Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3840CA2D50B11EFBEB15C77762E951A.roa
File: C3840CA2D50B11EFBEB15C77762E951A.roa (raw, json)
Hash identifier: KiBIt6HANNE5YWLgaqC04A9FP5OKU2Dhxr9TtXuwCwI=
Subject key identifier: 53:D0:50:87:C6:FE:A5:69:08:5C:69:20:BE:DA:3E:21:59:DF:DA:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3840CA2D50B11EFBEB15C77762E951A.roa
Signing time: Fri 17 Jan 2025 19:46:37 +0000
ROA not before: Fri 17 Jan 2025 19:46:34 +0000
ROA not after: Sat 22 Feb 2025 19:46:34 +0000
asID: 54801
IP address blocks: 45.207.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68224 (0x10a80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 19:46:34 2025 GMT
Not After : Feb 22 19:46:34 2025 GMT
Subject: CN=678ab39d-c0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:34:f5:4a:37:3a:a5:d6:b9:31:ac:a7:e8:
c7:6e:4f:12:dc:96:7c:f3:1d:57:93:0a:44:5b:30:
e6:fa:83:ed:25:07:96:dc:d7:03:df:0d:e5:41:97:
9b:1f:a9:18:10:9e:5d:ed:a6:3f:b8:5f:bf:56:79:
44:69:a1:0e:72:56:b7:81:03:31:4b:a8:25:a8:6c:
a0:0e:31:f7:c8:84:78:a1:82:aa:33:dd:4e:d0:ad:
5f:10:68:0f:a1:4d:f7:21:c2:1d:b4:b1:44:b1:0e:
0c:45:f6:d8:65:06:c8:bd:fd:98:15:f9:6b:20:88:
f9:49:e0:bb:56:55:82:2d:34:81:02:79:40:08:1c:
04:e0:e1:ea:10:38:ec:4b:b2:c7:28:4c:28:f3:75:
c1:60:a1:2c:ce:8a:8c:ac:19:62:21:b9:c4:b2:88:
65:25:45:b8:4a:ae:63:bc:1a:87:32:d3:38:8b:9a:
5e:82:f0:d9:44:41:99:22:46:df:c0:07:a2:59:38:
ac:b9:d3:7e:fe:69:d5:e5:85:90:47:0b:ae:1e:00:
3d:5a:63:a4:6c:3e:6b:cc:7e:f2:48:38:e5:aa:54:
5f:b9:14:e6:d8:90:dc:e7:30:ab:b5:96:05:ca:e9:
24:9d:4c:33:5e:88:03:3a:be:3c:a1:cc:14:e3:c5:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D0:50:87:C6:FE:A5:69:08:5C:69:20:BE:DA:3E:21:59:DF:DA:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3840CA2D50B11EFBEB15C77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.224.0/20
Signature Algorithm: sha256WithRSAEncryption
61:bd:41:cf:84:9f:b3:8c:1a:d6:1c:97:0a:de:51:9f:df:25:
5c:3b:fb:22:96:23:78:62:9e:1c:ab:91:4b:a2:fc:45:28:b2:
ff:5f:2a:1c:77:21:17:c7:0c:3e:03:47:f8:0e:47:d5:a6:b2:
69:40:24:77:ca:ad:65:55:14:ab:a2:9d:9a:bd:09:a5:69:01:
b6:fb:fd:e2:46:cc:6f:b3:9d:a2:0d:1e:e3:f0:b2:4b:3c:84:
22:73:f5:af:f5:76:70:61:fb:bf:2f:7d:80:ae:55:bc:84:8b:
5c:a7:cb:85:92:3a:cf:8e:df:bd:80:8b:c2:5d:e2:55:8c:5f:
65:80:91:52:39:13:6a:ed:f8:bd:9b:8f:1a:b7:29:b3:99:44:
76:c2:8b:bf:ff:ce:53:7f:89:36:41:d2:07:70:3b:d1:00:5d:
16:9b:3d:6c:ff:f6:c2:a3:21:58:16:2b:9a:3c:61:f7:4b:8e:
d2:d5:f1:b1:48:e9:39:85:9b:b6:2b:24:63:df:ab:d5:eb:0b:
a2:bd:9e:ee:db:fb:39:af:e0:73:2b:a1:ec:db:37:84:74:63:
d2:72:71:3f:ab:22:1c:cf:0b:78:6e:02:95:95:27:79:34:0e:
14:6b:ab:c9:0b:26:c4:e3:18:33:c4:42:64:34:6e:25:ce:a1:
7b:77:e1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:08:01 2025 by rpki-client