Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ED9AD48D51C11EFBDB2BB63762E951A.roa
File: 8ED9AD48D51C11EFBDB2BB63762E951A.roa (raw, json)
Hash identifier: kLOQdQar5s/BDcSPSwDnpyiz6ix5Bk63ysIkAv7+hC8=
Subject key identifier: C1:4E:18:87:7B:C9:02:1B:D2:4C:B9:ED:8A:46:52:8B:2C:34:02:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ED9AD48D51C11EFBDB2BB63762E951A.roa
Signing time: Fri 17 Jan 2025 21:46:51 +0000
ROA not before: Fri 17 Jan 2025 21:46:47 +0000
ROA not after: Sat 22 Feb 2025 21:46:47 +0000
asID: 141883
IP address blocks: 45.201.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68304 (0x10ad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 21:46:47 2025 GMT
Not After : Feb 22 21:46:47 2025 GMT
Subject: CN=678acfca-1206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:e8:c1:e7:88:0d:ae:e4:ac:0e:bd:17:21:
fb:c6:ac:e7:ab:fe:70:63:57:25:95:ec:8f:2f:ba:
29:21:31:b1:ae:a2:9f:80:43:d3:95:ea:82:1a:38:
89:7d:08:de:90:3c:96:26:a6:44:aa:6c:1d:ac:f8:
fb:38:0a:da:8c:24:5d:ce:a1:a9:26:f8:5f:97:f5:
33:a2:e5:40:bd:8d:c9:a0:cf:28:3d:7f:e1:a0:50:
96:c5:f1:dc:b6:0e:ba:f7:64:1a:c8:84:28:9b:dc:
f6:60:09:28:70:ad:c9:b7:65:f5:91:ce:fa:f6:50:
9e:e6:e6:72:ed:58:2d:da:09:c2:24:3e:af:c9:ea:
85:88:37:23:a2:ef:a3:fd:9a:75:6a:41:3a:cf:49:
b7:0c:ea:ae:d3:29:9b:32:fc:6e:98:6e:b2:c1:2d:
70:89:9c:82:e1:7d:3e:d4:8f:ed:72:c5:b9:9e:ce:
db:4a:b5:4f:33:62:6a:b1:0d:35:6f:ef:fa:f2:c7:
74:69:6d:a4:21:32:28:88:fe:4d:28:6a:9e:bc:79:
5c:eb:9e:fe:25:f9:eb:48:58:e4:97:9e:71:71:d7:
f5:72:37:fc:60:09:cc:7a:14:e2:63:ac:15:dc:f5:
35:a5:73:7a:5a:32:4c:c7:7f:fc:c2:7d:d2:bb:1c:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4E:18:87:7B:C9:02:1B:D2:4C:B9:ED:8A:46:52:8B:2C:34:02:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ED9AD48D51C11EFBDB2BB63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.214.0/23
Signature Algorithm: sha256WithRSAEncryption
29:8b:b5:30:5d:05:66:3c:8d:fa:ad:c9:f6:1c:2f:bc:15:ac:
ce:20:a5:ac:4e:3f:0a:0e:e2:a5:64:70:88:f7:9f:80:65:64:
8b:cf:b1:d7:3f:d7:d6:35:1a:19:89:a2:ad:22:d2:23:d7:18:
df:b1:ee:04:99:ce:e2:10:c5:fb:91:db:a3:b8:4f:b2:b9:d1:
b0:a4:af:fd:0a:ff:c9:a3:0b:c4:8c:70:6e:96:17:ed:2c:a8:
ba:76:9e:6d:fa:c6:73:c4:f2:f0:20:67:cf:9f:fe:02:62:89:
b0:04:e6:d9:88:56:8e:29:8c:c9:76:da:25:fe:44:e7:7b:a6:
5a:31:b2:2e:f4:c8:0c:ac:20:b3:0f:a4:c7:65:5a:69:f5:20:
0f:b1:dc:50:79:d0:08:b6:a6:16:45:93:ac:5a:80:18:78:93:
3d:41:cb:72:13:35:27:c6:24:a0:f7:9e:30:98:30:e5:fd:7e:
38:c5:c2:58:92:81:ca:62:61:51:b1:85:7c:af:28:16:8c:2f:
59:0d:c2:ad:5d:d9:83:16:89:31:34:ba:ea:91:f6:48:ea:0e:
c3:a5:b2:b1:13:86:2f:6a:18:4c:cb:33:f9:a9:65:c8:c6:50:
54:7c:12:5b:69:6e:cf:a5:59:16:90:c1:3b:3d:03:82:2e:d2:
de:e5:3c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:53:52 2025 by rpki-client