Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8B23BB6DC8011EF882431A3762E951A.roa
File: F8B23BB6DC8011EF882431A3762E951A.roa (raw, json)
Hash identifier: 5jBMpEosHHZ6H+xP9a5vMFcn3FIFarWLiReS2hzK47g=
Subject key identifier: 60:43:F6:66:B6:4B:FE:21:40:23:91:EE:20:B1:51:EC:F1:4C:70:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011479
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8B23BB6DC8011EF882431A3762E951A.roa
Signing time: Mon 27 Jan 2025 07:33:16 +0000
ROA not before: Mon 27 Jan 2025 07:33:12 +0000
ROA not after: Tue 04 Mar 2025 07:33:12 +0000
asID: 136744
IP address blocks: 45.194.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70777 (0x11479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 07:33:12 2025 GMT
Not After : Mar 4 07:33:12 2025 GMT
Subject: CN=679736bc-3593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:f7:bc:40:10:46:01:2c:58:e1:bd:1d:51:
f6:8d:21:84:24:04:d4:c6:9a:c8:62:4d:a7:a0:73:
cd:e8:3a:e8:35:b6:ab:bc:29:23:3d:a1:0d:63:24:
d8:a0:ab:d6:3c:c0:0c:1e:55:11:eb:67:cd:69:89:
6f:4e:93:59:25:6e:d3:50:85:84:df:d2:1f:da:4e:
ff:87:a9:f8:96:f2:d6:7a:6d:39:ed:d8:5c:fa:34:
a7:27:d0:f6:2f:f8:39:f4:15:2c:7f:99:83:d4:30:
6d:50:5a:ac:28:fb:6e:4c:28:a5:e6:8e:28:b9:fd:
29:f9:63:4b:04:45:7d:68:f6:db:eb:b8:70:7c:b2:
c7:e5:e7:da:ca:35:be:57:08:86:d6:fd:73:00:fe:
2f:0b:12:8f:09:87:a8:87:8b:a9:2d:47:17:28:41:
90:74:75:9d:0b:81:84:ef:96:a0:7d:bf:0f:0f:a5:
af:95:7f:aa:02:3d:b5:39:6d:24:da:cc:29:77:fa:
dc:19:b5:fb:2f:52:bd:31:e6:c0:17:e9:c6:c7:cc:
16:51:ae:13:64:81:73:16:ee:2c:cd:64:90:2d:f2:
70:40:a7:7c:0e:12:80:1e:0a:7c:35:5e:68:67:ab:
95:e7:fd:00:42:38:af:e2:e7:f4:30:81:a4:f7:28:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:43:F6:66:B6:4B:FE:21:40:23:91:EE:20:B1:51:EC:F1:4C:70:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8B23BB6DC8011EF882431A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.94.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:4b:92:68:f6:b4:64:30:9c:96:17:6d:98:18:7a:6f:78:0a:
31:9d:9d:cc:78:8a:ab:c3:e7:bd:ef:ba:fd:a7:54:55:96:95:
6d:bd:07:78:7e:30:2a:99:0d:66:62:b4:03:20:b2:b7:a4:46:
5b:cd:b3:63:e3:4b:5d:5f:74:c6:cc:9d:42:3b:13:1a:bd:c3:
41:35:41:eb:69:5a:da:0e:9c:21:b3:23:a4:e9:f9:8d:7c:aa:
aa:e9:e0:de:10:f0:aa:81:e0:cc:6f:e5:81:ad:b0:bc:2a:05:
6a:1b:bf:80:93:e8:e6:97:04:d1:16:96:d4:c0:5e:e5:52:5c:
85:c5:2e:03:ac:3a:d5:1e:c3:8c:b2:2a:05:11:33:64:35:5c:
46:ee:bb:84:94:22:30:1b:07:03:ed:f6:d8:92:2b:90:65:9a:
83:7b:44:28:4f:9b:f9:58:1b:c8:8b:e9:8a:80:2f:5c:99:9f:
f0:3c:67:0b:6a:2e:db:14:f0:e2:64:48:74:57:36:fd:23:89:
8e:f2:6b:24:70:60:46:31:c5:58:04:e5:4b:8c:14:a1:4b:e5:
87:f8:37:86:65:57:e5:b5:b5:20:39:2e:59:cd:5e:b8:80:0d:
46:a4:ff:7c:b4:17:52:62:d1:e1:7b:cf:53:36:ae:a0:07:3f:
24:5e:d1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:48:19 2025 by rpki-client