Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C368224FF2911EF8AA3F98E762E951A.roa
File: 7C368224FF2911EF8AA3F98E762E951A.roa (raw, json)
Hash identifier: AGcoPyLQ9K/dqC48bSbwIEJxpk2Sus2sD0R2CHrZqNY=
Subject key identifier: 52:24:5B:91:5B:0A:CF:56:66:A0:F4:46:58:A8:67:13:11:61:46:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01453A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C368224FF2911EF8AA3F98E762E951A.roa
Signing time: Wed 12 Mar 2025 10:05:11 +0000
ROA not before: Wed 12 Mar 2025 10:05:08 +0000
ROA not after: Wed 30 Apr 2025 10:05:08 +0000
asID: 398823
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83258 (0x1453a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 10:05:08 2025 GMT
Not After : Apr 30 10:05:08 2025 GMT
Subject: CN=67d15c57-1a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9b:32:8f:32:41:3d:61:73:aa:6d:91:e3:8d:
47:09:d5:f3:ec:f9:0f:c3:79:18:cc:2d:1e:59:1e:
6c:6d:e2:ba:9d:6b:be:fe:ac:b7:6d:33:3a:57:1a:
c9:8a:3c:8c:7a:51:40:df:ff:06:2f:ed:4a:33:7f:
5c:e5:bb:43:fd:40:03:ed:51:7d:bf:8e:4b:21:a0:
9c:5e:3b:66:20:b9:cf:77:1d:f7:2a:85:4d:cf:c1:
00:b0:53:3c:87:a8:73:5c:9c:41:37:31:ae:99:16:
83:c1:ea:34:7c:c1:24:d2:dd:89:73:30:1d:7f:37:
25:aa:87:ab:15:51:9f:9b:56:34:b7:59:c7:9a:4a:
24:f1:cb:41:52:ef:5d:32:ba:a5:45:df:e3:ec:49:
a2:05:0d:dc:b5:e6:db:63:b3:ba:4c:46:44:92:7e:
7d:69:b8:d4:5b:d0:d4:1f:95:19:64:d4:9b:2e:12:
63:0d:29:53:e5:f9:cc:37:8f:1c:91:d1:d6:fe:b0:
c3:12:e3:dc:4c:36:23:d1:5d:a9:9e:db:1c:16:62:
4f:f7:57:01:bb:8b:26:65:2f:01:81:35:16:0a:1f:
5c:7b:fb:5e:61:5f:1e:5f:9c:69:71:dc:5d:61:ef:
1b:d2:d5:50:ba:3e:03:0d:56:7f:34:4d:ed:14:02:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:24:5B:91:5B:0A:CF:56:66:A0:F4:46:58:A8:67:13:11:61:46:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C368224FF2911EF8AA3F98E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0a:5a:65:3d:ea:d1:26:3d:10:5b:19:ec:5d:c0:f1:4d:49:07:
bb:ed:87:61:72:39:aa:5a:24:1b:27:90:82:1f:89:05:ce:af:
62:eb:98:ba:7b:13:9f:05:bf:66:1f:6e:38:06:cf:0a:da:90:
71:56:78:8c:1d:6d:cc:49:a4:56:7e:94:4f:97:91:5a:dd:10:
48:00:c9:ad:c3:cb:9a:af:e1:5d:fe:ac:d1:ea:78:b3:cf:3d:
08:ed:01:2c:2f:d8:53:a6:b1:40:6a:ae:33:72:75:09:a8:73:
89:c6:d8:ca:e5:11:5f:f2:f4:eb:ec:a5:1e:09:1b:00:27:8b:
1b:0d:3c:b5:ea:cd:b2:15:cf:fc:88:72:a0:80:62:b3:3c:9c:
35:88:87:24:fb:79:80:c3:0a:7e:c1:6f:81:7b:6d:9d:10:fa:
a5:b4:ca:ea:76:56:a4:d6:dc:dd:c5:7d:7c:e5:d8:68:99:34:
7a:bb:9e:66:1c:70:77:07:ce:f3:db:b4:89:f3:cb:b6:00:f6:
4b:b4:24:a8:14:9c:cb:4b:9a:13:dd:27:04:53:6b:80:77:05:
5c:10:49:a6:ae:84:65:c7:36:d3:5c:ba:b9:3a:85:9e:bc:dc:
05:31:63:2c:8a:73:68:c1:8e:21:34:b7:37:c7:e6:77:e3:a8:
69:66:34:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:42:28 2025 by rpki-client