Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DD9B6FCD58411EF996E7C9B762E951A.roa
File: 6DD9B6FCD58411EF996E7C9B762E951A.roa (raw, json)
Hash identifier: j2QP8mCyYh6MYBR/V1kut4ttnJfL3CMS1L6LWoX1/z4=
Subject key identifier: 1F:CC:79:33:6F:CC:5E:0A:CB:DE:2E:D4:FA:01:30:C0:53:0E:80:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B71
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DD9B6FCD58411EF996E7C9B762E951A.roa
Signing time: Sat 18 Jan 2025 10:10:23 +0000
ROA not before: Sat 18 Jan 2025 10:10:19 +0000
ROA not after: Sun 23 Feb 2025 10:10:19 +0000
asID: 395793
IP address blocks: 45.201.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68465 (0x10b71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 10:10:19 2025 GMT
Not After : Feb 23 10:10:19 2025 GMT
Subject: CN=678b7e0f-b703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:88:57:11:a2:c7:bd:43:10:ce:fe:7c:e8:
89:24:47:fd:92:13:ca:fe:3a:94:26:ac:56:a7:5a:
39:1e:49:6e:c8:b2:6e:9c:ef:a8:c2:b9:8a:d5:27:
eb:aa:46:e3:6a:cc:9a:75:30:4b:2a:0f:b1:1c:a8:
1b:37:06:26:0d:e8:48:b8:24:e8:ae:d0:e1:c4:9d:
6f:12:50:15:f5:45:ad:a3:d2:4c:d5:82:ce:8d:3a:
4d:bf:54:f0:e8:ee:64:f7:f2:a2:a7:87:9d:9d:e1:
d9:bd:99:e7:0b:f9:43:99:fe:56:b8:e9:2f:a6:dc:
69:4c:0f:09:d6:20:29:88:d3:b1:69:f9:5a:4e:76:
54:b3:6d:44:26:c4:64:c0:62:af:3e:ef:07:1e:d8:
7b:99:e7:41:7a:6a:2b:0f:d5:e9:40:6b:cd:0d:e0:
0f:a0:36:1c:27:01:bb:f5:df:63:1f:c5:c1:a0:8d:
b0:cf:a3:91:d5:0b:1c:70:64:1c:5e:fe:83:87:15:
17:b9:26:29:3e:d3:c0:23:26:0a:f2:69:5c:ed:e2:
07:40:98:d7:a7:b4:6a:e7:fb:ab:4c:e7:68:86:a7:
e1:29:5c:bd:72:de:0f:56:67:38:41:35:8a:8b:d3:
b0:bf:9a:26:66:02:80:e3:16:a9:80:1e:02:70:8b:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CC:79:33:6F:CC:5E:0A:CB:DE:2E:D4:FA:01:30:C0:53:0E:80:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DD9B6FCD58411EF996E7C9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.16.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:a1:5c:dc:00:11:08:71:4a:50:78:a0:0a:fa:db:84:49:c4:
97:75:55:46:36:16:20:14:f6:35:5d:da:b6:cc:3a:f7:59:94:
e9:37:b7:ab:4e:42:cc:40:10:68:7b:28:3d:2c:1e:ff:ff:f6:
99:e8:a0:1e:43:b8:31:56:5d:e0:0f:35:4d:77:58:cf:9c:80:
22:20:4c:1e:37:8c:c5:84:fe:42:bd:a9:60:56:b6:58:7b:5b:
a6:a6:a5:1c:e4:c9:dd:d7:de:93:49:a7:ad:67:37:3b:04:14:
c3:af:eb:70:0d:09:75:19:7c:52:57:30:26:44:1b:4a:6a:c2:
4a:da:d6:de:0f:c3:9d:26:83:e0:e1:f8:38:81:0f:76:15:2d:
de:ae:91:f5:26:49:ab:fb:23:2f:26:6b:ad:2d:a3:ef:13:74:
1b:c2:09:52:4a:5d:02:56:d7:d6:ab:75:05:cd:91:14:65:f8:
79:d1:42:1b:d5:e0:42:73:eb:dd:fc:25:b7:f4:f3:25:98:e5:
99:24:12:19:5e:8f:a0:3e:d3:6a:f0:2f:1a:75:7b:c0:98:ad:
cd:8c:c3:79:c0:61:23:e5:a7:be:4b:af:83:d0:86:e5:f8:c8:
6d:d3:69:f9:ee:3c:7d:e0:15:f2:11:d7:2c:8e:84:38:c4:77:
52:74:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:57:55 2025 by rpki-client