Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88CED768D51F11EFB08E8C78762E951A.roa
File: 88CED768D51F11EFB08E8C78762E951A.roa (raw, json)
Hash identifier: 4ISQWuBq3UaQQSBOarJ/rGuiGQkDDn86Kh723ezlI04=
Subject key identifier: E5:19:8D:8A:A2:7D:47:23:58:03:34:81:70:67:DC:0B:8C:51:E8:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88CED768D51F11EFB08E8C78762E951A.roa
Signing time: Fri 17 Jan 2025 22:08:09 +0000
ROA not before: Fri 17 Jan 2025 22:08:05 +0000
ROA not after: Sat 22 Feb 2025 22:08:05 +0000
asID: 139646
IP address blocks: 45.200.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68320 (0x10ae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 22:08:05 2025 GMT
Not After : Feb 22 22:08:05 2025 GMT
Subject: CN=678ad4c9-32d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:5d:11:4e:56:8a:b0:da:db:bc:a5:d3:91:
06:47:fe:3b:da:cb:e4:55:f0:33:c7:f1:98:a6:72:
75:3b:e5:31:58:c6:50:0d:74:f5:d2:b7:8e:db:ea:
23:53:5c:62:48:d9:df:11:d2:82:fa:cc:76:ca:cf:
68:4c:e4:fb:f7:17:10:0e:5c:06:fe:64:c3:61:be:
62:b1:fe:5c:50:60:18:65:ff:d8:93:39:dc:b7:a8:
02:e6:7b:ae:b6:0e:f4:c3:6c:b6:ce:a9:ae:53:ee:
df:c0:07:23:4f:cb:73:05:12:08:25:e8:db:f1:40:
73:45:b9:45:35:99:12:9f:9e:10:83:8c:7f:5c:9b:
0c:a9:ab:f7:e3:1c:7e:85:d4:d3:83:67:1c:c1:c3:
d2:f5:93:44:1a:ac:41:51:35:f9:45:94:8b:4f:f8:
59:a4:6d:ab:35:7f:a3:a9:ad:0a:7f:38:88:df:e8:
63:07:ef:fd:ff:e8:13:b1:36:b2:16:a2:6b:88:83:
e4:1a:d6:35:ab:dc:62:d0:2d:16:ad:6e:c2:3f:b8:
60:cf:4d:65:46:d7:c5:33:d8:cc:7a:6c:90:8b:ab:
99:cf:45:84:bd:c5:df:9f:2f:90:52:3e:f6:8d:85:
5a:0d:a6:ab:fa:16:82:5b:e3:c4:97:1e:37:30:fc:
b3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:19:8D:8A:A2:7D:47:23:58:03:34:81:70:67:DC:0B:8C:51:E8:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88CED768D51F11EFB08E8C78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.32.0/19
Signature Algorithm: sha256WithRSAEncryption
35:0b:00:40:11:6d:62:a5:2c:07:93:c5:d6:97:e4:05:c9:d3:
12:37:d8:63:22:49:d4:30:7a:2a:34:60:ae:25:c6:80:d4:80:
3e:21:b2:e9:d3:94:e6:54:d2:ef:dc:fe:82:fc:f4:75:7a:79:
e4:2c:8b:b3:a7:02:2c:97:d3:e1:7f:ac:ad:07:d5:16:61:ae:
09:9c:0b:98:be:0b:29:44:b6:7c:2c:d1:f6:24:a4:2b:5d:18:
35:26:61:10:b4:b9:f9:ef:96:fb:30:d8:f5:9b:8d:cd:10:5e:
e1:0d:11:00:bb:4f:3a:55:33:ed:fb:ce:67:81:8b:50:3e:ca:
f3:86:6f:de:eb:7d:ee:92:83:9b:53:ec:a1:4d:03:01:b0:39:
fd:1c:0c:79:bb:f1:11:a8:1e:9c:77:80:c1:81:5f:88:e4:f1:
b0:ed:23:12:73:48:2c:91:13:ec:2e:96:05:1a:1e:1e:48:fc:
a6:ca:fd:fe:e7:af:8e:c2:57:57:6f:09:46:d6:29:36:db:e0:
d4:ec:a9:33:aa:26:2a:e4:fd:64:38:4b:5b:06:3a:91:11:64:
23:5f:52:03:19:fa:58:20:2d:b0:8d:a9:9e:c6:5b:2c:0c:b4:
3a:07:6d:7f:b3:2f:1d:da:f0:b7:c3:b7:87:2c:68:0c:7c:e1:
02:6e:99:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:53 2025 by rpki-client