Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/181FEB0ADFFC11EFB23A1798762E951A.roa
File: 181FEB0ADFFC11EFB23A1798762E951A.roa (raw, json)
Hash identifier: jkfX1kLiomjIplMtkaSKKImSYpGhyVbtRXDHm7duL3U=
Subject key identifier: B5:7E:81:A1:FE:37:C6:2E:07:A5:DF:2E:6E:84:09:53:F0:11:53:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/181FEB0ADFFC11EFB23A1798762E951A.roa
Signing time: Fri 31 Jan 2025 17:52:10 +0000
ROA not before: Fri 31 Jan 2025 17:52:06 +0000
ROA not after: Mon 03 Mar 2025 17:52:06 +0000
asID: 398823
IP address blocks: 45.205.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71367 (0x116c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 17:52:06 2025 GMT
Not After : Mar 3 17:52:06 2025 GMT
Subject: CN=679d0dca-92e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:8c:5b:57:e0:4b:63:78:4b:73:67:1f:9b:
22:91:9e:64:41:c3:09:98:8c:bf:bd:21:1c:76:ba:
45:d7:f2:c8:98:e0:30:14:d9:91:9f:b1:9b:c6:ff:
ce:a2:67:a9:4a:38:25:7c:6c:d4:5a:36:2c:db:0e:
ed:5b:ad:ad:7e:e6:45:8b:4b:76:dd:ba:39:d3:1e:
bf:68:b9:6b:c9:8d:9c:a6:1c:8a:a4:cf:2d:01:d9:
f9:09:b7:d3:12:ba:1c:c2:58:af:58:5e:3b:ae:6c:
d9:a7:64:07:8a:9a:9b:08:96:a0:98:2b:a6:74:e0:
ef:a6:ea:49:4b:6f:eb:57:84:a5:45:75:fb:a7:d7:
c4:63:6d:e6:df:26:9c:3e:aa:68:57:56:ce:af:4b:
61:36:e1:dc:da:d4:0e:15:a1:ea:17:fd:e6:da:94:
c4:83:82:a4:c1:46:8f:16:8c:a4:96:b2:8f:66:d1:
03:46:fd:a1:74:33:fa:b4:55:45:c1:4b:02:1a:01:
76:b6:d3:47:0d:fc:0d:4e:e4:1b:d2:5c:c3:03:e1:
87:53:ff:8c:d3:8c:14:20:22:a8:c9:13:fc:a2:55:
f7:ba:ae:c7:2d:57:19:f3:ae:08:67:8a:5e:7a:dd:
8b:91:f5:64:cd:f2:53:6c:64:e8:1f:1d:4f:95:33:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7E:81:A1:FE:37:C6:2E:07:A5:DF:2E:6E:84:09:53:F0:11:53:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/181FEB0ADFFC11EFB23A1798762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.240.0/20
Signature Algorithm: sha256WithRSAEncryption
76:a0:71:4b:9d:8a:c3:67:08:85:53:67:5a:0c:96:93:91:bc:
9e:f5:7b:bb:5c:0c:cd:5a:71:5f:6e:18:f5:00:fa:63:9e:7b:
f0:af:15:19:ce:ab:9e:6c:9d:fe:9b:fd:af:f7:fd:d8:6f:43:
11:9c:bc:26:44:d2:36:fc:36:26:12:69:df:ff:fe:5a:6d:38:
c2:e8:a3:5a:32:7f:93:62:68:49:a0:67:0a:a8:e0:81:d6:32:
cd:fc:31:c0:19:ad:39:b8:3d:99:a1:79:96:50:11:fa:65:16:
1d:dd:e7:26:4e:24:6d:d9:4f:a7:51:9e:a9:4c:d4:4c:2d:94:
f2:ee:2c:81:d2:0c:d8:3a:82:07:e6:ac:dd:f4:c4:af:f3:93:
d0:8b:d2:b9:ba:46:46:14:6b:6c:35:ff:3f:ac:01:0f:52:d5:
1d:8c:72:8d:6c:fb:32:e3:c9:90:62:30:e3:32:0c:00:8a:27:
cb:2c:df:95:9f:74:ce:e0:a9:10:4f:a1:36:d1:59:6a:3b:3f:
6b:c0:22:1f:36:25:0e:f3:ea:ae:89:8c:4f:1b:67:7f:65:a1:
b6:02:7b:45:c3:0d:27:da:e0:b2:a5:a0:26:ed:95:27:a0:ec:
3c:7d:88:75:44:e9:5e:d6:68:3d:76:61:31:ec:b6:c6:cf:51:
b2:6a:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:18:48 2025 by rpki-client