:f9:a1:de:8e:
c5:38:ff:ab:c0:c9:54:e6:ca:af:09:7a:35:52:dd:ee:ed:54:
17:32:70:08:f0:55:f7:32:c4:ff:22:e0:9c:33:88:7c:3f:2c:
9e:21:b9:b6:c1:d0:2f:fe:2c:41:80:96:e3:54:5a:85:fb:45:
d6:f9:3e:37:46:c4:be:ac:d0:67:27:22:fd:60:b0:5b:42:92:
de:b3:90:96:0c:f9:58:47:e0:31:b6:8b:c8:0d:fe:d9:01:f4:
87:b4:02:e0:ec:44:b8:3b:6c:e0:63:a4:54:8f:26:8c:7a:d8:
98:2c:d3:35:ff:5f:19:b8:5a:1e:7b:42:c0:cf:58:b8:ee:c5:
6a:33:af:e0:de:e8:92:7d:1d:5b:00:65:ff:67:31:05:0e:d3:
7f:d5:22:a8:1d:75:27:e5:24:f2:9c:d8:2e:cc:f3:47:db:4f:
54:c3:df:85:7e:b3:52:59:3c:68:78:bd:bd:d8:89:6c:53:6c:
3b:40:f1:42:53:ce:be:92:ee:61:a7:fe:5e:db:0f:bf:b7:8a:
35:0e:e6:e8:d1:f3:3d:b5:e6:0e:a4:4b:17:50:fc:67:c2:b7:
be:45:0c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:53 2025 by rpki-client