Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6913C2EEDFE711EFB2470C8C762E951A.roa
File: 6913C2EEDFE711EFB2470C8C762E951A.roa (raw, json)
Hash identifier: oNi8atPWMn08FMY+EPGN20rrdZM4xmfajBdKloGbSbQ=
Subject key identifier: C4:02:1A:C2:0D:15:EF:67:CE:C9:3F:19:8D:6F:FD:31:9C:07:76:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01162B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6913C2EEDFE711EFB2470C8C762E951A.roa
Signing time: Fri 31 Jan 2025 15:24:06 +0000
ROA not before: Fri 31 Jan 2025 15:24:03 +0000
ROA not after: Sat 03 Jan 2026 15:24:03 +0000
asID: 40065
IP address blocks: 45.205.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71211 (0x1162b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 15:24:03 2025 GMT
Not After : Jan 3 15:24:03 2026 GMT
Subject: CN=679ceb16-629e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:2b:04:da:78:eb:f5:a8:f9:27:31:57:ef:
f5:34:98:87:8a:16:8a:31:3b:47:30:e2:53:f0:bd:
d8:ac:37:aa:41:b8:a4:e1:79:8a:97:c1:18:e3:63:
d1:16:8d:c7:69:a1:54:8d:ad:c1:f9:50:49:49:76:
80:20:39:59:15:fc:cd:6b:2a:ca:81:be:72:c7:ca:
17:ae:60:2f:69:82:fd:3d:f4:2d:66:da:8a:50:a7:
b0:8d:90:91:50:87:20:9d:e2:a5:35:4e:2f:0f:58:
bf:29:95:22:e8:9a:92:25:aa:d3:68:fe:ac:cb:2c:
43:ce:7e:a0:1c:56:3f:fc:29:e5:b8:5b:98:fe:24:
70:ff:b1:51:38:c1:c1:0a:72:88:fd:76:e4:55:e7:
97:dd:03:32:15:58:86:ea:55:2a:5f:20:c7:c4:cb:
e3:dc:b2:1b:e2:42:68:45:f3:43:1f:fe:d2:30:8c:
f1:cc:46:12:27:c7:3f:ac:55:cc:69:80:4b:58:37:
7a:de:ca:be:bb:9d:db:08:99:26:54:98:b1:5b:83:
a9:75:c5:a0:dd:d4:0d:d1:1e:08:9a:a9:93:ee:3a:
51:9e:2e:14:ed:ac:07:ef:d4:04:c0:00:89:5f:76:
bb:d0:48:7b:70:87:a5:13:ce:e8:3e:df:f3:e3:65:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:02:1A:C2:0D:15:EF:67:CE:C9:3F:19:8D:6F:FD:31:9C:07:76:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6913C2EEDFE711EFB2470C8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.8.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:8b:07:36:18:af:ea:57:d8:4e:17:60:22:e9:88:74:52:b4:
6e:f7:23:8a:37:86:f8:4d:aa:06:f7:1b:19:22:be:1d:0f:8f:
2a:7c:08:75:74:7f:27:1f:60:05:c0:8a:fc:44:62:21:94:76:
20:b6:fa:e0:57:e7:c7:25:fa:73:2f:90:21:0e:14:0b:d1:fa:
0b:54:6d:55:c2:35:6d:ed:30:85:49:3e:78:d3:46:29:59:6a:
c9:f5:da:40:17:30:62:fe:fc:42:6b:c5:e3:8b:d5:42:75:5d:
d5:c4:cd:ac:b5:f5:1b:4e:0f:78:c4:c6:cf:98:f9:ab:cf:7c:
81:bf:3a:fe:b6:9b:c9:ac:06:65:23:df:6d:5e:c9:25:da:1c:
6b:bb:92:88:bc:bc:c6:63:a1:40:26:10:3b:97:68:47:0b:28:
5c:fd:de:2b:96:48:24:7e:72:d7:06:57:d1:46:c8:a6:2c:33:
bd:e7:ba:75:58:7c:ba:f1:79:ef:67:50:46:0d:75:be:25:e8:
03:84:82:cc:4c:f3:b1:2f:0d:7c:a1:c1:ab:d2:84:67:dd:c8:
63:b0:5a:84:8c:31:c0:c2:fd:1d:f3:00:60:6c:d8:88:17:46:
e4:df:29:05:0c:c9:ef:27:f8:4d:38:1f:f2:1f:28:07:a0:8b:
c1:f5:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:44 2025 by rpki-client