Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A896AB1AD7CD11EFB6358891762E951A.roa
File: A896AB1AD7CD11EFB6358891762E951A.roa (raw, json)
Hash identifier: CuN/gDMDTmILb/Npz7OsNacOnnBn59NH0FsU4bxa5oc=
Subject key identifier: 2B:C9:67:E7:2D:E3:44:4D:CE:96:7C:BC:57:7C:55:89:3D:E1:49:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CE2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A896AB1AD7CD11EFB6358891762E951A.roa
Signing time: Tue 21 Jan 2025 07:59:37 +0000
ROA not before: Tue 21 Jan 2025 07:59:33 +0000
ROA not after: Sat 01 Feb 2025 07:59:33 +0000
asID: 48031
IP address blocks: 45.200.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68834 (0x10ce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:59:33 2025 GMT
Not After : Feb 1 07:59:33 2025 GMT
Subject: CN=678f53e9-dbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:ed:1f:bb:08:7f:38:80:6c:14:98:1f:89:
ab:27:1a:e4:3b:52:69:de:02:b8:d0:18:1a:0f:37:
8e:9d:cd:f9:ba:75:48:0c:cb:33:31:8e:d3:90:50:
e0:98:f5:c8:40:cc:d4:d4:9c:16:b1:11:c9:2b:73:
1b:3e:bc:15:bb:fd:19:1d:e4:46:53:6c:20:47:c0:
37:69:ac:00:18:9b:2f:5f:9a:40:3c:09:16:1f:bb:
6b:a3:bd:c3:12:b8:21:c4:d1:5b:e1:d6:ef:a7:20:
dd:d0:aa:8c:b3:45:a6:59:91:4d:48:b9:f8:4e:62:
73:7f:3f:e1:1b:3c:de:72:c9:ac:47:ed:e5:78:74:
77:41:77:53:86:88:86:f2:a4:6c:ef:a9:51:97:46:
f1:0c:42:dc:91:ec:e5:4e:d4:01:20:d3:d8:16:f3:
38:1a:03:af:53:54:74:e3:d6:f7:1a:98:7b:fe:40:
6d:89:88:9c:13:93:c6:85:05:f4:b6:e9:e2:f5:f8:
a1:b9:29:f6:0b:cf:3d:86:ac:a7:9c:a8:5c:fc:cc:
f6:70:eb:e8:6d:37:b3:24:39:b3:55:ec:c9:01:76:
6b:02:e0:c6:6a:79:f3:f9:e8:4c:5b:7d:15:00:25:
7d:63:64:93:8a:85:bc:4b:2f:da:78:74:48:39:0c:
27:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C9:67:E7:2D:E3:44:4D:CE:96:7C:BC:57:7C:55:89:3D:E1:49:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A896AB1AD7CD11EFB6358891762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:34:a4:76:6b:e6:0e:8e:cb:a0:df:a0:f7:f1:c0:01:3b:cb:
bc:93:fb:da:0c:20:5d:05:b8:b9:b3:93:e8:7c:32:2a:1b:bd:
a8:4f:43:77:73:16:ff:80:00:20:7b:7f:82:11:c7:95:6e:64:
52:9d:9a:d4:51:de:08:ad:c9:ef:17:da:ab:19:b0:c3:2e:3d:
89:ca:d7:9b:eb:f2:39:5c:41:05:33:76:e2:8f:a2:1a:95:ae:
b1:44:89:b7:44:68:6a:9e:ba:f9:e3:6e:2c:38:37:6a:f4:b4:
6d:bf:b9:31:15:ef:5b:92:87:19:4a:85:9f:6e:94:50:58:bf:
1c:29:65:97:e4:7c:3a:3d:c8:76:dd:5a:50:78:74:af:54:ae:
7f:ce:73:2f:de:8c:55:d5:e2:bb:76:07:5f:1b:e1:99:3e:e6:
e4:ea:5e:76:5c:41:3c:11:31:f0:be:d3:75:35:51:9d:62:af:
3e:28:d9:93:b8:11:bc:e7:b0:5c:88:e1:69:f5:98:58:9d:d2:
6c:4d:27:fa:cd:61:17:f1:1e:6a:72:e8:d7:b3:73:9c:e0:42:
a8:60:b2:d0:b8:97:ae:25:75:cc:9d:00:9f:fc:ed:7f:26:6b:
e3:f6:c5:5f:68:14:2d:2c:fe:28:f4:af:1d:7e:80:ca:50:6f:
ac:f1:97:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:22 2025 by rpki-client