Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/793E3F3CDA7911EFA69DBB6B762E951A.roa
File: 793E3F3CDA7911EFA69DBB6B762E951A.roa (raw, json)
Hash identifier: 3D9CvDMUeJdfr3dtY3NFXbRFDaOtsYhdAlh/eC3/0iQ=
Subject key identifier: 5F:40:CB:95:2B:75:A8:A6:60:20:78:D2:13:EA:61:B2:D8:C2:73:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/793E3F3CDA7911EFA69DBB6B762E951A.roa
Signing time: Fri 24 Jan 2025 17:34:33 +0000
ROA not before: Fri 24 Jan 2025 17:34:29 +0000
ROA not after: Tue 25 Feb 2025 17:34:29 +0000
asID: 48031
IP address blocks: 45.200.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69598 (0x10fde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 17:34:29 2025 GMT
Not After : Feb 25 17:34:29 2025 GMT
Subject: CN=6793cf29-2db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:01:34:62:5c:82:07:b6:c4:fd:3c:f7:a7:c8:
27:a1:63:dc:be:bf:0d:85:a1:cf:5b:22:b8:3a:3d:
12:bf:07:1d:ba:ce:40:83:a7:67:86:2d:39:07:a3:
d8:72:ab:2a:7c:07:63:4b:2e:09:f7:c0:37:a8:91:
3e:23:22:78:1e:b4:31:c7:fa:d6:2e:9b:3e:56:cc:
36:1c:f1:d3:8f:a5:31:c3:4b:77:5e:05:f4:3c:a2:
6a:97:8e:f8:e7:28:99:79:74:4d:c9:d0:49:8f:20:
42:5b:5e:b8:16:ba:19:3e:c5:d8:c1:eb:86:16:ac:
11:de:e1:e8:34:84:d1:7f:a2:12:05:69:58:a3:d4:
1c:eb:13:83:f5:04:bf:03:ab:7e:e2:41:a7:3f:29:
60:76:f6:c0:3c:92:4e:e2:6e:e6:09:62:36:49:cb:
60:36:d2:66:db:ef:72:3e:1c:8d:1d:f9:5a:0c:82:
8b:7d:7c:80:42:c1:08:38:a4:5e:e5:a6:3d:c1:7c:
f2:8a:cb:f9:64:b6:3c:21:36:17:df:20:0e:56:21:
96:5c:11:58:ae:38:1a:2a:7d:54:26:62:e0:a2:60:
91:ed:70:44:aa:16:0f:d2:c5:22:ed:9a:26:b0:8a:
f7:aa:cb:d4:70:dd:22:d5:70:52:c8:26:6d:56:5f:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:40:CB:95:2B:75:A8:A6:60:20:78:D2:13:EA:61:B2:D8:C2:73:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/793E3F3CDA7911EFA69DBB6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.188.0/24
Signature Algorithm: sha256WithRSAEncryption
68:bd:2d:5b:4e:05:ab:b5:1d:60:d6:f2:54:bc:b0:63:4c:66:
fe:9a:ea:a4:26:9a:8c:5a:7f:92:3f:71:bd:93:4c:82:bd:dc:
d8:84:06:85:a2:6a:bd:71:a4:41:89:6d:38:55:00:d3:93:c7:
d3:e4:81:92:94:d7:e6:0b:33:a3:7e:90:46:a6:41:79:2f:fb:
61:4a:b7:08:65:75:58:87:b4:5d:77:71:8d:8c:a5:08:95:55:
8a:55:de:08:e2:96:dd:44:0d:53:82:6c:19:d2:02:a0:da:d7:
9c:4f:a0:d3:13:46:8d:c2:4d:e6:f6:52:e9:9a:5f:39:3d:89:
c1:d6:07:55:83:89:16:65:5d:dd:cf:d2:68:ed:78:8b:a2:97:
97:a1:aa:f6:9b:af:36:44:24:31:c2:92:f4:d1:57:9b:4b:8a:
8e:4f:28:e2:a8:df:63:77:fb:c8:03:28:65:c2:bc:ed:5a:23:
80:c5:ec:5d:1d:e3:d3:c2:e6:68:3a:60:b6:7b:a8:16:8d:1a:
71:6b:0a:4a:9c:e9:53:4e:58:e5:c1:aa:99:2d:a6:19:c5:03:
3a:80:34:ca:87:f8:48:c5:0a:83:8d:81:61:6b:91:51:0e:f7:
74:b5:4c:cf:4a:e2:9e:86:58:4e:fa:f0:57:4d:ef:99:c0:48:
a5:8b:0f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:59:17 2025 by rpki-client