Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FB9B10D52011EFB9A94D7F762E951A.roa
File: A8FB9B10D52011EFB9A94D7F762E951A.roa (raw, json)
Hash identifier: Tj0Ootzv8o918sd4DOXJBcXFlgBQCclvpUQy0QOtSeY=
Subject key identifier: 86:8B:C8:80:43:ED:6E:D7:37:CA:D1:A0:93:CD:B4:8A:82:85:B5:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FB9B10D52011EFB9A94D7F762E951A.roa
Signing time: Fri 17 Jan 2025 22:16:12 +0000
ROA not before: Fri 17 Jan 2025 22:16:08 +0000
ROA not after: Sat 22 Feb 2025 22:16:08 +0000
asID: 139646
IP address blocks: 45.201.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68324 (0x10ae4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 22:16:08 2025 GMT
Not After : Feb 22 22:16:08 2025 GMT
Subject: CN=678ad6ac-26fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:55:36:6e:0e:17:62:79:36:c8:2e:09:75:
0b:74:5f:39:44:12:fe:84:74:f0:4b:65:06:e9:37:
cc:6d:64:e9:f6:8b:3d:6d:fc:00:71:96:ce:05:2e:
84:f1:5c:d7:25:16:d7:05:85:6f:83:3e:53:f5:c6:
56:05:54:7c:30:b9:8a:b7:5a:6b:0c:e9:09:d4:01:
d4:72:c8:0a:30:2d:5f:15:02:4c:cd:c8:db:6c:b5:
2f:b6:e3:df:41:98:df:b4:73:1a:4c:f5:68:20:0d:
b3:d8:4e:34:e9:57:db:da:47:7d:d1:80:b3:f7:53:
87:da:d4:6c:03:95:e0:35:0a:24:a2:e9:1d:a4:53:
bf:61:32:2d:b7:98:8c:1e:a7:41:a8:da:3b:67:bc:
4c:7c:fc:ef:9c:47:42:b7:ab:83:53:c9:91:1e:00:
eb:af:2a:05:06:19:29:99:64:1b:5c:16:14:16:e2:
5b:3e:1b:3b:82:cf:7a:5e:08:59:2f:46:ff:6e:b9:
5c:ca:69:80:ad:c8:d4:88:59:d2:1a:70:3e:43:3d:
8a:19:81:78:e8:b9:7d:22:6e:1e:18:dc:e2:26:b5:
ee:52:4a:dc:fe:e4:66:92:c3:1d:5d:94:7f:f4:d2:
66:f0:5e:2c:d1:88:7a:64:7f:21:ba:98:f8:ad:86:
c9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8B:C8:80:43:ED:6E:D7:37:CA:D1:A0:93:CD:B4:8A:82:85:B5:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FB9B10D52011EFB9A94D7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.224.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:f6:a3:d0:d0:73:64:7e:4d:c8:ce:72:a9:0f:28:45:32:19:
39:23:9a:c6:f0:89:35:9f:b0:db:63:1c:7e:5f:db:d0:8d:67:
3c:c5:be:3f:43:99:56:31:bc:8f:16:c4:69:2e:d7:6c:a4:45:
dc:e8:0d:f2:53:a9:ea:61:9c:90:e7:2f:66:b1:c8:1b:06:bd:
d2:03:54:26:a5:f3:e8:b1:e4:a7:e5:a5:65:7f:5e:68:83:f2:
cd:60:88:8d:0e:6a:cc:8f:10:18:94:f4:6a:1f:19:16:23:81:
ed:07:ca:a6:e5:26:18:a4:fe:0d:99:fd:35:b3:dd:f4:9e:4e:
03:c8:cf:10:a2:0a:c1:20:bb:8f:a5:a3:5c:8e:38:61:08:4c:
3b:42:14:09:49:29:25:3e:cf:81:49:e0:fc:da:22:b6:25:19:
42:9a:75:25:73:95:69:11:56:81:53:74:b7:d1:59:b1:8e:76:
e3:8a:7b:ad:13:33:6f:12:a0:97:2e:9e:bc:e4:39:d4:f7:16:
13:7f:c3:12:b0:48:76:0c:6d:8f:3b:6d:2a:5d:13:5c:41:02:
22:17:ef:d9:cd:dc:64:85:47:73:46:f6:71:ae:ce:64:a9:0c:
74:d3:df:c3:00:01:62:27:9f:73:6e:bf:04:10:bc:c1:19:5f:
d4:4f:a5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:42 2025 by rpki-client