Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A86C5D0D7CA11EF9CA1AE7F762E951A.roa
File: 9A86C5D0D7CA11EF9CA1AE7F762E951A.roa (raw, json)
Hash identifier: 3fcP7nCNVWxi6DSVrUZ3dgNDXFh3oQR2Nq0QHdkOB9A=
Subject key identifier: 7D:79:9B:CB:C7:53:57:61:11:B1:36:27:DA:49:6F:73:A3:76:AF:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CCE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A86C5D0D7CA11EF9CA1AE7F762E951A.roa
Signing time: Tue 21 Jan 2025 07:37:45 +0000
ROA not before: Tue 21 Jan 2025 07:37:41 +0000
ROA not after: Thu 27 Feb 2025 07:37:41 +0000
asID: 401366
IP address blocks: 45.202.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68814 (0x10cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:37:41 2025 GMT
Not After : Feb 27 07:37:41 2025 GMT
Subject: CN=678f4ec9-f521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:40:7c:30:4f:5b:9b:cb:e5:4c:67:3e:31:
46:99:73:1f:66:7d:a0:4a:16:44:b9:e7:bb:6c:af:
75:70:c0:db:68:7b:5e:52:da:7e:19:56:b4:8b:68:
fd:61:af:16:bc:a8:da:40:76:98:67:9f:dd:49:84:
04:f7:20:77:b3:61:53:11:ac:4c:3d:a0:28:6e:23:
99:ca:87:ba:01:6e:98:2f:26:7f:82:e9:77:60:85:
ce:f7:24:34:be:a9:5b:aa:a8:5b:a1:47:a8:6d:90:
de:a4:9d:62:89:9e:f1:a9:83:ba:be:4d:c5:ff:fd:
79:e7:9b:19:08:8f:fa:99:44:d0:9d:a8:9f:bc:c5:
ec:ac:2a:8f:18:5e:b0:6f:ed:51:42:ca:b1:10:18:
ad:35:53:ca:c1:7f:a4:49:c3:4a:11:6d:4b:87:a8:
27:d6:71:1d:38:7a:2e:d1:72:ef:82:fc:1c:9d:a9:
13:6a:8f:ed:d2:db:11:15:12:01:ce:85:ec:73:d3:
9d:1c:d2:71:14:da:f6:43:f1:77:5f:30:2b:c0:a7:
af:26:89:35:f4:c8:05:cb:91:83:78:7d:25:6b:67:
f9:0a:01:79:b0:dc:21:7a:34:65:a7:fd:4a:3b:96:
93:6a:5a:e3:7e:26:48:fa:f8:a4:d1:70:23:77:1a:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:79:9B:CB:C7:53:57:61:11:B1:36:27:DA:49:6F:73:A3:76:AF:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A86C5D0D7CA11EF9CA1AE7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a3:8c:06:9a:3a:62:ac:7a:2a:38:59:54:d4:f2:b6:19:7c:
1c:c3:79:5c:8b:0c:77:62:96:37:25:58:b2:3e:15:73:3a:f5:
3a:ec:ab:b7:19:b2:bf:89:65:7e:72:71:66:64:6e:cd:00:d3:
2a:35:ba:4e:e9:33:88:1e:30:5e:f5:7d:6c:bb:65:e6:e3:e0:
50:99:54:44:80:6f:5b:e8:66:c5:1c:b4:00:60:84:3b:ef:e5:
69:84:53:a7:d5:22:54:05:db:93:fc:fe:75:ff:24:7c:9f:a0:
f8:b3:40:03:4e:84:d1:01:70:27:8b:2f:22:f6:44:c4:a4:e8:
9b:c0:04:12:7f:8c:ab:e2:3f:5c:93:2b:fd:f6:5d:5f:01:ca:
df:4c:dc:b3:cd:a6:29:93:4f:ac:05:5e:98:88:4c:ea:61:04:
9a:24:77:8d:29:43:c3:cf:bb:49:a0:cc:7c:38:1a:40:02:4f:
f9:3b:34:2a:27:50:4e:6a:59:a3:ab:f8:98:c1:00:cb:99:38:
f5:2b:f2:67:9a:a4:32:7a:ee:72:4c:52:7f:ca:3a:a1:ce:43:
e1:8f:68:c9:21:22:1e:15:af:21:6b:20:14:d7:af:e9:d9:c8:
0d:c5:db:c4:f2:ff:95:9d:7d:f2:7c:82:b9:0a:13:d7:62:38:
27:64:35:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:12 2025 by rpki-client