Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED028D8EE9DC11EF888E0FAD762E951A.roa
File: ED028D8EE9DC11EF888E0FAD762E951A.roa (raw, json)
Hash identifier: zbQCLASshKRcVK8R6SxqHXPSLi9IfpKR5SKfVzfqkkA=
Subject key identifier: 73:AF:1E:26:2B:FB:B4:1F:E2:43:3D:D9:01:11:16:FC:32:BE:FF:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0121D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED028D8EE9DC11EF888E0FAD762E951A.roa
Signing time: Thu 13 Feb 2025 07:34:15 +0000
ROA not before: Thu 13 Feb 2025 07:34:11 +0000
ROA not after: Sat 08 Mar 2025 07:34:11 +0000
asID: 395886
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74192 (0x121d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 13 07:34:11 2025 GMT
Not After : Mar 8 07:34:11 2025 GMT
Subject: CN=67ada077-8d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:49:c8:35:a9:a5:c3:97:e4:82:78:3c:b3:
75:66:ed:0d:d6:17:e5:74:f7:01:0a:aa:62:70:8f:
f0:2e:cc:98:85:28:71:73:e4:a0:2d:53:51:d6:a8:
11:38:98:98:1a:eb:2b:0b:7e:f2:9d:b0:4e:17:52:
86:a7:e0:30:d2:ba:b5:50:49:e8:6b:40:83:c1:6c:
b5:a3:98:a9:f3:87:0f:fa:ad:67:ba:49:a8:1d:ba:
9d:8b:c3:9f:a7:84:b0:0d:0a:52:c9:f7:2b:78:20:
ba:15:f4:f3:da:94:9d:43:ca:a5:66:79:ce:32:04:
b2:03:ee:7c:bf:d1:8e:9a:8d:18:53:0a:56:36:96:
0c:15:63:b9:db:d8:8d:a1:60:61:a1:95:08:f9:cb:
50:cb:92:53:0f:e0:dd:af:54:65:1e:a2:b8:94:ac:
d4:10:50:2b:f6:7b:2e:62:b4:f4:32:31:6d:9f:96:
e3:97:7f:b1:68:37:35:b8:a1:aa:1a:f3:e9:bb:64:
33:fe:ba:e1:12:c6:cd:a0:48:6a:c2:dd:95:7c:e4:
6f:e7:5f:10:88:33:83:1a:a8:c6:43:95:fb:b5:55:
0a:1a:e4:5b:38:7c:52:94:88:3d:ca:ff:cb:56:4e:
f2:0a:69:43:26:3c:b5:2a:92:b1:38:27:62:ab:1f:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AF:1E:26:2B:FB:B4:1F:E2:43:3D:D9:01:11:16:FC:32:BE:FF:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED028D8EE9DC11EF888E0FAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:a4:2b:19:7c:88:ab:db:17:e1:cf:10:30:ab:7a:c7:63:eb:
ee:6e:57:03:f7:c1:5e:17:24:e2:b8:e5:ce:ca:02:ec:15:4c:
ef:a6:8e:6c:c7:fe:39:c0:e7:a5:cf:45:d8:c6:b1:c7:25:b3:
b5:6e:b0:2a:1d:d6:a1:8a:8e:49:51:4b:85:89:c8:bf:1e:70:
d0:71:fd:d8:37:9c:b8:3d:5c:53:ac:18:10:80:ff:23:0f:ae:
62:01:f1:60:32:3a:fe:9a:1b:0c:33:15:1c:b6:03:44:03:3b:
4d:8e:c3:b9:f7:26:74:27:a4:da:45:c8:11:46:97:a4:f2:a0:
27:72:ea:df:60:ba:5a:11:bd:11:82:79:fd:05:60:69:0f:db:
c8:9b:5c:fc:34:b4:56:c9:7f:b0:16:cf:1b:d9:04:95:21:5c:
73:92:8e:3d:5c:5a:f5:0b:fe:e5:44:22:12:13:75:6e:c6:fa:
c6:d6:86:7a:a1:4b:fb:e9:e5:5f:14:ab:de:f5:a7:57:14:81:
be:41:8e:50:12:ed:48:32:61:0a:e7:67:ea:d2:9e:a7:e6:86:
28:93:ad:88:9b:9b:b7:ce:5e:59:ed:85:13:9b:bb:c6:08:aa:
c4:36:c5:28:73:e9:9b:1e:d7:36:14:36:93:30:76:94:54:4a:
2c:14:9a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:31:43 2025 by rpki-client