Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B12ACE6D70811EF8C9AEC83762E951A.roa
File: 1B12ACE6D70811EF8C9AEC83762E951A.roa (raw, json)
Hash identifier: r7IfU8QmbMaG95udlgXOQGeiLmB6zdHydSiKiofSglA=
Subject key identifier: 53:42:7E:00:93:4F:31:3F:F6:F4:1D:69:2C:A1:71:A5:C8:BE:69:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B12ACE6D70811EF8C9AEC83762E951A.roa
Signing time: Mon 20 Jan 2025 08:25:29 +0000
ROA not before: Mon 20 Jan 2025 08:25:25 +0000
ROA not after: Sat 01 Feb 2025 08:25:25 +0000
asID: 44559
IP address blocks: 45.200.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68595 (0x10bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 08:25:25 2025 GMT
Not After : Feb 1 08:25:25 2025 GMT
Subject: CN=678e0878-fb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:40:d2:92:49:bd:8c:11:25:6c:82:0f:71:
af:a8:28:d4:ec:8d:c7:69:2f:d6:9b:a8:90:8a:42:
6b:dd:98:0f:91:bf:0a:0b:0f:9b:67:cf:71:b1:a2:
17:74:06:76:d1:19:50:f6:be:3a:1a:cc:a1:ed:f8:
12:7a:22:21:6d:c3:dc:d0:7a:e7:2a:6f:fb:af:a2:
ef:c2:d2:4d:b2:97:bd:3d:33:6b:de:8d:49:2a:6b:
db:3e:f8:83:d3:00:b0:1a:0f:24:80:9a:c5:00:66:
01:76:9b:96:cd:5c:7c:23:1c:e3:23:0d:42:3c:2f:
0d:18:d9:12:22:04:d7:60:1e:96:89:76:94:c0:e3:
6c:dd:47:19:0a:d6:40:02:ae:45:02:a8:bd:30:e3:
99:a5:74:2d:83:6b:52:a2:cc:33:e4:d8:54:e4:2a:
cf:60:4b:b7:9e:ba:ab:0b:3d:c1:52:15:f7:09:90:
8a:dc:93:f3:e9:3b:76:f1:cb:c0:a0:42:8b:70:82:
82:53:d5:e8:a0:db:d5:45:ea:a7:ae:ab:c3:ec:1d:
20:1e:54:ea:ec:42:f3:82:13:7d:dd:4a:89:90:66:
75:7f:86:01:a7:0b:78:84:12:4d:3c:fa:2a:66:71:
4d:d4:54:7c:93:6f:be:45:93:bb:49:50:de:f9:68:
7a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:42:7E:00:93:4F:31:3F:F6:F4:1D:69:2C:A1:71:A5:C8:BE:69:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B12ACE6D70811EF8C9AEC83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.180.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:2d:f9:b9:b2:d1:58:6a:7d:63:5a:0d:2b:57:e3:91:de:c9:
cf:77:2a:a2:d9:9d:34:02:e1:a0:68:4d:8a:ca:62:f8:fa:b3:
5f:bf:bf:ae:97:08:8d:5b:8a:65:1f:33:9b:e4:54:69:f8:ac:
4c:42:cf:bf:2f:f6:a2:5f:98:c6:54:bd:fd:1d:e0:a5:9c:66:
94:e7:4b:a9:eb:13:8a:aa:74:32:14:57:e3:65:51:26:95:b2:
4b:e1:f8:90:72:68:8c:5b:8a:a8:f4:0e:32:80:a2:bc:27:1f:
3d:f1:b2:ce:b0:5f:44:7c:95:c0:62:c9:93:9c:47:6d:61:87:
3f:a2:60:43:85:62:40:ac:73:4b:ca:76:30:0a:7d:b9:e3:11:
41:3f:bd:22:3e:d7:a2:f5:9a:fc:75:82:42:37:9c:5e:8f:54:
2d:a3:92:cc:aa:44:14:05:fc:c0:c8:49:2a:ef:9a:64:fb:9f:
73:8c:92:80:59:f8:0c:bd:5d:23:a1:0d:e5:b0:48:2f:7b:07:
3f:a7:91:6b:47:ba:c9:4f:26:8a:bc:7a:11:5f:7b:6b:25:51:
9f:2d:bb:67:49:a1:00:48:00:fd:96:73:eb:b6:d4:bf:61:41:
1e:e2:b4:19:a1:07:31:f1:90:85:ac:3c:bd:2a:50:06:74:b1:
81:d6:25:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:03:20 2025 by rpki-client