Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DD22BFEDA7A11EFBE0EBC70762E951A.roa
File: 5DD22BFEDA7A11EFBE0EBC70762E951A.roa (raw, json)
Hash identifier: uBWApAwGPtrCBt8WdoVjjS9NOcuKCi+hdVGeY4R8uVo=
Subject key identifier: 49:B0:46:D0:80:65:96:0B:33:2B:42:12:20:1F:29:F2:FD:CE:CB:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DD22BFEDA7A11EFBE0EBC70762E951A.roa
Signing time: Fri 24 Jan 2025 17:40:57 +0000
ROA not before: Fri 24 Jan 2025 17:40:53 +0000
ROA not after: Tue 25 Feb 2025 17:40:53 +0000
asID: 48031
IP address blocks: 45.200.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69604 (0x10fe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 17:40:53 2025 GMT
Not After : Feb 25 17:40:53 2025 GMT
Subject: CN=6793d0a9-57e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:ae:4d:bb:7a:df:8b:cf:06:a6:d2:e7:9a:
34:ae:d1:63:8a:e3:c3:09:78:15:3b:01:2f:7d:f7:
2b:d4:c8:e8:31:d0:9b:60:93:db:c5:7a:94:15:21:
49:45:62:1a:dd:8a:5e:b4:39:4d:c4:f3:c2:d6:23:
b7:54:67:0f:77:63:c4:a8:0f:4d:91:5c:9b:0e:57:
e8:8b:59:14:47:ec:5e:de:1d:0c:6e:1d:fb:a7:37:
8c:04:72:ee:8b:60:ca:4b:20:7d:4a:8a:b1:e7:1e:
e1:ee:79:ba:e3:ae:77:74:72:2b:c7:e4:4c:85:82:
00:ca:4d:db:aa:87:00:e5:fd:fc:94:72:6d:01:d2:
c7:99:23:ae:15:b1:39:2e:38:c0:49:1b:bf:4d:18:
b8:52:bb:9a:9b:5f:bc:66:3b:71:18:58:ca:fe:48:
f1:e4:c3:aa:cf:20:65:d0:7e:ef:55:2f:81:fb:47:
2f:c4:15:95:03:3e:40:5d:11:99:37:e4:06:99:2c:
dd:1a:d6:b6:97:8c:24:4c:53:b0:17:d1:34:05:de:
b5:65:40:e1:fc:b1:41:50:ac:93:47:39:49:41:9f:
c6:10:a4:2f:51:e8:04:93:cd:55:f8:5d:a4:bc:bc:
ca:77:4e:2c:8d:02:3c:32:db:ec:0d:08:bd:1a:99:
ce:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B0:46:D0:80:65:96:0B:33:2B:42:12:20:1F:29:F2:FD:CE:CB:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DD22BFEDA7A11EFBE0EBC70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9a:59:5e:bb:c2:56:16:db:bd:f7:6e:8a:67:76:fd:fd:ca:
70:5b:be:88:76:9c:5a:f2:39:23:4e:b4:c0:2c:b2:7b:76:af:
2a:82:23:9b:02:ff:ac:88:a5:dd:b1:b7:86:43:98:51:2c:46:
b5:70:64:a3:31:0b:28:04:91:67:27:37:ce:03:3b:5e:ad:3c:
b0:96:9a:e6:ef:74:6f:82:5b:86:b7:00:e4:b8:b7:b9:30:83:
fc:28:04:1a:15:a3:78:cf:9c:d5:08:f5:07:47:15:d4:20:5d:
8d:d7:fe:bf:17:14:3f:9f:27:3e:c0:81:a1:c4:6d:67:72:1a:
6a:ce:5c:77:23:f5:8b:35:ca:f0:84:b9:26:5d:87:b0:dc:02:
36:79:5d:37:13:f8:cd:14:4a:fd:6e:90:44:a2:76:c8:2b:f1:
8f:23:32:2e:4a:6b:0e:32:a3:a5:4d:6f:15:17:a2:b0:ed:d2:
f1:6d:8f:ee:5b:d0:aa:0b:07:59:e5:7f:f5:4a:a3:a8:e2:b4:
92:c9:42:7d:bc:7b:1c:71:c9:40:29:37:bc:b2:79:58:aa:c0:
bc:5d:32:7e:18:be:87:7f:4f:43:03:57:00:75:7f:cf:e4:a3:
9d:64:43:59:57:90:9e:6c:91:be:e9:48:c6:59:d9:25:d0:ed:
28:d8:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:38:12 2025 by rpki-client