Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDDAE190DCBD11EFA4AD8FB6762E951A.roa
File: BDDAE190DCBD11EFA4AD8FB6762E951A.roa (raw, json)
Hash identifier: IAsFUIeScaM+KTIh9p7FQnvKeJYDfufujodqNNbukUQ=
Subject key identifier: 21:0F:D4:D8:84:7C:52:E7:B5:AD:D6:7F:9B:75:E3:80:8F:98:FE:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01153F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDDAE190DCBD11EFA4AD8FB6762E951A.roa
Signing time: Mon 27 Jan 2025 14:48:16 +0000
ROA not before: Mon 27 Jan 2025 14:48:12 +0000
ROA not after: Sat 08 Feb 2025 14:48:12 +0000
asID: 138456
IP address blocks: 45.202.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70975 (0x1153f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 14:48:12 2025 GMT
Not After : Feb 8 14:48:12 2025 GMT
Subject: CN=67979cb0-489f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:d2:ba:2b:1b:c9:b7:8d:58:a4:8d:49:91:
0a:70:55:73:cc:c7:20:bf:35:d7:78:4a:8a:ef:f3:
e5:19:76:eb:32:3b:88:ea:e3:f8:b5:f5:7f:cb:9f:
cb:62:1b:8c:e5:a4:2d:1c:3a:d5:8d:88:9c:d9:5b:
9d:2d:3e:c3:45:c6:3d:c8:f3:0e:5f:8f:81:8a:a5:
f1:7e:5c:47:bb:fb:99:22:ec:e9:14:6a:67:a5:d2:
26:f1:11:fd:5c:9e:97:42:f2:b3:fb:86:5b:55:de:
ed:6f:24:65:3d:8f:9d:27:d0:f0:90:5a:8d:05:01:
fa:93:b7:2b:0f:c7:b3:da:da:69:a2:e1:5b:3a:b9:
df:58:98:ff:4f:f1:dc:b3:45:55:da:86:21:52:df:
54:e4:62:1c:13:5a:69:70:fc:55:70:bc:da:e5:cc:
f9:8b:ee:ab:17:7d:58:75:e3:02:c9:0c:bd:da:56:
66:34:59:04:4f:a9:5f:6c:a1:f0:c4:f2:59:59:ab:
b9:2d:17:4f:35:ac:48:a0:ea:b0:ba:d0:40:8a:05:
d3:d7:be:2a:d7:6b:b8:ed:72:b8:5a:3e:8b:21:10:
4c:8b:de:44:3b:fc:6e:bd:f7:dd:dd:c3:29:51:53:
08:a4:f3:b2:6a:c9:ca:a6:98:46:df:6d:68:9f:9e:
e7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0F:D4:D8:84:7C:52:E7:B5:AD:D6:7F:9B:75:E3:80:8F:98:FE:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDDAE190DCBD11EFA4AD8FB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.194.0/23
Signature Algorithm: sha256WithRSAEncryption
67:3a:f8:1d:65:b1:f0:31:de:59:e8:74:b4:24:ad:a8:16:da:
8b:d2:b9:de:4b:f2:3f:ce:4f:7b:72:31:8f:c5:ac:b7:83:f8:
a4:df:ef:03:49:61:30:90:f6:4e:af:0c:88:34:61:7c:75:df:
3a:a4:21:84:8a:10:51:bb:21:4d:ac:6c:da:60:ae:8d:6f:e6:
20:05:d9:2a:20:18:9a:a4:8d:c6:6f:ed:6b:83:ae:5c:0e:d7:
bd:46:a1:20:56:fa:2f:0c:8f:f1:7d:eb:25:35:52:e2:85:46:
da:5e:b3:7b:75:fb:78:df:66:fa:18:a4:4d:1f:0d:5a:27:61:
b0:ab:05:2e:2f:9d:aa:4e:77:bf:e7:47:05:74:10:01:83:3b:
e1:a9:8c:3b:5e:ab:28:8e:7e:b2:4c:65:52:76:5a:5d:48:a0:
ef:db:9a:7a:be:61:9c:63:11:bd:8d:81:5d:6f:53:4d:77:9f:
61:d6:dc:60:08:ae:c8:3c:64:78:61:bd:01:5b:08:4e:fe:b0:
2c:70:b0:f2:9b:9e:14:74:2d:1b:b7:dc:c9:83:52:9c:ac:2a:
3f:b7:05:78:8a:16:83:83:e4:6a:17:5b:45:6a:e3:54:5f:b2:
5e:c5:58:38:f6:0d:69:30:55:0c:67:78:f9:8a:e2:e0:04:b4:
eb:85:3f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:06:01 2025 by rpki-client