Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6CA392D51D11EF8C3A306A762E951A.roa
File: 7E6CA392D51D11EF8C3A306A762E951A.roa (raw, json)
Hash identifier: HVOE5NFz2VZiw405DZL7mUT6jlKwKct6GgUob4YLCtQ=
Subject key identifier: 11:8A:4A:90:7B:F7:5F:6F:6E:41:5C:CE:23:78:7F:40:BB:F3:E8:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AD6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6CA392D51D11EF8C3A306A762E951A.roa
Signing time: Fri 17 Jan 2025 21:53:32 +0000
ROA not before: Fri 17 Jan 2025 21:53:29 +0000
ROA not after: Sat 22 Feb 2025 21:53:29 +0000
asID: 141883
IP address blocks: 45.200.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68310 (0x10ad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 21:53:29 2025 GMT
Not After : Feb 22 21:53:29 2025 GMT
Subject: CN=678ad15c-7af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ac:0b:07:ff:07:13:10:29:e8:ef:a0:2d:05:
33:74:ad:16:13:81:eb:90:c4:62:44:84:f9:00:d4:
50:3f:96:96:13:7d:0e:ae:84:54:64:28:cc:62:02:
46:bb:32:94:0e:cc:9d:3f:2a:db:82:01:ca:6d:78:
cf:a3:4a:fd:fb:6c:6b:82:84:cc:98:54:b5:0e:b7:
39:24:b1:c1:85:f2:b7:3a:b9:da:36:d4:b6:b9:f3:
06:50:d1:3c:c6:01:06:85:73:ee:32:61:e6:52:69:
e0:10:10:19:86:61:69:9a:91:dc:e8:d7:e2:00:bd:
84:a9:2d:8d:36:23:63:7f:d4:89:7b:60:a3:49:e3:
7e:a3:26:df:f3:c9:9f:8b:0c:a0:c0:ed:59:f0:dd:
47:50:33:4f:eb:9e:e6:b2:e8:8b:76:c5:c1:e0:0e:
72:ac:fe:13:b2:eb:d4:ca:c0:49:7f:7a:58:91:4d:
db:62:a8:c6:5a:8b:2a:35:70:45:4a:b6:0f:36:f1:
ab:ae:29:35:e4:b7:60:ca:28:03:88:89:40:ad:49:
9c:30:aa:37:55:58:c6:ad:6c:a3:43:d1:34:46:53:
24:ce:28:f4:a0:57:7c:41:12:27:8f:b6:63:5c:1f:
0c:3b:8f:78:74:3e:6f:7d:91:ce:97:1d:d6:d4:d3:
d8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8A:4A:90:7B:F7:5F:6F:6E:41:5C:CE:23:78:7F:40:BB:F3:E8:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6CA392D51D11EF8C3A306A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.18.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:28:0f:3b:98:39:2d:21:91:13:37:d7:af:a4:07:7b:d3:fd:
52:fd:b0:a8:c7:15:ec:a7:10:a6:61:d3:06:c7:e5:43:14:ad:
66:12:ca:56:3d:fa:36:d7:83:f5:a0:03:f4:13:07:35:5d:11:
85:c1:5c:eb:4f:26:b5:ac:83:c3:4d:bc:69:98:ab:95:29:b3:
1a:4c:f3:da:49:2a:14:f1:23:4e:29:0f:9a:0c:fb:a6:f6:68:
f7:08:6e:66:67:a6:e6:58:2f:ae:6d:f4:bf:8e:e6:23:60:6a:
9d:25:a7:46:39:13:a2:a5:ec:dd:f1:c9:b0:29:f9:5d:c1:fb:
5c:b7:7a:ec:22:04:3c:4d:24:38:81:3e:4d:c4:64:97:38:c5:
d5:da:83:0c:16:47:e3:20:70:42:04:37:dd:ed:f3:fa:c5:76:
aa:68:29:72:38:0b:bf:20:30:b2:a3:91:2f:eb:c8:8a:d3:b6:
b1:e3:27:80:d9:88:e8:be:ec:c5:57:a2:6f:ad:18:75:90:0c:
10:af:5b:9e:f8:c6:95:f5:b1:df:9d:ba:94:c4:4b:91:76:ea:
9a:af:d6:4d:b6:56:4d:29:87:78:79:c5:4e:51:00:7f:a8:51:
8b:27:2c:9e:75:87:9a:f3:f8:75:0f:52:24:08:8f:ee:dc:b7:
ee:c0:a3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:34 2025 by rpki-client