Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D55C75CDA7811EF85C3BD65762E951A.roa
File: 8D55C75CDA7811EF85C3BD65762E951A.roa (raw, json)
Hash identifier: lhn01zYX/CwkJs92PDuoIXVu7A7SCpJV1MMso60xF8Q=
Subject key identifier: 4F:95:03:83:5E:5A:B6:24:DE:A9:A9:89:5D:DE:42:3A:BF:34:AF:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FD8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D55C75CDA7811EF85C3BD65762E951A.roa
Signing time: Fri 24 Jan 2025 17:27:57 +0000
ROA not before: Fri 24 Jan 2025 17:27:54 +0000
ROA not after: Tue 25 Feb 2025 17:27:54 +0000
asID: 48031
IP address blocks: 45.200.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69592 (0x10fd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 17:27:54 2025 GMT
Not After : Feb 25 17:27:54 2025 GMT
Subject: CN=6793cd9d-e9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:ae:35:b5:09:60:b3:1b:dd:7e:e0:75:4f:
9a:3d:c6:2b:63:49:4a:fd:c5:a5:d4:1c:18:7c:04:
08:2d:44:62:da:0a:e8:3a:29:8e:4d:f6:37:05:c4:
5b:95:2f:78:b3:e4:63:70:4a:a9:6c:4a:25:97:be:
b8:dd:1c:cc:e3:06:4e:0e:2e:7f:95:68:07:09:66:
37:ed:63:a1:e9:4d:12:4d:5c:47:07:1e:9b:33:2e:
34:32:58:0b:8f:8d:90:71:26:e9:88:0c:3e:ce:e8:
f3:a2:ba:e7:e3:6e:4c:4a:18:08:11:c1:9a:cd:2a:
75:21:3a:e0:a3:9a:0b:8c:dd:62:6a:cd:49:35:a8:
a2:7b:11:27:5f:36:67:91:b8:c4:6c:f2:85:d0:09:
15:74:4b:83:34:04:b7:f4:d0:42:c4:5f:2f:85:73:
7a:cd:66:99:4a:b4:ab:ec:57:78:ab:db:f7:0d:d2:
13:53:f0:6b:59:9b:87:bc:de:16:27:01:71:3b:ea:
41:3a:51:66:bf:d8:69:30:f6:8b:c8:ab:4f:4e:8b:
f0:40:d7:3a:47:ac:96:91:4c:32:fa:76:10:68:f0:
02:aa:7e:ab:4d:6e:e2:d7:4b:1e:7b:94:6b:f8:e9:
75:e2:34:40:9e:7b:92:17:c6:a2:58:a2:fe:8d:97:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:95:03:83:5E:5A:B6:24:DE:A9:A9:89:5D:DE:42:3A:BF:34:AF:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D55C75CDA7811EF85C3BD65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.185.0/24
Signature Algorithm: sha256WithRSAEncryption
83:19:b8:65:ef:43:86:b8:39:9a:f7:c8:e3:a1:ee:25:63:d2:
3b:c1:84:eb:58:9b:e5:38:25:86:9c:9e:5b:de:78:90:42:be:
a0:6e:74:91:ea:08:fc:21:5f:16:6d:18:00:d9:48:3f:5b:d3:
8f:c7:d4:a1:fe:3c:8a:3c:25:6f:ee:fa:0d:52:5a:6a:16:41:
39:0b:d7:2e:7c:c0:59:cb:5b:fd:f8:db:fb:d4:b8:fa:bd:81:
a2:a1:38:3f:91:7f:d0:91:83:e5:6b:8d:31:99:5e:1d:e1:e1:
e5:bb:30:cc:db:9a:f3:75:3d:35:23:97:86:02:75:3a:b5:09:
0a:10:a1:c8:34:d3:17:f4:ba:c9:f5:46:da:f4:32:00:b1:72:
70:d6:0c:ab:a5:52:f0:2c:88:22:12:6e:1b:6c:83:1f:75:a1:
95:58:b6:e0:70:7c:36:47:83:1b:ef:c6:c7:80:70:65:b4:64:
84:e6:ae:88:35:36:4e:2a:8a:cd:9d:80:ef:b0:9b:e1:77:e7:
43:9b:ea:3b:5f:9c:49:19:5e:b1:a9:2e:71:4c:73:da:de:a7:
99:50:53:21:21:0a:a6:db:1f:84:cd:4a:cf:70:df:a0:8b:8c:
cc:83:dc:2e:17:eb:07:ea:35:ac:31:53:b5:ee:94:64:d7:58:
b8:61:39:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:21:17 2025 by rpki-client