Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D1C2F98D50C11EF9255BE7B762E951A.roa
File: 5D1C2F98D50C11EF9255BE7B762E951A.roa (raw, json)
Hash identifier: 1TDzX1QQnSE+7I6OCoy+V1qIEB9tZgjibqm5Yfq+/Mw=
Subject key identifier: CF:C2:B7:92:3E:53:ED:B6:CB:41:11:90:50:33:00:AC:E8:1E:45:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D1C2F98D50C11EF9255BE7B762E951A.roa
Signing time: Fri 17 Jan 2025 19:50:55 +0000
ROA not before: Fri 17 Jan 2025 19:50:51 +0000
ROA not after: Sat 22 Feb 2025 19:50:51 +0000
asID: 54801
IP address blocks: 45.207.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68228 (0x10a84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 19:50:51 2025 GMT
Not After : Feb 22 19:50:51 2025 GMT
Subject: CN=678ab49f-7b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:df:f8:91:a0:e5:63:78:00:61:5d:68:99:
cb:8d:12:e8:a4:70:89:7c:dc:df:e6:f5:7b:3e:1a:
0a:3d:f2:6a:5c:e8:e9:29:93:88:18:92:3b:d7:27:
91:57:0a:93:72:ae:8b:d8:f6:e3:bf:2c:d0:34:a5:
c0:ac:17:ce:1a:5d:b8:cf:a0:54:08:8f:f0:81:6a:
1e:f0:fa:97:b1:4e:7d:d3:6d:97:0c:40:d2:87:cf:
4c:8c:e0:f7:2d:f2:6d:cf:c4:05:2b:45:dc:fb:30:
dd:23:1b:b3:b2:9c:2b:40:28:be:dc:63:48:92:7d:
f1:86:70:e6:82:dd:2b:ef:e4:e9:18:c3:01:a3:41:
73:b2:e0:3c:b7:45:19:ac:8f:2e:1c:ab:40:2b:db:
3d:80:d2:f8:59:a6:88:51:4e:80:98:49:ae:78:3f:
cb:43:ec:fb:3c:8c:e0:00:92:b6:7a:3d:7d:20:48:
f5:58:1d:4d:ec:f6:dc:b4:3d:76:09:96:70:d1:3f:
04:34:20:ef:e4:5d:7f:f1:f4:a3:d8:21:20:cd:9d:
b1:e2:59:e5:ef:88:fa:b5:89:2b:f6:bb:82:5c:37:
a7:27:b7:f8:3a:72:2e:79:b7:c9:a1:6a:7a:43:12:
4d:8a:5e:a6:02:7f:10:b1:ab:f3:e1:6b:fc:10:a2:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C2:B7:92:3E:53:ED:B6:CB:41:11:90:50:33:00:AC:E8:1E:45:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D1C2F98D50C11EF9255BE7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:65:0b:b4:cc:1a:d7:c6:10:d2:c1:42:c0:18:97:9e:a2:ad:
e1:d7:1a:60:1d:4f:89:7e:49:f0:a5:d9:d3:24:f7:0b:5e:b7:
d9:13:25:2c:29:83:b3:b5:40:c2:5a:e1:43:68:a4:26:12:03:
e7:a4:f5:dd:92:7a:11:e4:0f:82:d4:53:63:5e:c1:ad:94:e4:
b8:e4:f1:b1:66:85:71:32:a2:e1:0b:45:12:c5:b1:51:93:94:
ae:34:ae:3c:31:8d:bb:da:95:a1:54:f2:39:2f:30:6c:64:58:
7a:4f:11:0e:4a:96:39:c6:68:d8:f5:d2:2e:af:8b:42:06:1b:
09:fe:27:28:a8:99:8f:ed:ff:dc:6c:be:ab:f0:0a:23:ef:15:
bd:0d:b2:3a:32:80:4d:96:b0:11:89:90:8c:ce:5b:f2:17:35:
12:6e:90:97:44:2f:06:86:6b:8d:8e:b7:76:85:0d:72:ab:a0:
6f:50:d9:92:bf:af:7b:2b:a6:74:45:69:d4:15:3b:e8:d7:6a:
8f:9a:f0:9e:eb:b3:ba:14:f8:e7:f9:f5:fd:3f:ea:81:73:7d:
c1:36:e8:f6:be:21:5a:09:3c:6c:47:d7:37:7c:81:85:15:65:
3a:47:c2:70:1b:40:c2:c8:5a:63:ed:6d:fa:06:4a:9d:72:a8:
86:48:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:12:58 2025 by rpki-client