Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5986CEEADA7711EFA17E1C5D762E951A.roa
File: 5986CEEADA7711EFA17E1C5D762E951A.roa (raw, json)
Hash identifier: 4Ek3pzdLdRcAmKKjRrEjS5GsqKLkewJxqYrASxhzjiA=
Subject key identifier: 84:66:EE:E4:1E:F4:D8:67:39:0C:EE:74:EB:C6:81:7A:A2:74:5C:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5986CEEADA7711EFA17E1C5D762E951A.roa
Signing time: Fri 24 Jan 2025 17:19:21 +0000
ROA not before: Fri 24 Jan 2025 17:19:17 +0000
ROA not after: Tue 25 Feb 2025 17:19:17 +0000
asID: 48031
IP address blocks: 45.200.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69584 (0x10fd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 17:19:17 2025 GMT
Not After : Feb 25 17:19:17 2025 GMT
Subject: CN=6793cb99-1d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:a4:0d:0f:19:9b:e3:79:28:31:7f:55:0a:
b6:f1:b3:73:34:b8:c5:30:fb:f4:4c:f3:cc:cf:12:
6c:b6:96:f7:5b:f7:10:7e:30:19:02:3a:d6:d7:9f:
0e:9b:f5:25:70:14:8f:35:cd:81:d5:ba:d2:7c:b8:
7b:4c:a4:8f:8e:b8:cf:a1:13:f4:9f:4c:84:9c:8d:
39:54:dc:96:5e:14:1d:13:50:75:e6:5d:b0:c6:6f:
c0:17:73:0b:90:b8:14:58:7b:64:70:1a:b6:5f:13:
00:9d:54:8a:29:5a:1f:8e:8f:60:0e:c1:05:a1:ba:
ab:04:b0:3d:98:33:c4:71:2e:40:a6:3b:bb:43:3c:
99:0f:cc:7d:5f:e4:32:92:4d:3e:8b:2a:a0:f0:5e:
3c:4b:43:69:d8:74:b4:f8:b1:42:09:62:51:66:4f:
56:bd:db:a5:5d:9b:80:9a:cc:3d:ed:3a:f5:73:fc:
39:2f:89:6b:94:e8:df:7f:9a:2b:e8:37:e2:ca:20:
d6:bb:f6:77:e2:38:08:fc:9a:40:de:3e:2a:c1:a6:
e8:89:a1:2d:58:b8:31:61:81:91:78:e0:89:7e:67:
51:f6:3a:e6:24:30:20:95:49:13:68:05:3f:b3:dd:
37:21:5f:42:ef:30:f9:a0:0c:cf:4a:5b:7e:3f:9d:
74:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:66:EE:E4:1E:F4:D8:67:39:0C:EE:74:EB:C6:81:7A:A2:74:5C:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5986CEEADA7711EFA17E1C5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.182.0/24
Signature Algorithm: sha256WithRSAEncryption
89:70:06:34:9e:53:70:b5:e2:a5:0f:bf:cd:ba:6d:4e:c2:b9:
f7:3c:38:8b:58:c8:96:08:d0:3b:57:be:36:ea:6b:03:59:55:
d0:aa:bb:d3:28:b5:14:39:86:d6:c0:8f:bb:89:8a:b4:21:e1:
03:83:0b:1c:3a:6a:4c:6f:52:4c:34:44:d0:94:01:2b:c3:18:
37:4a:7e:30:40:25:d1:8f:3c:1a:89:e5:7d:52:ac:d7:1d:b1:
b0:5d:21:f8:86:b2:0d:bc:46:72:98:e5:8d:97:e4:fe:f0:e8:
63:7b:9d:ac:f4:ef:31:c4:39:c1:d6:bd:cb:4d:6f:2b:ea:ab:
2e:36:df:f7:fa:d4:ab:ec:25:26:3b:b9:fb:a1:f3:73:5a:64:
5f:4f:c2:93:96:38:af:41:d7:97:c6:00:86:3d:80:74:f8:bf:
96:4c:c2:f8:83:44:e8:b8:08:f5:31:69:cb:12:70:2e:2b:22:
d4:85:f2:f3:7c:c9:e6:12:51:1e:2a:ef:62:22:ed:d0:66:37:
41:aa:72:84:4a:d3:73:47:7c:4c:1c:af:c5:32:e0:63:63:6b:
03:aa:15:89:18:a6:5d:82:d6:17:b4:04:f9:2d:1c:44:0b:b5:
f1:bb:55:22:a1:d7:cf:bc:97:ae:6e:1f:08:40:6e:36:33:7f:
61:fa:81:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:40:54 2025 by rpki-client