Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B63AA990DC7F11EFAC6A2F9A762E951A.roa
File: B63AA990DC7F11EFAC6A2F9A762E951A.roa (raw, json)
Hash identifier: bZ+GA+uqP4MVX/nY0wdk6xy2IZDEzwSlN0e+tAxzGRQ=
Subject key identifier: 8E:FC:75:3E:18:8D:54:8E:15:2B:04:6B:F4:C7:32:2C:A2:BE:7B:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011477
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B63AA990DC7F11EFAC6A2F9A762E951A.roa
Signing time: Mon 27 Jan 2025 07:24:15 +0000
ROA not before: Mon 27 Jan 2025 07:24:11 +0000
ROA not after: Mon 03 Mar 2025 07:24:11 +0000
asID: 147176
IP address blocks: 45.201.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70775 (0x11477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 07:24:11 2025 GMT
Not After : Mar 3 07:24:11 2025 GMT
Subject: CN=6797349f-2f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:2f:3b:9c:b2:5f:e0:93:28:29:e9:c0:14:
d2:34:0f:d7:af:0a:2e:aa:06:4c:5f:70:ad:fc:07:
bb:06:7c:c7:c3:92:e2:a2:37:1b:86:13:cc:14:91:
01:35:7e:a4:93:e3:99:b7:c5:a3:05:13:10:1f:c3:
ea:88:ff:5f:d5:83:d3:f8:40:b2:72:a5:00:0f:53:
b7:76:1c:37:b1:ae:c9:e0:04:67:b6:f5:86:84:5a:
bc:7b:26:d1:71:72:f7:f0:01:33:68:e4:ed:3e:3e:
18:4f:cb:d0:51:ad:cf:59:eb:57:d8:ea:58:e4:4d:
ce:7e:80:96:42:45:18:49:3f:4e:35:1b:fa:e3:e2:
de:2d:ce:f3:b7:86:32:f9:9e:c8:0d:9f:9b:e0:30:
e8:6f:61:2f:f1:3e:ec:65:24:ed:60:e4:34:94:c4:
cc:ec:6f:a1:28:50:3e:49:a2:e5:7e:bb:8c:53:87:
96:19:6e:46:37:58:7b:ab:db:20:c9:84:38:f1:86:
10:a5:d6:ea:17:a6:3b:17:81:d4:93:c4:02:17:82:
02:97:a7:68:fb:ae:4e:80:e7:5b:f1:12:77:05:27:
64:57:e2:a5:0e:be:5f:57:b2:49:0f:72:d3:95:4b:
cb:7b:db:1a:e9:1d:31:dd:95:6f:2d:f3:e7:cb:49:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FC:75:3E:18:8D:54:8E:15:2B:04:6B:F4:C7:32:2C:A2:BE:7B:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B63AA990DC7F11EFAC6A2F9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.0.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d1:98:4b:a4:f3:8d:47:92:ad:6f:52:b9:cf:2b:c3:ab:69:
0a:1b:bf:1e:42:90:7c:5a:33:2b:d2:db:06:88:15:9d:46:ce:
8e:33:ed:a3:f8:7e:1b:b7:a5:13:93:39:2e:d3:04:80:19:1f:
8c:cb:fe:b8:1e:0c:39:2a:d7:c4:79:03:1c:e5:60:a1:9a:55:
da:b9:23:00:23:c2:43:26:6d:8e:17:3c:68:c4:63:cf:49:1a:
4c:1f:da:2b:2a:53:07:e1:dc:e1:22:a3:66:f1:d2:d3:83:a0:
b6:8c:08:8b:76:9e:50:35:bf:a2:12:9c:ed:b7:9d:03:64:65:
7f:2e:3d:2e:33:03:21:24:e2:cf:5b:61:80:05:b7:42:12:b9:
9a:a6:35:f7:92:2d:41:5c:bb:e3:80:cc:9e:a0:89:d6:75:79:
00:9a:d7:a2:5c:ba:00:3b:e2:ed:e1:e5:4c:2d:d0:a5:69:9d:
35:27:5c:2b:50:c8:b8:fd:e0:7d:e2:e8:d5:e9:fe:dc:69:37:
8a:17:ec:9a:68:e1:b6:7c:15:19:ce:36:fe:66:c8:ce:60:15:
e4:85:49:b4:40:90:05:0c:a6:02:41:ff:5f:a5:55:46:68:2b:
07:6a:d5:31:82:5d:82:db:ab:e1:8a:c8:ab:ce:79:99:d6:cc:
65:ee:91:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:23 2025 by rpki-client