Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BC84F98D7C911EF8741F776762E951A.roa
File: 7BC84F98D7C911EF8741F776762E951A.roa (raw, json)
Hash identifier: 5EfOSDcvNcWLx6AcODDsS7LA5liSWLYJLXr+tQZDEQQ=
Subject key identifier: A3:4F:F5:45:6D:8C:04:75:6D:5D:E4:92:73:3E:9A:C0:98:04:BE:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CC6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BC84F98D7C911EF8741F776762E951A.roa
Signing time: Tue 21 Jan 2025 07:29:44 +0000
ROA not before: Tue 21 Jan 2025 07:29:40 +0000
ROA not after: Tue 25 Feb 2025 07:29:40 +0000
asID: 203020
IP address blocks: 45.198.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68806 (0x10cc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:29:40 2025 GMT
Not After : Feb 25 07:29:40 2025 GMT
Subject: CN=678f4ce8-74c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:9f:2f:20:64:cf:57:1e:52:14:06:ee:0c:
af:67:af:60:94:de:b6:72:32:fd:6f:be:7b:1b:22:
29:a6:3d:46:ad:fd:68:4b:c0:bc:ba:67:d4:6b:4e:
8f:6c:75:54:a5:b6:67:5f:ad:b4:e1:a3:84:2d:9b:
d2:fd:4d:7c:42:9c:d4:68:ec:b6:ff:92:7e:fa:c7:
22:06:78:10:55:70:97:0c:58:1d:17:34:d4:9b:5b:
25:00:de:a1:2a:a3:e6:0e:d0:03:09:b1:9d:f2:38:
52:fb:88:bf:c3:18:13:4b:18:53:8a:92:d5:b2:c4:
ed:ee:38:8b:c2:07:b6:b1:f9:e6:ff:1f:9f:2e:53:
94:68:2b:88:f2:86:ed:f2:ef:df:0f:15:9d:6a:46:
1e:39:34:56:a4:f6:7f:aa:89:fe:81:98:ff:81:e7:
04:f3:a1:e9:0a:4d:b2:ed:83:37:1a:ad:e9:3c:bc:
4f:d4:b9:c6:5d:8d:98:99:d4:4c:ff:2f:6e:d6:83:
e1:8c:3a:ce:87:b7:7b:19:95:02:a8:32:15:47:b3:
da:6d:40:18:8f:e2:df:d1:6b:3f:88:ba:b3:80:ca:
71:e8:46:c5:d0:93:66:9c:51:d5:a2:d9:71:03:ba:
ed:4d:f8:13:c8:8b:21:94:d2:ca:61:1d:ae:90:df:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4F:F5:45:6D:8C:04:75:6D:5D:E4:92:73:3E:9A:C0:98:04:BE:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BC84F98D7C911EF8741F776762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.200.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:22:b7:c0:cd:1f:f0:74:a7:a3:ec:6a:ec:1e:77:58:a8:88:
7d:d4:20:b9:ce:19:e0:86:78:ba:39:a1:e9:5d:a7:de:61:52:
46:81:41:85:c0:72:7d:a0:54:c3:01:87:29:a0:84:81:60:1e:
69:c0:6d:f3:7d:4f:0d:c2:7a:c4:9a:7e:73:38:26:6d:d4:e2:
72:19:37:e4:69:1d:e3:71:33:6a:06:26:79:5e:8c:d6:c6:ac:
84:df:47:de:fb:84:e6:bc:4d:fb:2d:ff:8b:b6:aa:42:61:0d:
a9:54:3c:9b:d6:d1:d8:6f:c4:50:ba:aa:4e:ec:9f:84:a9:6b:
41:37:f0:21:94:9f:23:cb:e7:81:6e:3d:b0:bd:67:8a:73:68:
68:d8:37:a6:dc:5f:50:68:1d:08:0f:2e:ab:ba:fd:73:33:9b:
09:41:c9:5e:cb:f9:52:b1:44:3b:cd:fd:f9:91:fc:88:82:f7:
d9:02:3d:aa:80:33:98:50:c7:17:5e:e6:a6:e5:24:c2:bc:f0:
bd:fc:d2:99:fd:09:67:c2:06:27:95:09:13:6a:f9:84:11:37:
37:2e:ca:3c:fc:2e:46:c7:c2:f7:36:11:5a:15:1d:02:25:49:
2b:d9:40:e8:ac:87:75:d1:7b:47:c7:a5:36:a3:ef:3d:de:7a:
28:7b:1d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:13:16 2025 by rpki-client