Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2953DE42DA9111EF8D55C788762E951A.roa
File: 2953DE42DA9111EF8D55C788762E951A.roa (raw, json)
Hash identifier: 6LKL9V4GnsuSmbCl9HafOt+DqQyndjTTwAFt1Du+soQ=
Subject key identifier: 8F:F0:F2:1A:82:D4:5A:46:22:E4:81:2A:C3:B2:E7:D9:34:78:87:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011078
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2953DE42DA9111EF8D55C788762E951A.roa
Signing time: Fri 24 Jan 2025 20:24:07 +0000
ROA not before: Fri 24 Jan 2025 20:24:03 +0000
ROA not after: Tue 25 Feb 2025 20:24:03 +0000
asID: 202656
IP address blocks: 45.200.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69752 (0x11078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:24:03 2025 GMT
Not After : Feb 25 20:24:03 2025 GMT
Subject: CN=6793f6e7-0f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:eb:56:52:cd:bf:78:08:28:59:29:2d:fc:1b:
66:ca:f0:99:06:7c:30:10:18:cb:a3:a5:90:7a:64:
62:cc:de:47:79:82:e8:51:a2:56:ab:df:8e:e3:d1:
4d:ea:19:b2:c9:c6:bc:47:e0:66:08:df:16:7b:22:
94:29:a7:87:13:91:7b:88:6f:31:53:f3:32:ec:ee:
68:b0:ed:66:78:7a:e5:3b:a4:73:4d:2e:59:ee:0e:
1c:b6:e9:19:a6:f0:67:e8:07:4b:0f:cd:50:05:02:
68:ba:be:e4:b3:90:f5:48:bb:b6:3b:1c:66:e7:1f:
e0:b3:d5:7d:90:a3:cb:91:09:8b:32:9b:4e:aa:4b:
55:cd:dd:31:75:1f:c8:e3:3a:c6:ca:92:8a:14:cc:
71:fc:a1:00:51:a8:8d:9a:af:ad:c3:9e:19:07:40:
f6:b1:f9:8e:4e:6b:80:97:ce:8e:8a:4b:85:b3:8e:
f1:2c:2f:50:59:b7:fe:a2:cd:9f:6e:13:c0:33:de:
07:57:a9:8b:46:bf:4b:68:10:40:bc:67:d6:9e:ae:
01:12:10:07:4c:b6:dc:33:b8:59:b0:98:bf:49:08:
5f:43:72:0a:b6:26:90:cf:b0:df:a4:22:3a:e6:27:
ef:42:64:d2:25:0c:97:f1:c1:d7:1c:d3:aa:e7:d6:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F0:F2:1A:82:D4:5A:46:22:E4:81:2A:C3:B2:E7:D9:34:78:87:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2953DE42DA9111EF8D55C788762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.174.0/24
Signature Algorithm: sha256WithRSAEncryption
70:08:18:fc:96:fa:5a:1a:e1:01:61:e6:0e:c3:06:68:7c:ee:
71:aa:53:08:e2:44:aa:4d:0d:09:11:ec:d8:56:29:b9:7e:8f:
ed:25:6d:0b:bd:e0:fc:13:26:73:ed:5a:f4:11:83:87:10:81:
8b:28:b5:4b:7a:01:8f:ea:5a:a6:87:98:ca:65:08:ee:90:7c:
c1:69:a0:34:64:d7:a0:02:a8:95:14:95:4a:c1:f0:d7:8b:36:
47:28:47:52:d2:74:e1:11:31:b2:b1:c0:ab:c2:7c:49:7e:88:
d5:97:fd:a7:bf:58:5a:22:82:7c:dc:6b:43:8d:65:65:e0:ca:
5e:53:e6:77:d1:be:c2:29:87:08:84:f4:bb:3d:dc:64:09:ac:
9e:e6:7b:47:2a:f7:73:a7:5b:28:c4:06:ad:ee:f1:1a:27:cd:
6a:c0:6a:cc:f4:a8:2f:26:b2:74:87:48:e2:10:75:31:38:28:
f2:6c:da:a9:c8:a1:54:e1:aa:b5:9a:18:63:14:24:b8:b6:78:
21:a3:d2:6e:a5:9f:c8:45:04:96:fc:42:80:f7:89:d9:ae:6c:
4c:01:84:4b:f7:d6:8e:1f:d8:1b:6a:2e:9f:1b:2d:b3:a7:2b:
f3:22:36:17:be:de:00:1c:fa:98:ba:d0:75:a1:77:21:16:6f:
2d:d5:40:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:57:22 2025 by rpki-client