Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89E2BAD2C3BF11EF976B2B58762E951A.roa
File: 89E2BAD2C3BF11EF976B2B58762E951A.roa (raw, json)
Hash identifier: 5F1vpqbKMsTr4PosKiLUO+L/ov9FVxSJzgnL6dLzavg=
Subject key identifier: 4D:F4:AF:C5:6E:E4:CA:CB:4A:F2:47:5D:D4:1D:CD:D0:B4:AB:61:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EED7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89E2BAD2C3BF11EF976B2B58762E951A.roa
Signing time: Thu 26 Dec 2024 19:28:09 +0000
ROA not before: Thu 26 Dec 2024 19:28:05 +0000
ROA not after: Sun 12 Dec 2027 19:28:05 +0000
asID: 17561
IP address blocks: 45.207.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61143 (0xeed7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 19:28:05 2024 GMT
Not After : Dec 12 19:28:05 2027 GMT
Subject: CN=676dae49-2ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:71:8b:72:b0:d3:0f:c9:d7:bf:f2:ba:ea:
90:a8:ed:b4:27:84:67:f3:ee:b4:70:ff:93:a0:cb:
ec:4d:bb:47:34:b7:a3:15:d6:94:3b:75:96:b9:ad:
72:c3:13:28:ec:f1:cc:d7:df:64:3a:a0:89:ba:37:
b0:70:c4:1f:98:ea:7a:3f:82:20:62:06:ba:fa:6d:
4a:f5:0e:73:ef:25:47:80:9d:f3:ef:a9:4a:67:d1:
e2:69:2d:d0:6d:f8:96:4a:c0:02:1a:45:38:ec:aa:
8a:b6:7b:9f:df:7c:91:ba:3e:d0:8e:bb:82:7d:fb:
45:04:86:de:9e:6d:2e:69:24:9a:b5:a9:97:6a:d8:
41:79:aa:2d:05:e4:3f:bf:bc:b2:42:94:e1:3f:30:
d1:14:54:e1:18:13:24:b3:d3:ec:61:c0:83:52:a9:
d9:74:d3:2c:c0:12:29:fe:24:08:bf:43:5a:7c:43:
c1:79:54:20:21:11:a0:24:33:7d:5d:53:4a:8c:91:
3c:e7:c4:79:b4:7d:be:d9:77:09:f6:f9:e8:ff:75:
64:b6:74:eb:92:8e:17:8e:85:ea:66:d4:f9:4f:f8:
a9:f0:88:86:89:8f:18:3c:82:14:b2:63:af:46:a7:
a2:f6:74:8e:54:82:f3:53:14:fb:d0:97:a3:25:c4:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F4:AF:C5:6E:E4:CA:CB:4A:F2:47:5D:D4:1D:CD:D0:B4:AB:61:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89E2BAD2C3BF11EF976B2B58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.179.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:46:b5:35:75:1b:ef:62:25:fb:c4:22:88:8d:cd:ef:8a:90:
e1:f8:93:69:2b:71:aa:a0:6f:db:62:c3:c7:c7:da:13:37:d9:
0a:54:48:37:b7:d0:c3:4a:db:d1:b1:ca:62:9d:0a:07:7e:b8:
93:de:eb:14:43:40:80:e9:35:74:e8:4d:62:3f:ed:fc:43:53:
9e:b6:a0:93:c3:1d:16:a6:1e:73:86:43:b6:50:9d:b4:e1:b8:
b3:eb:8c:39:d3:fb:85:fc:73:3c:b5:18:55:60:26:20:df:88:
bf:f7:38:ba:5b:3a:59:2a:5d:46:96:9e:34:63:5f:1a:8c:47:
c6:7d:1e:95:60:0f:4a:33:87:bd:ee:ff:4f:87:8e:b1:32:ed:
e0:09:3f:ed:eb:51:c7:e5:f8:ab:a9:bd:0f:77:49:23:f0:30:
5c:8d:34:c1:4d:f6:f5:93:26:d0:98:ca:ec:1b:fc:aa:43:6d:
b0:ca:82:76:12:eb:ba:96:6a:73:80:19:bd:c1:25:99:8f:92:
da:ed:43:03:f0:1e:f4:37:78:5e:ca:05:68:e0:69:94:49:0e:
c3:b8:f4:03:1e:af:6e:ea:99:66:b5:58:22:5a:0f:02:5b:f0:
03:01:01:4c:e3:be:9a:6f:e6:ee:5d:50:6a:a0:b0:32:98:16:
d7:15:d8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:24 2025 by rpki-client