Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B490D92F43911EFA8BAA796762E951A.roa
File: 6B490D92F43911EFA8BAA796762E951A.roa (raw, json)
Hash identifier: 5VjOIig/xtIkh91AUrWRlwPr2XWRtP8h7PKIOMK0QLQ=
Subject key identifier: 4C:E0:78:A9:2D:EC:BE:36:83:F5:B3:2C:33:AD:F5:28:E3:62:C3:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013213
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B490D92F43911EFA8BAA796762E951A.roa
Signing time: Wed 26 Feb 2025 12:01:32 +0000
ROA not before: Wed 26 Feb 2025 12:01:29 +0000
ROA not after: Sat 19 Feb 2028 12:01:29 +0000
asID: 17561
IP address blocks: 45.198.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78355 (0x13213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:01:29 2025 GMT
Not After : Feb 19 12:01:29 2028 GMT
Subject: CN=67bf029c-0b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:cc:2f:3c:e8:8a:96:61:d8:a8:32:80:1a:
d5:c8:66:bb:be:0f:ae:a3:da:12:a2:9d:52:4b:23:
ad:91:20:97:f6:12:0c:1a:07:27:99:9a:3e:2f:a3:
7c:af:bd:4a:79:ba:8b:44:06:81:e6:bf:d3:fa:4b:
a1:80:65:ca:13:ac:ad:97:8b:11:59:8f:38:92:c4:
87:e5:70:b3:92:7d:4d:26:38:f0:2c:b6:1e:48:e9:
5d:98:92:c0:4c:7a:2a:f0:e5:da:da:2e:b0:23:a0:
6d:f1:34:c0:60:b2:de:3a:6b:29:1e:fb:99:f3:ec:
39:2a:01:76:e9:9a:a7:ce:cc:9b:96:8a:80:7c:ee:
83:9a:c4:bf:7a:8c:b9:da:2d:4a:a0:83:b0:80:09:
35:84:73:15:f9:62:47:65:81:9b:71:ef:82:7a:5a:
f2:7e:b7:06:de:74:0c:ac:e7:2f:4c:c6:07:bc:37:
87:d2:0c:e6:8f:76:b9:0d:0b:60:8e:1b:c1:3d:63:
61:c5:7d:61:e0:bc:da:7e:c6:79:a8:ff:8f:c5:23:
b3:95:b4:71:31:15:0a:87:0d:84:34:c9:75:de:07:
3a:cb:b8:c1:4c:5b:43:c0:0a:18:0c:de:9c:f3:57:
28:00:f1:3a:96:5c:a0:1d:10:68:e6:10:be:55:03:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E0:78:A9:2D:EC:BE:36:83:F5:B3:2C:33:AD:F5:28:E3:62:C3:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B490D92F43911EFA8BAA796762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.7.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a4:a6:e9:c8:56:7f:0d:09:f9:4b:8d:b8:b2:87:61:12:7d:
d2:ea:8a:4b:61:a1:92:eb:fa:9a:f5:67:2b:7f:10:32:2c:fc:
2d:1d:e4:45:c3:59:e8:d7:5c:ea:ea:2e:36:96:81:a3:d2:e5:
7c:1e:44:69:b7:87:e8:38:91:77:f4:9b:6c:e3:50:37:64:49:
fe:9e:0e:4f:5f:ff:46:02:68:7e:51:a6:04:6b:ca:47:31:72:
60:36:b8:a8:c4:46:e9:4a:7d:e2:6f:18:83:cc:1e:ed:2f:90:
b8:fd:28:96:2d:57:23:9a:1a:f7:5f:aa:a5:24:8f:bc:52:c3:
d9:34:17:9f:5d:10:fb:8d:ab:7a:c4:74:0c:b4:1f:54:78:75:
01:50:f5:11:81:d1:bc:64:52:75:aa:09:6c:05:5a:db:3c:4d:
8a:06:cb:d9:94:41:97:d5:27:1e:8b:7e:54:2a:43:d3:82:84:
dc:6b:57:2c:09:16:16:fa:07:ff:a9:52:50:0a:57:f8:0a:cd:
10:57:c9:d7:f2:f1:08:d4:7a:9d:17:04:ba:42:d1:92:26:7f:
f8:b5:a5:00:75:d6:91:dc:21:07:c4:03:66:17:b5:2b:1f:5e:
9c:5d:dd:a9:ec:0a:1f:98:9a:c4:71:34:a5:db:1e:7e:9d:b6:
f0:f0:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:04 2025 by rpki-client