Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1678966DFF411EF95E1AD65762E951A.roa
File: F1678966DFF411EF95E1AD65762E951A.roa (raw, json)
Hash identifier: dYUaOo+zbFLuABvVV9KawqRzkveIIqp79hamxFXvp1g=
Subject key identifier: 81:9A:33:29:CF:C0:9A:29:CB:EB:CC:77:C8:F6:8D:4A:CF:E9:84:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011699
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1678966DFF411EF95E1AD65762E951A.roa
Signing time: Fri 31 Jan 2025 17:00:59 +0000
ROA not before: Fri 31 Jan 2025 17:00:55 +0000
ROA not after: Tue 25 Feb 2025 17:00:55 +0000
asID: 62468
IP address blocks: 45.204.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71321 (0x11699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 17:00:55 2025 GMT
Not After : Feb 25 17:00:55 2025 GMT
Subject: CN=679d01cb-f039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:cf:1f:86:36:e1:f2:25:9b:79:27:11:5a:
c4:61:6b:85:4a:e1:db:52:9a:1e:de:7a:f3:61:92:
7d:8a:ab:38:b7:9c:e6:61:e2:4c:4b:91:d0:40:f2:
b2:b5:78:10:33:d2:d7:c8:3c:96:68:40:ec:d3:c3:
f3:77:5e:31:95:e0:a3:07:36:2e:79:71:78:73:f0:
93:bf:cb:d8:17:89:c3:be:28:a0:ba:a6:13:de:34:
c6:bd:12:fb:42:cb:69:06:a9:24:70:5e:d7:74:db:
d8:d5:30:4a:60:b4:ba:71:13:df:35:3b:fb:74:90:
51:2e:27:80:25:20:df:70:fb:f1:00:df:29:21:9a:
aa:8c:3b:10:05:97:e2:c3:92:2f:8e:a8:68:8d:f2:
ad:e9:9c:4c:a7:9d:fb:8e:5d:dd:2b:cb:b9:7d:66:
17:68:fd:c6:c6:68:a4:63:1d:1b:35:22:33:64:13:
9f:7b:d2:8c:d9:46:d9:92:69:36:32:af:b1:b9:24:
63:21:c7:da:20:8e:b3:3c:fb:44:54:80:1c:9e:e6:
4e:d8:c0:9e:95:32:fb:b1:79:fd:42:8c:3c:df:9f:
b9:17:d8:fc:0a:d5:25:27:8f:5c:0f:74:ff:37:6a:
21:4d:67:50:2d:5e:3c:1a:f7:d5:c8:f3:25:9d:9a:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9A:33:29:CF:C0:9A:29:CB:EB:CC:77:C8:F6:8D:4A:CF:E9:84:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1678966DFF411EF95E1AD65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.192.0/19
Signature Algorithm: sha256WithRSAEncryption
80:a9:31:03:44:c3:4d:1a:c2:a3:97:fd:22:67:96:0f:e0:d7:
47:9a:c9:26:bd:32:08:d8:dd:a3:58:68:97:89:14:5b:b3:e6:
04:bd:f7:22:46:1a:bb:82:0d:7d:fe:3c:9a:a2:c1:8a:3f:f2:
48:cf:ac:d7:ad:95:80:c8:98:b3:36:7f:e8:b7:c0:84:70:a0:
dc:68:23:d4:96:98:03:8b:81:46:04:62:1d:b8:47:44:28:bb:
8f:c0:ca:15:d5:4e:33:03:e2:aa:ce:44:c1:2d:99:fc:4c:7c:
92:2c:62:fc:b7:00:71:af:5c:57:53:68:60:f7:67:6d:a9:ea:
57:2d:46:c4:3a:cc:bf:28:39:0a:32:ee:98:12:11:a4:a4:8a:
7f:f4:5b:73:c3:34:cc:94:f5:5f:f0:eb:23:20:cf:8c:53:4e:
c7:fd:44:ba:dd:67:d3:12:bc:d3:eb:2d:91:01:a5:4c:29:a2:
09:c5:e2:29:e0:27:d0:ef:6d:70:b8:8e:32:b1:bb:b4:26:27:
8e:e6:18:e8:bd:c6:c6:8b:b4:9d:50:79:36:a9:35:40:6f:47:
50:45:45:a0:67:d2:f0:92:4f:88:f8:26:cf:a9:a4:c2:2d:8e:
1e:d8:d4:d1:04:37:38:09:50:d8:1e:1d:47:e1:9a:e9:aa:f7:
a4:81:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:13:52 2025 by rpki-client