Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0589AFFED51A11EFB9690C54762E951A.roa
File: 0589AFFED51A11EFB9690C54762E951A.roa (raw, json)
Hash identifier: J+g3dQ4R80myg9W1bWKHagaov62466KaSWpzNAw+EB0=
Subject key identifier: 54:D8:15:C3:B9:3A:F8:3A:3E:56:49:8E:24:A9:CF:3F:4A:F2:5C:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AC4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0589AFFED51A11EFB9690C54762E951A.roa
Signing time: Fri 17 Jan 2025 21:28:41 +0000
ROA not before: Fri 17 Jan 2025 21:28:37 +0000
ROA not after: Sat 22 Feb 2025 21:28:37 +0000
asID: 139646
IP address blocks: 45.200.16.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68292 (0x10ac4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 21:28:37 2025 GMT
Not After : Feb 22 21:28:37 2025 GMT
Subject: CN=678acb89-ca24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:4f:2a:2a:4d:c5:cb:17:78:b9:65:d3:62:
88:4a:8a:cd:dc:d5:61:c1:18:41:20:49:56:54:06:
99:49:74:29:5a:f5:7f:31:30:cf:2a:ef:9f:b8:bf:
68:e7:09:ce:40:72:04:99:0c:ef:c6:f3:83:38:30:
3e:46:32:c8:18:1b:ce:81:3c:f7:81:e5:d5:70:ad:
b7:e5:14:3c:ad:c8:e9:7d:5f:2a:2d:1d:0c:ba:c6:
ee:7f:7c:74:41:52:f2:b3:e3:9c:26:a1:cc:a4:d4:
a8:49:c9:73:85:32:3a:16:69:7f:43:2e:f9:ae:ee:
2f:95:18:77:a7:09:ef:90:87:32:40:92:4e:e8:e7:
24:8d:28:5d:c3:09:13:68:be:21:00:49:eb:3a:27:
7c:46:da:6a:02:39:94:94:22:28:96:be:65:4b:18:
7e:17:73:c9:7d:66:48:90:80:26:9a:ec:41:13:33:
4d:89:43:79:ee:f5:bc:bd:a0:b1:02:92:bd:24:8a:
8d:7f:32:0e:cb:d9:45:01:a5:b5:09:d9:8d:77:95:
27:09:8d:de:0f:c3:42:69:fb:a1:47:b2:41:88:a0:
5c:6f:4a:e3:7d:4f:24:37:25:10:25:03:b2:17:27:
39:c0:32:cb:6d:a4:7d:17:2a:1f:5e:01:0a:ee:0e:
be:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:15:C3:B9:3A:F8:3A:3E:56:49:8E:24:A9:CF:3F:4A:F2:5C:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0589AFFED51A11EFB9690C54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.16.0/23
Signature Algorithm: sha256WithRSAEncryption
41:80:8e:36:77:b7:47:36:b5:95:22:e0:99:1d:3f:f4:e1:eb:
82:76:42:29:8a:a1:5f:5d:40:80:0d:e6:d4:fd:97:2f:e6:ba:
92:1a:8e:f3:82:db:b1:d9:08:aa:24:6e:ea:b9:b7:08:9b:1c:
50:d9:ea:25:c8:7d:a4:0d:16:ae:35:f9:e5:21:0f:e5:29:54:
f0:aa:c8:86:d8:bf:f0:84:be:59:e4:91:3c:93:0c:8f:c1:43:
d6:9a:d9:18:fe:4e:84:04:56:6a:30:61:6b:22:0d:5b:96:af:
96:73:54:7c:ed:3f:bd:dd:2d:c8:12:93:22:81:45:da:12:f9:
f4:60:f4:33:59:1b:d5:d6:aa:e9:63:d5:20:d1:76:c3:62:9c:
0d:d1:00:c0:b5:78:16:df:fc:4b:9e:e2:bc:c2:5f:64:4a:73:
a0:8d:0a:c7:ab:9f:da:ce:19:ae:be:25:cc:50:ec:b6:fa:8c:
42:e2:24:ce:12:c9:3f:7c:d9:56:95:e2:8f:19:30:8f:d5:78:
ac:f2:0e:c7:1b:fa:8f:31:37:97:48:fe:f0:73:ce:3a:f2:ae:
35:1c:6e:88:6e:f3:54:bb:16:95:a0:ee:aa:e2:5a:f5:9e:87:
6c:8f:62:57:f0:a3:2c:06:fc:eb:45:0b:12:cb:d1:d7:ee:2b:
33:1c:6e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:16:27 2025 by rpki-client