Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1E9C906E54E11EFB147A583762E951A.roa
File: C1E9C906E54E11EFB147A583762E951A.roa (raw, json)
Hash identifier: +LQuM9G/j2/tkJwsfM498ROYLimGiseE4zaTTFDIbW4=
Subject key identifier: F5:A4:E4:67:59:DE:09:90:70:FB:E6:38:27:B9:76:B9:7E:3A:10:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1E9C906E54E11EFB147A583762E951A.roa
Signing time: Fri 07 Feb 2025 12:26:30 +0000
ROA not before: Fri 07 Feb 2025 12:26:26 +0000
ROA not after: Fri 21 Jan 2028 12:26:26 +0000
asID: 17561
IP address blocks: 45.192.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73063 (0x11d67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 12:26:26 2025 GMT
Not After : Jan 21 12:26:26 2028 GMT
Subject: CN=67a5fbf5-4709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:6c:04:a2:9d:d5:0b:de:95:71:af:33:a1:
80:be:94:7e:09:d9:5c:ee:ca:7a:5e:fe:8b:d0:1e:
7c:c1:be:7a:dd:bf:50:7f:2c:7b:9d:9a:f6:d2:99:
aa:5d:02:28:25:84:0b:53:a8:4c:c1:c0:67:8b:8b:
39:81:69:5a:9d:8d:1f:27:0c:80:48:60:27:d1:c9:
f4:0f:43:f8:be:14:72:ba:61:c7:a5:ab:e6:49:bd:
19:46:f5:bb:77:53:21:c2:a4:e0:cc:0a:aa:77:f4:
29:7a:c5:90:a9:5a:e3:3e:88:1e:5a:8f:ac:a9:8c:
50:e4:5d:45:9d:46:5d:13:93:70:fb:58:3b:97:9a:
5d:27:d3:a8:09:cb:17:a8:2e:1b:b0:2a:c0:79:fa:
a3:da:3d:0c:99:c3:c5:6b:e9:1d:d3:57:0a:46:b1:
96:86:9c:ef:12:c9:4b:f2:5a:48:a9:ea:ae:8c:67:
49:a4:b1:b3:e6:d8:96:bd:7f:df:47:5c:8d:68:4d:
39:ae:43:4e:0b:45:6a:69:9e:b4:60:c9:02:ec:4a:
b4:fb:22:ca:4b:7f:d1:d0:09:e7:ff:6f:2b:8f:de:
ec:0a:69:fa:d7:68:43:0d:c6:78:90:a8:95:c4:cd:
0d:aa:a6:73:4b:69:0f:9d:d1:8b:d6:29:bf:1b:1f:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A4:E4:67:59:DE:09:90:70:FB:E6:38:27:B9:76:B9:7E:3A:10:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1E9C906E54E11EFB147A583762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.22.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f4:91:db:f6:6d:0a:22:7f:cf:be:d2:2b:ed:ca:85:49:fe:
f4:d4:36:b2:c9:ad:eb:8b:bb:69:2d:41:94:67:51:27:18:91:
c8:22:4d:c9:ba:fc:af:ba:ae:0e:49:5b:2c:60:76:30:d8:aa:
0d:43:ba:09:41:e0:ed:90:2b:77:1a:c4:05:b7:b3:72:d7:1d:
19:88:4d:c5:fd:d7:89:16:bf:69:03:e7:17:c8:25:d4:a9:4e:
ce:b8:9c:32:3f:c2:1b:d9:c2:d7:fa:ce:53:f2:f3:74:da:02:
35:61:f3:f8:b5:40:74:5f:c2:c0:6f:1b:35:c9:f3:e6:db:41:
39:31:64:3a:66:80:13:a7:69:3f:70:91:fc:58:d3:1e:65:c3:
ed:db:bf:21:3d:3a:f6:15:d3:cf:de:c0:8e:fe:08:bf:bd:19:
d0:65:7d:78:07:01:c4:50:91:b7:fa:08:a9:36:d9:d9:0b:60:
fd:14:db:4a:dd:b9:8c:c4:d5:ae:d0:59:59:bb:1c:6a:12:f4:
97:4c:5b:7a:95:9b:10:d6:91:3e:c8:91:d8:80:63:83:63:34:
42:e9:47:e3:19:97:ac:f5:23:e7:ba:64:9c:9c:f2:d3:85:fc:
fc:d0:82:c4:47:c9:ae:4f:f3:77:c4:9e:3d:77:d5:fa:23:c0:
28:57:fe:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:31 2025 by rpki-client