Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9EC628CD51211EFBCCAADA3762E951A.roa
File: B9EC628CD51211EFBCCAADA3762E951A.roa (raw, json)
Hash identifier: tRmd5c5dZboOjViQakkCdv9EF1khH+8+/XXOlsPQe20=
Subject key identifier: 3B:1C:EE:69:31:AD:6C:BB:C4:D2:4E:44:75:9D:0C:83:2A:B8:68:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9EC628CD51211EFBCCAADA3762E951A.roa
Signing time: Fri 17 Jan 2025 20:36:28 +0000
ROA not before: Fri 17 Jan 2025 20:36:24 +0000
ROA not after: Sat 22 Feb 2025 20:36:24 +0000
asID: 139646
IP address blocks: 45.200.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68264 (0x10aa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 20:36:24 2025 GMT
Not After : Feb 22 20:36:24 2025 GMT
Subject: CN=678abf4c-b1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d5:c4:10:bb:37:8e:6d:65:dd:b6:1a:5d:e5:
8b:eb:92:b1:98:47:da:f7:ab:aa:20:22:cc:94:b1:
92:c1:0b:e8:1f:48:63:da:fe:86:79:55:ca:9d:3c:
e6:19:e8:e5:1b:88:be:d4:2c:6e:cb:85:02:1e:71:
1e:2b:89:f7:6e:1f:d0:84:9b:63:00:91:d4:ab:b3:
de:80:9a:11:f2:7c:4e:6b:33:59:df:76:30:81:8c:
98:4d:92:61:68:f5:b6:d4:ec:97:f9:a0:a5:ee:ae:
d6:66:47:67:f4:08:f4:af:1b:5e:98:73:87:5b:29:
5f:52:1d:e4:8e:83:07:38:89:c0:f2:8e:2f:e9:97:
d9:ee:ef:d1:15:d3:5e:9d:34:91:29:b8:a3:51:5a:
19:14:73:75:20:f9:f1:2f:6c:34:8f:7d:09:67:07:
ea:0f:f8:7b:17:a2:22:6f:ab:39:71:a7:d0:03:2b:
f8:25:0c:87:5d:77:4d:30:60:9e:6c:ef:5e:f6:ea:
28:e2:57:57:5c:ab:6f:e6:58:b6:d8:32:ee:62:87:
4b:ff:bf:b8:6f:94:f8:1e:1d:6c:c1:15:7a:a4:58:
d0:09:a9:dd:7d:45:18:26:72:e4:cd:a4:22:a1:44:
d6:b5:89:d4:0c:a1:2b:52:e3:b3:5b:6f:f8:3c:02:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1C:EE:69:31:AD:6C:BB:C4:D2:4E:44:75:9D:0C:83:2A:B8:68:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9EC628CD51211EFBCCAADA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.24.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:ef:41:51:cb:cd:d1:9b:d0:d4:09:c6:88:60:03:71:62:a6:
f8:8b:df:f5:9c:10:17:31:bf:5e:ff:4b:a1:ba:4c:6b:f2:14:
20:8e:11:74:09:14:c9:38:eb:e3:4f:88:3d:95:4b:95:f9:ea:
06:cf:a6:74:8f:e0:8d:3b:b4:cd:e8:0c:38:d3:aa:47:3e:58:
59:6e:a8:b9:c7:cb:90:30:7b:0d:ac:ff:af:c1:c6:41:a3:c8:
10:c3:00:37:c1:80:8e:e2:06:f6:93:21:c6:18:35:3b:89:a9:
62:ad:71:0c:92:e3:31:b4:bc:ed:bc:cb:86:0d:62:34:05:b8:
a1:54:80:eb:57:cc:08:c4:ff:4c:27:a9:62:0c:a0:4f:c7:e3:
d4:eb:ba:fe:33:5a:ac:68:46:32:c5:b4:9f:bf:06:17:82:2b:
e3:1e:d6:97:f4:77:88:77:c3:59:6c:44:06:26:9e:94:7d:92:
f5:2b:a2:12:b6:f0:cd:0f:80:8b:0a:af:fc:68:27:54:6b:32:
80:35:7e:e5:7e:3f:c6:36:b5:70:e2:96:47:bf:df:05:f2:d6:
bb:62:61:ab:0d:12:be:7b:70:ef:32:ae:da:6c:e9:70:cc:ce:
1c:ad:dc:91:f0:93:12:f4:44:5b:51:1f:c7:81:3e:ff:09:b6:
82:59:77:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:15 2025 by rpki-client