Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32136AF4CCCF11EFA8A0B175762E951A.roa
File: 32136AF4CCCF11EFA8A0B175762E951A.roa (raw, json)
Hash identifier: SE4epazUMRJDrXiR+lhIf0KmUOZEvBDCTfGJKIqRVSY=
Subject key identifier: 6E:92:19:4B:9F:27:16:73:D9:7B:15:85:E3:B7:F7:DC:DF:A4:18:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FAAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32136AF4CCCF11EFA8A0B175762E951A.roa
Signing time: Tue 07 Jan 2025 08:12:54 +0000
ROA not before: Tue 07 Jan 2025 08:12:51 +0000
ROA not after: Sun 23 Mar 2025 08:12:51 +0000
asID: 135097
IP address blocks: 45.207.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64170 (0xfaaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 08:12:51 2025 GMT
Not After : Mar 23 08:12:51 2025 GMT
Subject: CN=677ce206-bedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:bd:82:9c:3f:1e:e9:4a:af:d3:b7:27:63:
e7:93:b6:fa:bf:14:1f:21:01:c1:e8:24:59:4e:82:
9b:13:b5:da:e4:ae:37:14:18:58:a3:de:d4:ff:27:
28:4b:ff:ab:7d:15:c5:89:6f:48:7d:3e:7e:57:58:
cf:96:ba:d1:55:2f:67:b6:eb:39:2d:53:71:b6:44:
75:08:8e:81:32:36:05:a6:e1:d0:ac:30:95:2e:42:
9e:65:4c:15:b8:71:b4:63:23:e0:48:e0:f1:52:c3:
c4:cf:29:e8:ae:ae:e6:dc:76:0e:ee:a3:57:0d:f3:
b4:52:09:56:ab:33:7f:92:5b:5a:8d:a5:7b:18:bb:
bc:61:62:5f:5a:dc:98:94:93:d3:6f:d8:b5:70:45:
ed:3c:1a:c9:d5:b1:ba:53:7f:05:90:94:f5:7b:39:
77:27:84:3a:ef:9e:85:b6:58:a5:10:73:0c:ea:46:
8b:27:f1:3a:63:86:74:80:5b:19:c4:d6:c1:f8:49:
d7:3d:6c:ac:6f:02:ab:64:b6:15:82:fa:d8:33:ca:
9e:a1:df:33:ff:9f:c9:a4:18:23:5c:c1:3c:36:25:
39:5c:7b:60:19:55:e1:05:80:39:72:13:46:c6:3f:
e4:47:1b:70:ff:ff:96:5a:a3:79:7d:4b:09:af:f2:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:92:19:4B:9F:27:16:73:D9:7B:15:85:E3:B7:F7:DC:DF:A4:18:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32136AF4CCCF11EFA8A0B175762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.64.0/18
Signature Algorithm: sha256WithRSAEncryption
74:5c:f1:4d:10:57:9a:02:1e:c8:d2:fd:a2:fc:8f:04:da:db:
a5:59:3b:ca:6b:8c:44:65:ec:25:d0:e5:75:33:f2:8e:c7:2c:
94:d2:34:08:23:03:41:cd:0d:1e:b4:b7:b6:66:0b:0f:c9:d7:
05:45:ff:90:f2:b0:e3:32:f3:99:96:02:13:87:dd:0f:bc:a6:
39:d7:5e:77:6d:33:40:f1:0f:0a:ee:9d:78:3d:92:d1:b7:03:
72:80:79:e7:2c:17:11:c1:e0:6a:6e:59:17:44:6a:8a:3e:5a:
74:84:74:40:85:bc:22:c7:46:5e:3b:9b:56:95:46:80:fc:78:
41:6c:c8:d2:02:19:e8:ef:85:d5:23:2d:da:20:8c:c8:9c:56:
1f:ae:34:d8:45:42:78:43:12:a8:fc:9c:0a:60:ca:cc:70:49:
fc:fb:ac:13:58:4f:3b:01:03:41:a9:56:c9:91:85:cb:29:3d:
c2:ea:02:c3:a0:6b:01:f0:88:37:b4:24:29:78:0d:3c:20:75:
ce:7a:da:14:80:c0:ed:f2:65:ba:d1:da:c0:99:c5:ef:aa:b2:
13:dc:86:bb:14:1a:46:df:ee:e2:18:7d:0e:a9:f1:fc:56:a3:
dd:de:dc:ea:19:c1:a5:00:0f:c5:93:03:24:e2:38:da:ed:24:
52:e8:99:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:23:19 2025 by rpki-client