Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/305D24B0D51D11EFB11D0C68762E951A.roa
File: 305D24B0D51D11EFB11D0C68762E951A.roa (raw, json)
Hash identifier: ntq11EUs1k10L93KvXnNhhEOpztoMsJVjF80ZSzJ98M=
Subject key identifier: E8:6B:C5:AF:BB:51:A0:3E:FF:6D:29:69:2B:19:D9:A3:EB:09:DC:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/305D24B0D51D11EFB11D0C68762E951A.roa
Signing time: Fri 17 Jan 2025 21:51:21 +0000
ROA not before: Fri 17 Jan 2025 21:51:18 +0000
ROA not after: Sat 22 Feb 2025 21:51:18 +0000
asID: 141883
IP address blocks: 45.200.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68308 (0x10ad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 21:51:18 2025 GMT
Not After : Feb 22 21:51:18 2025 GMT
Subject: CN=678ad0d9-cc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:ab:26:ff:82:d0:55:23:8e:c6:7a:92:64:
e0:ce:49:90:dd:2c:bc:35:58:91:d7:fc:d2:cf:1f:
81:90:f5:67:40:df:2a:2a:4e:7e:62:b8:0a:87:e6:
f8:51:dd:5b:10:0f:bd:09:46:82:45:85:ee:b9:b8:
19:5a:a3:65:5b:63:44:e4:f0:fb:4d:f6:f1:80:88:
69:d4:b5:c3:00:5c:03:b7:be:75:f6:c8:77:ad:8d:
ea:ab:06:bf:f7:3f:e3:75:47:3c:9d:28:1c:37:6d:
61:11:df:17:ed:12:ca:c0:10:01:74:3e:9a:7a:37:
45:e7:87:50:b9:b2:a4:80:f8:d8:a5:bf:14:24:ce:
c3:67:6c:d0:e6:63:81:c0:80:ca:b7:c1:49:79:e0:
be:e3:a6:e4:4e:b5:47:d6:fe:31:87:be:9f:4c:c8:
79:eb:8d:d7:cc:25:63:a9:ee:2e:62:93:c5:a1:e4:
31:f5:4d:91:19:46:93:94:6c:30:87:b4:fe:14:95:
b9:8b:bf:f5:a3:8c:7a:5a:f9:2a:4e:3c:a2:e4:7b:
f0:18:c9:c9:58:af:c1:6e:ac:a2:dd:76:1a:a2:92:
57:49:82:a5:45:17:c2:a8:cd:32:31:56:19:6b:de:
d3:3e:6b:58:09:35:49:0f:0b:f0:8f:1b:04:69:39:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6B:C5:AF:BB:51:A0:3E:FF:6D:29:69:2B:19:D9:A3:EB:09:DC:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/305D24B0D51D11EFB11D0C68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.20.0/22
Signature Algorithm: sha256WithRSAEncryption
79:9b:26:78:47:ef:c8:a3:f0:d4:7e:ae:9c:e7:2b:e9:b3:a4:
7b:2d:8f:df:09:97:cd:3c:44:02:1f:22:8a:6a:3f:4c:4d:61:
f9:83:f1:d9:81:87:15:66:fd:d7:eb:dd:0f:c3:62:d7:af:84:
85:72:3c:27:66:31:d0:7d:b0:10:5d:e2:69:74:d0:9e:1a:6d:
66:ca:de:a5:36:89:39:63:1b:5c:93:6b:dd:fd:22:32:56:e6:
98:a3:11:f8:2f:33:11:ce:b8:31:2b:9c:fe:9e:95:94:62:93:
21:75:c2:14:65:f8:af:70:88:47:95:d3:13:14:49:bb:0e:7c:
72:9d:af:b0:72:5a:f4:e1:4d:f9:cb:a9:4a:a8:d3:5f:a1:e7:
4a:f2:e6:98:0d:91:b6:08:b4:d4:6e:0f:8f:d9:6c:83:9c:82:
42:76:e8:cf:37:11:03:9f:4e:e7:7b:5b:76:e9:64:81:b2:23:
fd:50:3b:14:67:86:4a:df:09:f6:a3:19:f3:df:1e:61:6c:57:
dc:76:11:fd:e0:91:90:84:08:56:02:d7:82:61:77:64:41:1e:
b3:01:80:25:09:67:10:70:81:93:1b:c9:5f:94:3a:77:07:1c:
a8:0d:91:25:e5:de:9b:25:f2:60:16:fc:c3:e6:9b:61:a8:ff:
7e:73:df:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:31:36 2025 by rpki-client