Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D66EA030F43B11EFA9956AA7762E951A.roa
File: D66EA030F43B11EFA9956AA7762E951A.roa (raw, json)
Hash identifier: QbGdFxKDK4LJ5BkG6y7y78kJOSTx316lkDbfzEwJEaM=
Subject key identifier: 1B:AB:3A:4F:D7:A9:D5:A2:8C:06:C3:1B:EC:D8:1F:AD:F9:6C:D5:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013254
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D66EA030F43B11EFA9956AA7762E951A.roa
Signing time: Wed 26 Feb 2025 12:18:51 +0000
ROA not before: Wed 26 Feb 2025 12:18:47 +0000
ROA not after: Sat 19 Feb 2028 12:18:47 +0000
asID: 17561
IP address blocks: 45.198.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78420 (0x13254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:18:47 2025 GMT
Not After : Feb 19 12:18:47 2028 GMT
Subject: CN=67bf06ab-aab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:18:5f:0e:b4:1d:5d:c3:3f:b5:df:d1:85:
74:be:dc:27:10:65:28:7e:6c:59:cf:97:2d:07:75:
92:d9:01:54:2b:e4:0a:bc:ff:e7:0a:6a:45:31:4b:
51:65:3d:8f:f4:41:f4:8b:30:62:1c:13:21:f6:6d:
14:c6:54:95:67:17:c9:a7:7c:29:8e:c6:76:14:f2:
00:26:9c:04:bb:03:14:79:07:4f:18:a2:23:d9:21:
33:43:ef:1d:88:35:e2:1d:c1:ca:1b:4a:90:1f:12:
db:48:9f:17:83:82:94:1d:51:71:e9:52:2d:3b:2c:
69:e0:41:aa:ab:27:9e:43:8a:51:6f:f5:08:55:78:
97:9e:68:ec:3a:f9:38:60:b7:b2:d0:e2:27:4e:37:
f1:fe:f2:2a:c1:99:dd:e5:f0:4b:0f:55:f9:c5:11:
53:b5:6f:80:50:ca:a0:55:37:74:8d:84:20:b2:82:
03:45:36:27:8c:b0:b5:4f:3e:97:9c:be:1a:bf:32:
1a:a7:bc:d4:42:0d:4f:b6:35:87:03:86:39:6b:39:
e5:03:4b:3d:d1:b5:4e:d7:da:c3:8b:40:50:71:51:
b4:bd:36:20:44:07:19:ce:a8:5b:e8:05:b8:c2:55:
c8:a2:6a:92:f6:6f:56:c3:a6:72:7b:03:bd:32:19:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AB:3A:4F:D7:A9:D5:A2:8C:06:C3:1B:EC:D8:1F:AD:F9:6C:D5:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D66EA030F43B11EFA9956AA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.26.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a0:c7:c8:de:b7:91:d2:e5:25:48:82:d0:1e:97:35:1f:08:
d0:0f:00:7e:88:ba:87:2e:1e:12:d1:48:de:64:c1:74:ba:38:
12:79:7c:5b:0c:d0:41:58:8d:9b:7f:76:d0:9a:66:8a:ea:07:
70:0a:be:c8:28:6f:07:cc:27:2b:1e:ee:9d:c8:ff:1d:6d:d0:
80:33:c2:67:27:24:42:50:47:61:e5:65:f1:70:12:2a:9b:9c:
ad:ca:5c:e1:1f:0a:41:08:b9:0e:b6:24:bc:a5:22:ab:01:19:
31:3b:5c:95:0a:7f:db:0a:6d:0d:87:77:f6:4e:3d:52:9b:c3:
c3:16:6f:e9:23:50:c8:f7:af:6b:6a:7e:37:8e:15:25:f5:86:
75:d9:37:ad:29:70:9e:05:ca:ec:20:0e:1c:a4:b3:7a:d5:57:
5e:59:74:ba:89:6f:dd:52:3d:8c:f7:d6:b3:6c:f0:c2:31:06:
43:65:51:5a:f9:10:6c:18:07:dd:d0:67:9d:82:ef:15:af:1c:
a2:3f:66:30:93:cb:13:67:e7:91:f5:46:d0:a0:8b:0d:2d:e5:
a8:28:2f:34:7d:ef:09:e2:fd:16:c4:2b:ab:08:81:ab:f5:0e:
5c:99:11:fa:a0:ce:c5:01:3a:ef:d6:30:e7:72:e8:95:2a:8b:
2c:fb:35:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:48 2025 by rpki-client