Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/001173C6D51111EFA4118C98762E951A.roa
File: 001173C6D51111EFA4118C98762E951A.roa (raw, json)
Hash identifier: Tl+G056Kf4qLn8D9ITs53WwN/x7pzTkUFNgP0+K93rA=
Subject key identifier: D7:83:10:48:7A:51:B7:BA:C0:80:8F:AC:C7:5A:08:69:1B:FC:10:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A9C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/001173C6D51111EFA4118C98762E951A.roa
Signing time: Fri 17 Jan 2025 20:24:06 +0000
ROA not before: Fri 17 Jan 2025 20:24:03 +0000
ROA not after: Sat 22 Feb 2025 20:24:03 +0000
asID: 139646
IP address blocks: 45.201.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68252 (0x10a9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 20:24:03 2025 GMT
Not After : Feb 22 20:24:03 2025 GMT
Subject: CN=678abc66-4549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:12:84:a7:e2:66:9a:3b:b5:5e:5f:81:2f:
b5:3c:55:58:fe:56:c2:d7:25:83:db:50:25:e6:1e:
4f:08:b0:61:ef:d0:08:4f:54:f9:af:26:5a:4d:55:
47:df:6f:36:3d:af:bf:b5:75:a6:2b:73:5e:e7:20:
8f:4b:a7:11:16:87:c0:ba:f6:d0:12:91:c0:f8:b6:
2f:b0:71:55:05:c3:8f:b3:84:d0:b3:b3:eb:8b:d1:
73:cd:4b:86:40:34:ad:ab:5b:dd:70:88:c7:cf:d4:
15:65:da:0d:fc:5b:25:31:63:b9:d3:b6:fb:e1:4a:
ee:aa:ba:04:f9:ca:05:9a:76:b4:9a:f9:43:47:28:
ce:8c:f2:77:e5:e8:53:02:fe:02:03:a3:7d:ef:e0:
25:3b:0f:d0:34:84:14:10:07:43:c6:cd:24:5f:10:
41:ac:6b:45:6e:68:7c:5e:19:18:8d:cf:f1:08:35:
0d:9c:c9:30:0f:b1:e1:75:51:2d:ca:1b:48:db:18:
df:69:f9:4b:1b:1d:40:76:65:80:cb:d7:56:50:5e:
cb:86:6a:62:52:79:e6:d9:c8:6f:c9:b4:2d:fe:e5:
54:a4:0a:f7:66:92:3f:a9:fb:94:3b:3a:32:41:3a:
2d:53:51:7e:57:e2:a8:58:7e:a9:a8:22:dd:42:1f:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:83:10:48:7A:51:B7:BA:C0:80:8F:AC:C7:5A:08:69:1B:FC:10:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/001173C6D51111EFA4118C98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.214.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:14:65:ed:fb:85:8c:08:11:d8:e4:04:39:08:1e:6d:b4:a1:
18:de:5c:2f:36:b2:a4:07:b5:46:69:ea:cc:77:9e:a7:b6:f4:
da:0d:3c:88:49:a8:da:c3:7e:24:15:f2:cc:56:e5:3f:ca:71:
a1:c3:fe:28:d1:6c:3c:88:9e:78:33:21:0e:3c:6f:b3:b6:09:
6b:91:a8:2f:6a:d7:c3:ed:e5:4b:17:c8:72:89:fc:67:18:42:
b1:82:d2:0b:c2:e7:e1:8a:3a:79:c5:da:f9:7c:4b:bf:52:4e:
ac:eb:df:88:91:c0:f5:66:aa:bf:c7:18:21:dd:15:e0:b9:76:
c7:cb:ef:68:17:87:e4:ec:18:bb:f6:77:f0:9f:19:80:86:2f:
71:0a:56:ea:4e:f2:32:be:90:2e:60:bb:a1:99:8c:d9:57:eb:
4e:a3:5d:53:54:a8:2c:f0:e9:58:94:e4:c3:3c:7a:cf:c5:60:
78:0c:43:af:20:39:8a:67:c7:c2:82:84:e9:0a:59:9f:e5:31:
19:77:0f:1c:79:ab:24:bf:21:3f:f1:61:be:5b:a4:61:f7:85:
ab:22:8c:57:8c:e5:22:be:06:01:b7:cc:94:13:a2:9f:c9:74:
ec:9e:44:bf:68:4f:47:a3:c4:3c:9a:af:ca:a9:cd:36:e0:fa:
a2:b4:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:55:07 2025 by rpki-client