Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/708ACC62D51911EF96696F51762E951A.roa
File: 708ACC62D51911EF96696F51762E951A.roa (raw, json)
Hash identifier: fClmiUDB1vEzpSffcMwKOziA0LT0diO3V7GhbacMgFo=
Subject key identifier: 60:27:4B:BC:3E:FC:79:18:96:A9:E6:EF:0E:11:8D:37:CE:97:1C:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AC0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/708ACC62D51911EF96696F51762E951A.roa
Signing time: Fri 17 Jan 2025 21:24:31 +0000
ROA not before: Fri 17 Jan 2025 21:24:27 +0000
ROA not after: Sat 22 Feb 2025 21:24:27 +0000
asID: 141883
IP address blocks: 45.200.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68288 (0x10ac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 21:24:27 2025 GMT
Not After : Feb 22 21:24:27 2025 GMT
Subject: CN=678aca8f-c3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:bc:f8:3e:14:19:23:dd:5d:f0:7e:1f:50:
a8:86:46:a0:1f:d0:fb:f8:99:47:0c:81:01:ab:8b:
91:22:de:4f:ba:f9:17:47:3c:74:17:8d:3a:13:ae:
bc:35:6f:ca:63:d0:32:1d:f5:83:8b:5a:33:2b:9a:
93:f0:ce:bc:fa:71:c2:96:64:35:c3:e8:c1:0a:49:
b0:ec:2b:77:7a:dd:73:aa:4c:74:6a:a0:08:65:57:
6b:cc:34:0d:5c:c5:b4:93:9a:5d:50:ea:62:ce:b4:
f4:33:94:9e:16:39:82:3f:0a:75:1c:a3:09:56:e1:
d0:c3:2d:c9:48:f6:45:3f:ce:a0:37:ea:50:56:71:
81:41:fa:74:13:4b:1c:7f:9c:5d:42:2d:84:b3:d6:
ea:cc:24:76:dd:29:d0:3b:30:64:f3:02:14:a7:ca:
86:de:4b:f5:48:bf:af:cf:eb:fd:ea:04:95:a9:49:
23:c5:3b:39:2c:12:71:3f:a5:c4:16:8e:1e:ad:5e:
4f:ca:e7:4f:8f:fd:a0:a7:96:0a:dd:6f:a5:db:04:
e4:62:4d:ec:2a:7c:d9:15:69:99:cf:61:dd:f5:70:
61:53:c4:d3:3a:3c:42:5b:f7:72:15:bb:5b:c9:8d:
6b:a2:dd:c6:a0:f5:22:11:1a:10:6d:16:41:59:bf:
cd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:27:4B:BC:3E:FC:79:18:96:A9:E6:EF:0E:11:8D:37:CE:97:1C:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/708ACC62D51911EF96696F51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.32.0/19
Signature Algorithm: sha256WithRSAEncryption
62:10:44:ba:e4:f0:5f:28:ed:6f:d4:3f:46:f2:34:fc:55:3f:
55:6c:73:29:ea:2a:dc:a8:d7:84:57:41:d9:e6:c4:b5:c0:a3:
99:7c:48:bb:48:58:e4:2c:ac:74:29:ed:f9:4e:23:17:ec:05:
3e:b7:51:92:cd:da:6e:19:a5:ba:a6:ae:83:a1:ac:5b:5d:b5:
72:85:77:c3:3f:08:50:66:47:6b:69:73:59:c9:c0:12:00:44:
79:cc:e2:93:4c:b3:c8:4d:27:3a:01:00:60:19:5c:96:6f:2c:
65:56:c4:65:a1:f6:f7:50:29:3d:81:fd:1d:e4:f8:8e:05:a1:
45:c9:3c:3c:58:5c:7c:b9:28:3c:66:b7:54:e1:4b:98:7a:bc:
04:0f:c2:de:cb:f2:b9:90:73:99:e8:41:e3:1a:d1:09:30:78:
a4:89:e7:37:12:7b:c4:ba:06:c6:ad:4c:75:fd:91:fc:2c:77:
fb:fa:d8:fd:3e:ae:5f:e4:ed:4f:ae:74:f0:8d:19:93:89:93:
4c:b1:6f:2e:4b:ce:7e:98:59:a9:80:19:fe:c8:1c:f6:d6:31:
e6:6b:ee:27:47:15:7c:cf:04:7a:ec:60:82:7b:c4:66:0e:bb:
45:f0:13:31:2c:01:af:fb:dc:67:05:3b:82:08:2b:bc:42:35:
67:f5:00:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:53:41 2025 by rpki-client