Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/403066A4D4A511EF8A15BC5F762E951A.roa
File: 403066A4D4A511EF8A15BC5F762E951A.roa (raw, json)
Hash identifier: 9fLY+42RVTY/mPqT6rKNVBUaRUoqndh6cNy5ZvQZI2w=
Subject key identifier: FF:E3:A2:B6:A0:53:96:F6:31:E2:D5:A3:CE:E8:45:31:C5:2A:70:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010917
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/403066A4D4A511EF8A15BC5F762E951A.roa
Signing time: Fri 17 Jan 2025 07:32:48 +0000
ROA not before: Fri 17 Jan 2025 07:32:44 +0000
ROA not after: Thu 20 Feb 2025 07:32:44 +0000
asID: 139880
IP address blocks: 45.200.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67863 (0x10917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 07:32:44 2025 GMT
Not After : Feb 20 07:32:44 2025 GMT
Subject: CN=678a07a0-3695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f6:5c:9f:94:05:03:e0:a5:4a:35:60:cb:3c:
83:e5:b8:94:06:d1:19:57:1b:25:12:4c:92:65:5a:
0a:61:03:03:f8:41:ea:c0:de:6c:5c:a7:f7:22:56:
34:23:97:fc:54:e9:98:9d:4c:85:f2:50:a3:28:e2:
b2:89:c5:f3:59:a7:eb:d4:95:4b:f4:e1:19:38:7b:
fc:87:a9:88:ec:2f:f0:48:61:1a:33:b6:55:77:66:
1d:b6:46:79:38:6d:51:d8:96:fc:43:51:62:07:22:
58:2e:17:5f:02:92:db:b2:63:27:d1:12:5b:78:6f:
d3:36:df:50:97:e5:b1:b8:5c:84:e0:b8:1e:1c:40:
77:2e:43:f4:91:d7:91:2f:9f:1d:8c:3f:db:d0:89:
8e:87:92:dc:82:a7:fb:33:54:89:3e:e3:29:24:da:
e8:8f:e0:79:49:56:f1:4a:08:ca:ef:24:0d:2a:01:
e4:63:b8:34:a8:58:06:4a:65:30:05:5b:95:a7:0f:
0d:6f:69:96:85:66:8d:90:95:05:da:ab:6b:56:35:
5c:91:1a:1a:6b:df:f1:16:d6:d3:a6:f9:0e:80:f2:
d4:e9:3f:13:d6:30:27:53:5a:58:df:70:7f:6b:28:
57:d1:74:dc:c2:b3:a5:b0:06:47:58:40:e9:d9:34:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E3:A2:B6:A0:53:96:F6:31:E2:D5:A3:CE:E8:45:31:C5:2A:70:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/403066A4D4A511EF8A15BC5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
84:6c:c7:18:20:d2:d3:ad:ec:c2:3e:e6:fd:9d:03:05:5b:a9:
42:c1:f7:60:14:65:de:c8:b1:81:cf:63:5a:6f:ec:26:84:fe:
d8:a0:c7:8f:2a:26:7d:fb:33:54:08:67:40:23:5d:f4:6c:d8:
f6:9e:a2:25:cc:c9:31:7f:84:32:cb:28:2f:f9:36:07:75:cd:
99:a6:45:8b:b8:62:1b:f2:86:36:14:aa:e3:ad:ee:d2:15:60:
d6:f6:e6:3d:9d:7d:99:6c:87:d5:ba:3f:04:e0:06:03:06:17:
79:36:83:c8:0e:67:0a:8f:bd:f7:68:96:92:e3:76:94:ed:ec:
94:99:10:f8:c0:23:cf:3d:af:3c:30:8c:f8:3a:45:94:ba:b1:
0e:74:ce:30:c9:21:16:00:ac:7f:4d:13:08:4e:ae:65:e1:a7:
5b:d4:52:bf:e0:b4:70:97:d7:39:e4:30:d4:4f:d4:b6:de:75:
61:7d:9f:81:80:8d:d4:f0:49:3e:63:2c:40:e0:f7:de:d6:c0:
17:8f:e0:ce:62:54:ac:28:12:39:f3:4f:1f:8e:10:a7:67:03:
50:43:90:73:a4:fa:d8:95:f2:9c:d7:a2:c9:3e:12:82:b6:fa:
c9:85:b3:64:bd:f0:02:2d:5d:63:4d:d9:03:e0:d7:91:eb:91:
6d:42:34:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:18:31 2025 by rpki-client