Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B554712DA9311EFA3E2F295762E951A.roa
File: 0B554712DA9311EFA3E2F295762E951A.roa (raw, json)
Hash identifier: aagE3epjFKeirJSyxhcvtx+yhwNZKIduj1eTcQnk+pY=
Subject key identifier: 25:65:B8:2E:2B:CC:E8:19:CD:C9:72:71:C4:29:66:92:35:D4:7E:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011084
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B554712DA9311EFA3E2F295762E951A.roa
Signing time: Fri 24 Jan 2025 20:37:36 +0000
ROA not before: Fri 24 Jan 2025 20:37:32 +0000
ROA not after: Tue 25 Feb 2025 20:37:32 +0000
asID: 202656
IP address blocks: 45.200.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69764 (0x11084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:37:32 2025 GMT
Not After : Feb 25 20:37:32 2025 GMT
Subject: CN=6793fa10-44bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:9e:ad:a2:a4:d5:d0:24:46:78:10:cd:14:
c5:f0:98:a7:43:c7:c7:b1:e8:ce:29:d5:fc:8c:bb:
de:e7:9d:ea:bf:10:b1:34:2d:09:5f:e1:7a:ad:e5:
ad:fc:95:fe:58:10:58:e3:e4:40:45:bc:f2:8d:a7:
06:c8:a2:6a:2b:da:5e:ca:9d:08:17:be:fb:eb:2e:
54:3d:2e:b9:ca:1b:eb:01:53:30:4f:ca:7b:ee:37:
a6:f7:53:77:cc:3f:9d:0b:9d:87:1f:4b:d0:f7:0a:
67:2d:8e:db:c6:64:e4:4d:ef:ac:77:93:8d:0e:96:
20:a0:c6:83:d8:bf:5f:29:e8:74:71:4f:f6:dc:12:
54:69:81:04:e2:b0:77:19:35:8c:43:32:09:77:ca:
a0:c1:2f:ab:9b:3e:79:de:7f:b9:ac:6d:99:53:09:
27:95:b2:8a:d7:bd:34:7d:1a:ae:70:af:44:1d:14:
ff:e1:04:7a:92:b8:bc:ef:e4:f9:d8:8f:e8:52:6c:
41:ed:00:a2:9e:f6:61:16:1d:50:74:23:e1:89:a9:
51:2d:4f:bb:cd:c8:2a:e5:00:c7:e3:05:cc:c4:35:
e1:51:29:ef:0b:6c:b8:ac:b7:21:d3:bf:0d:66:75:
4c:4c:a0:33:9a:4f:f2:cf:81:d1:c7:cf:ee:a3:99:
ac:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:65:B8:2E:2B:CC:E8:19:CD:C9:72:71:C4:29:66:92:35:D4:7E:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B554712DA9311EFA3E2F295762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.178.0/24
Signature Algorithm: sha256WithRSAEncryption
99:51:c2:33:33:73:7b:ac:c8:f2:39:c3:d1:a0:43:e3:d4:66:
09:7a:13:d7:8e:cc:23:0b:55:d5:87:59:41:c6:85:a2:21:a4:
d1:81:08:8d:0b:55:f6:91:89:82:91:f3:e5:c6:b5:11:ae:9d:
80:af:21:8d:b7:7e:9e:40:60:67:c6:90:d4:2a:83:7f:ce:c6:
3f:7e:ee:ce:1f:01:1e:25:82:ac:ca:27:f6:22:c8:ec:0c:24:
d0:05:7b:b6:31:c6:b7:60:52:67:de:80:06:b1:f7:92:e3:fa:
59:1d:0a:42:ee:df:0e:a5:36:fc:24:f9:3f:3a:66:92:74:11:
c8:f6:d8:38:52:8a:0e:f0:fe:f1:3b:a8:8d:ff:2f:46:be:5c:
34:36:7f:e7:cc:5e:23:da:2a:85:2f:1a:36:92:9a:bd:38:67:
35:64:9c:61:2e:ab:b0:1a:a2:9b:4d:db:51:f3:2f:47:38:51:
b5:5b:c0:94:0d:44:c9:55:4d:18:77:7a:fb:96:94:27:95:80:
12:61:13:68:86:25:8f:13:df:05:8b:dc:9e:39:8a:27:a5:ff:
ef:84:2f:bd:75:18:fb:ca:fe:38:16:06:b6:d8:c1:69:f2:9f:
08:a6:91:9c:75:f3:9f:5c:23:0f:2e:7a:fd:b4:6c:f8:48:5e:
ec:43:44:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:34 2025 by rpki-client