Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F72C491CBE7611EFBA72FE62762E951A.roa
File: F72C491CBE7611EFBA72FE62762E951A.roa (raw, json)
Hash identifier: ddApsq1Phs91WPfQmtDS9/BtgXkQa9gICKwaRvh7lxA=
Subject key identifier: B5:BA:CD:B9:FD:68:21:44:8D:EF:52:14:13:DB:D6:F3:7E:AD:75:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E632
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F72C491CBE7611EFBA72FE62762E951A.roa
Signing time: Fri 20 Dec 2024 02:06:03 +0000
ROA not before: Fri 20 Dec 2024 02:06:00 +0000
ROA not after: Wed 10 Dec 2025 02:06:00 +0000
asID: 984
IP address blocks: 45.206.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58930 (0xe632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 20 02:06:00 2024 GMT
Not After : Dec 10 02:06:00 2025 GMT
Subject: CN=6764d10b-c291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:88:9f:bf:1b:d7:77:da:37:90:db:f1:80:
49:5c:ac:6d:76:f0:ca:ef:ec:3a:cf:43:8f:4a:68:
6a:a0:58:84:82:05:c2:8c:fb:25:ee:2e:81:87:1b:
18:3d:b8:db:b3:5a:66:c9:73:60:1f:2e:eb:91:8a:
ff:b4:fe:c4:02:01:c4:43:8d:07:d9:4a:0a:6b:d8:
3b:7a:a3:f9:bc:0e:af:71:7f:ee:56:66:8f:92:fc:
70:25:f6:fa:73:fc:75:47:b7:84:9a:96:53:6d:d5:
a9:e9:4d:d2:1c:86:52:61:b5:71:ba:1d:06:a6:3c:
ae:1c:f9:80:7a:4d:d0:19:1b:fa:6a:28:96:01:49:
e1:d0:70:36:7a:dc:bd:db:18:ef:a0:e9:f8:01:3b:
3e:5f:36:d6:d7:4e:2a:4d:85:24:08:1d:f3:cc:f9:
b2:a9:10:27:64:34:19:81:c9:d0:94:bd:e6:92:cd:
d5:38:24:8a:b0:34:52:3e:51:8a:0b:4f:95:f8:d2:
31:66:35:eb:99:e0:d1:98:36:d1:af:fc:a9:3c:2d:
95:e5:f8:d5:e6:26:23:96:9e:23:f3:6c:9b:f3:34:
3c:3f:88:a0:ae:fb:05:24:33:26:18:61:15:d0:dd:
c3:a4:37:c1:9f:65:ae:82:53:24:2c:75:64:af:73:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BA:CD:B9:FD:68:21:44:8D:EF:52:14:13:DB:D6:F3:7E:AD:75:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F72C491CBE7611EFBA72FE62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.153.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:9a:1a:6a:05:ff:bc:de:6e:3d:1f:9e:f9:d7:ad:c7:c7:0b:
ca:86:cd:a7:c0:a0:d1:06:3d:10:8e:cf:60:9e:ba:05:b2:cc:
f1:24:14:2c:67:66:83:64:9a:4f:4f:69:45:b1:32:59:e9:ce:
5e:7f:b4:ef:ca:9b:c1:76:d2:ea:d7:e4:4c:00:2e:16:3a:6f:
0d:3b:74:ab:bf:61:e9:ef:a5:1e:64:7d:11:fe:1d:eb:f1:c4:
6a:e4:b5:5b:2b:e2:87:61:4b:50:fe:90:b0:03:87:9c:47:75:
7a:f6:ff:d3:3c:1d:3f:bc:2e:cb:65:18:b7:19:b2:09:07:e9:
1b:67:25:9d:2a:ee:02:1d:b4:44:51:31:04:03:fb:d5:36:c9:
30:94:82:24:3d:78:bd:2a:fe:b2:f5:7d:3c:3f:b5:f4:b1:5c:
e0:8e:2d:c8:99:ad:7e:f9:06:c6:87:df:18:3f:ec:31:2a:18:
15:2a:c8:04:61:98:8d:2f:7f:22:ab:84:06:a9:cf:63:8f:bf:
ab:f1:aa:87:e4:64:ea:99:e5:4e:d5:f8:ef:e4:7b:52:8a:f5:
5c:43:37:70:d6:77:13:bd:ba:e0:26:c7:2a:07:17:d5:10:d9:
8a:39:1a:5d:37:11:5c:75:e6:70:0d:bf:e1:ea:76:0c:ea:fa:
d8:2a:ec:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:40:24 2025 by rpki-client