Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10F8DA6CD50C11EF8AA47979762E951A.roa
File: 10F8DA6CD50C11EF8AA47979762E951A.roa (raw, json)
Hash identifier: +ig7mFIG35GLWSb97Cym/FR1tdMiLkI31Bk9qjm5la8=
Subject key identifier: 2D:4B:CD:30:CE:F1:19:74:37:E9:5D:4C:72:0D:BA:44:C9:9B:DE:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10F8DA6CD50C11EF8AA47979762E951A.roa
Signing time: Fri 17 Jan 2025 19:48:47 +0000
ROA not before: Fri 17 Jan 2025 19:48:44 +0000
ROA not after: Sat 22 Feb 2025 19:48:44 +0000
asID: 54801
IP address blocks: 45.207.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68226 (0x10a82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 19:48:44 2025 GMT
Not After : Feb 22 19:48:44 2025 GMT
Subject: CN=678ab41f-1038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:b7:44:a3:96:cd:77:1c:96:2e:51:24:60:
07:31:05:6a:51:8c:4e:9b:57:ac:43:32:f3:87:fb:
bb:1b:4e:db:73:51:89:5e:e6:b5:64:bb:22:86:4f:
28:7b:4b:7e:3d:64:6a:63:e6:84:27:14:83:22:1d:
c4:ab:03:e3:c8:06:1c:35:46:a6:9f:39:6b:72:5d:
cb:c3:c5:de:fd:09:8a:9f:c1:4b:cf:c1:c9:b9:70:
2a:2d:7a:96:21:93:f7:51:82:29:bc:d1:91:f2:88:
8b:e3:0b:7d:dc:d1:eb:46:3b:0b:d7:78:5d:e1:40:
27:e6:b5:1a:fd:30:cb:f8:0a:df:2f:9f:11:08:db:
ab:9f:9c:19:7b:3e:e3:66:07:87:b4:30:b3:9f:0a:
13:1e:4d:c3:54:95:97:5e:0a:8d:b6:49:0f:6a:33:
b6:e1:5b:28:70:28:fd:06:1d:c6:11:29:53:b8:c4:
e7:e0:bd:b7:2d:06:44:bc:0f:f4:af:84:f2:45:d7:
8c:d8:1d:58:e4:6e:d0:d9:b1:79:d7:4e:f3:79:84:
4e:66:5a:9a:8a:eb:e3:c4:72:c3:61:b1:d4:2a:63:
74:56:58:4a:4d:92:b2:bb:fd:99:8e:82:71:fa:bd:
35:d9:92:d7:41:11:39:01:90:ef:a5:ef:1b:e0:29:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4B:CD:30:CE:F1:19:74:37:E9:5D:4C:72:0D:BA:44:C9:9B:DE:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10F8DA6CD50C11EF8AA47979762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
89:be:93:fe:5a:cd:8b:4f:92:e5:c6:6c:a8:b6:6f:b1:ec:7e:
f0:5f:da:6e:28:44:18:ab:1b:42:94:dd:6f:4a:70:39:3d:16:
37:d9:4e:f7:b7:8b:46:fd:a7:70:ff:67:06:3b:74:46:c6:42:
b6:18:b0:7f:4e:ff:22:39:43:7a:68:96:6a:f5:29:ba:e4:dc:
22:a6:c6:58:34:03:67:10:d5:38:8c:78:3a:b0:94:50:d2:e9:
f2:7e:d6:05:c6:44:16:1e:06:95:64:8a:48:24:a5:d9:ab:ae:
94:60:c2:e5:11:08:72:1c:e7:1a:b5:f9:f2:23:0b:ba:17:68:
bb:76:8c:4e:24:ae:e7:65:72:d0:6e:8e:58:b8:fe:bc:cf:b2:
84:1b:5c:60:a5:08:29:63:07:ef:0d:d8:dd:e8:8b:a5:89:83:
b6:be:cf:d7:5a:52:bf:57:92:64:0c:56:1f:b7:eb:7f:34:9b:
87:8f:08:d9:96:17:bb:e4:3c:6f:aa:db:da:5b:86:64:16:09:
33:7c:1d:da:82:b9:d8:d9:d9:b1:d2:36:c5:4d:ca:3d:54:91:
a6:08:ab:bf:f8:44:f8:51:81:3a:4c:25:82:3d:22:7c:24:07:
3b:93:fc:3d:f3:db:44:f9:69:3a:d3:21:00:c1:f4:b5:12:f5:
ba:37:5c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:24:42 2025 by rpki-client