Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DDD7E7ED70711EF80F7867F762E951A.roa
File: 7DDD7E7ED70711EF80F7867F762E951A.roa (raw, json)
Hash identifier: wtgTB7ixHpUqTudkDzamgdmMYjqDHRAL9ixQ+klW+P4=
Subject key identifier: A5:0B:A3:35:CE:8F:5B:42:39:79:20:8B:0F:8B:FD:8C:D6:4C:94:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DDD7E7ED70711EF80F7867F762E951A.roa
Signing time: Mon 20 Jan 2025 08:21:05 +0000
ROA not before: Mon 20 Jan 2025 08:21:01 +0000
ROA not after: Sat 01 Feb 2025 08:21:01 +0000
asID: 48031
IP address blocks: 45.200.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68591 (0x10bef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 08:21:01 2025 GMT
Not After : Feb 1 08:21:01 2025 GMT
Subject: CN=678e0771-14ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:20:77:ae:fb:5a:4f:a6:5a:44:84:b7:64:
28:e8:ce:c7:c6:53:62:8b:a2:6e:e4:06:8d:d9:f1:
6a:2b:5b:9b:8d:25:bd:54:c6:8a:d3:18:2f:7b:f4:
6e:ae:62:c6:ed:cc:0a:86:e0:ae:87:61:32:2e:79:
49:30:c0:ea:9c:bc:5e:ba:a3:da:d6:04:1b:91:91:
40:eb:bc:bf:83:19:fb:06:dd:e9:a0:d2:d6:9c:74:
73:89:21:1d:30:6b:a7:30:60:87:07:07:3b:16:7d:
c8:18:e9:4c:e7:f3:d9:18:e4:3b:17:46:98:ef:5b:
ad:ac:f6:9d:bc:81:04:45:34:c1:f4:8c:37:a0:69:
03:31:3b:d4:93:ed:34:50:e7:5d:72:65:22:ac:62:
1c:d2:39:62:38:66:91:5a:0a:00:60:f4:5a:50:b8:
f0:1f:04:b8:76:7b:cd:d5:fa:18:a8:2a:ae:31:f2:
8a:9c:36:c1:7b:1b:eb:e4:e4:34:4c:86:5d:80:30:
45:e9:d0:ca:d9:d3:ba:38:53:22:11:34:11:cb:f9:
35:57:2c:36:20:d0:f3:fa:42:3e:46:9f:24:20:4f:
ed:0e:73:7e:e0:2b:77:3e:b6:6c:14:4f:71:10:b5:
ec:75:69:b8:b9:e8:13:36:1d:9c:ab:a0:b6:8c:9b:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0B:A3:35:CE:8F:5B:42:39:79:20:8B:0F:8B:FD:8C:D6:4C:94:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DDD7E7ED70711EF80F7867F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.181.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:21:5e:c1:00:8b:79:76:c0:a1:3e:73:91:33:cc:04:75:70:
d1:d9:1c:01:ba:f8:de:e0:5d:df:85:50:47:00:1d:c2:89:84:
f6:4d:11:d5:22:91:a0:df:10:66:f4:4d:42:a6:9d:ba:32:71:
d7:95:f6:de:0d:3e:22:45:b8:0d:1e:bd:79:ea:f8:c2:8f:fb:
c0:da:4c:7e:ba:18:b7:f1:39:54:4c:de:08:2f:87:14:21:e8:
64:7b:fb:c8:1e:fe:2c:2a:4a:2a:98:bc:28:ab:1c:c0:d1:73:
f6:e4:67:70:0c:b0:36:d0:eb:ba:2e:87:44:d4:1b:43:a7:a8:
54:09:80:a1:5f:d3:d1:6c:af:9b:74:c3:35:c6:df:82:51:31:
fa:13:00:86:a5:1a:11:4f:66:8d:db:a3:67:0b:80:4b:8d:d4:
58:8b:12:a8:d5:e6:8a:1d:80:01:2f:e0:e4:0c:88:bb:c6:e3:
59:31:e5:45:86:34:46:02:d4:e1:19:cf:c4:15:85:5c:63:0f:
a3:7d:98:03:ab:6c:fa:4e:c7:c3:a0:55:30:0a:72:20:73:16:
1b:1f:4f:68:17:0f:54:6c:38:42:c6:0e:46:6d:a2:56:25:b1:
90:a7:4f:44:e8:68:c4:f0:23:91:e4:0d:f5:c9:03:30:03:14:
08:f7:1d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:18:59 2025 by rpki-client