Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3924B41AD7CE11EF8A2AFC95762E951A.roa
File: 3924B41AD7CE11EF8A2AFC95762E951A.roa (raw, json)
Hash identifier: KhRsOsokCqSFm9ZURFbIzV25qy5o3FeOpXE1rqgqaZk=
Subject key identifier: 9F:79:00:20:9A:22:3B:99:A5:C7:7C:2D:91:CE:B3:4D:AD:C0:E3:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CE6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3924B41AD7CE11EF8A2AFC95762E951A.roa
Signing time: Tue 21 Jan 2025 08:03:39 +0000
ROA not before: Tue 21 Jan 2025 08:03:36 +0000
ROA not after: Sat 01 Feb 2025 08:03:36 +0000
asID: 48031
IP address blocks: 45.200.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68838 (0x10ce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 08:03:36 2025 GMT
Not After : Feb 1 08:03:36 2025 GMT
Subject: CN=678f54db-0ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a5:3b:c9:90:63:26:c3:1b:bd:fe:38:89:1e:
12:82:ff:ab:b2:61:c9:64:b9:b7:33:00:8e:80:5e:
7d:21:1c:c8:29:69:1e:9b:95:e6:86:b6:fa:45:81:
06:41:64:14:f5:9a:aa:3d:50:25:63:c5:92:5b:7a:
7e:53:25:a7:2f:71:3b:a7:3c:3c:a4:76:e8:03:4e:
59:53:b8:31:f6:3c:7b:fb:10:73:37:c1:06:7b:7a:
2f:ec:8d:5b:d5:66:71:f2:5a:5e:f4:9d:a1:34:13:
16:de:c4:cc:8d:41:36:60:3b:0f:fd:57:2c:13:1b:
0f:5b:c1:2a:40:70:f9:f9:ae:63:db:8e:b6:a2:52:
95:29:77:d4:51:62:98:ab:53:38:6a:39:e7:ba:b8:
9b:29:db:99:6f:9d:26:85:78:12:9c:f8:64:6c:0b:
69:25:fa:4f:25:b6:1c:d9:9a:9a:48:00:8a:6a:4d:
53:c8:d1:b9:68:0b:15:23:a0:8b:b5:d7:f0:4a:e0:
53:5c:2c:43:ff:35:42:8a:b0:32:83:4f:6b:89:b9:
1d:20:90:47:79:3b:61:e6:84:41:ed:ec:10:5a:8f:
cc:82:db:92:49:57:60:5c:46:d0:25:26:10:c4:88:
57:39:75:59:a7:1d:4b:c5:83:2b:7f:2e:c9:1d:da:
47:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:79:00:20:9A:22:3B:99:A5:C7:7C:2D:91:CE:B3:4D:AD:C0:E3:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3924B41AD7CE11EF8A2AFC95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a6:ce:43:f4:62:62:9b:36:94:56:ef:5d:6e:1d:7f:17:a7:
65:b7:80:94:d6:43:92:a8:e9:51:25:30:b0:88:db:4f:6f:0e:
23:53:4f:40:b9:7a:ef:56:8c:aa:7e:9c:3c:3d:cb:09:1e:c5:
41:b4:89:7e:63:40:3f:77:e1:58:b9:fb:c2:1a:bb:82:9c:52:
06:6a:11:44:27:cd:d7:c2:bd:d5:82:99:6f:0d:5e:86:bb:a3:
a6:d8:4f:5d:85:62:ae:1e:0a:ce:1c:c8:75:6d:5b:26:e5:0e:
49:2f:a1:cb:54:48:24:8b:a1:59:16:d6:2b:b4:22:87:12:9a:
3a:0c:8d:17:2e:14:b0:92:fe:04:65:f2:44:b6:7c:e0:1f:d1:
73:80:37:2a:cb:49:56:88:07:d9:3f:7d:3d:6c:b0:92:9e:92:
16:75:c3:e0:15:11:ca:37:0f:ec:aa:e6:ac:a1:77:d4:14:13:
10:d2:a7:bf:5b:e3:e9:d3:0f:0b:62:dc:ad:e9:da:72:4b:56:
8d:65:15:65:99:a7:20:cc:55:7d:a5:59:50:99:c7:36:fd:5b:
18:79:2c:02:0d:7c:eb:6d:f2:20:1f:64:06:0b:c1:31:88:a3:
92:39:d8:4f:46:da:0b:a8:99:9a:97:27:48:dc:fb:3f:0e:c4:
42:d8:9f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:35:55 2025 by rpki-client