Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C794AFE2D58611EFB2AAF4A8762E951A.roa
File: C794AFE2D58611EFB2AAF4A8762E951A.roa (raw, json)
Hash identifier: DRZPTUrEKz8vxjV1YY5wlaWPN0XMRLpu+JhEn27fnJg=
Subject key identifier: B2:79:C4:66:50:92:D5:49:08:FE:63:D6:4E:D4:B0:29:93:6E:9B:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B81
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C794AFE2D58611EFB2AAF4A8762E951A.roa
Signing time: Sat 18 Jan 2025 10:27:12 +0000
ROA not before: Sat 18 Jan 2025 10:27:08 +0000
ROA not after: Sun 23 Feb 2025 10:27:08 +0000
asID: 395793
IP address blocks: 45.201.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68481 (0x10b81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 10:27:08 2025 GMT
Not After : Feb 23 10:27:08 2025 GMT
Subject: CN=678b8200-d151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:44:27:0e:ad:d8:3f:5d:87:75:6f:0a:ea:1d:
c0:35:36:14:00:99:df:0e:f2:4e:ac:0b:81:42:bf:
a7:f1:ff:e9:b8:49:4d:84:26:1d:47:1f:ff:2c:98:
6f:29:ce:c2:4e:a2:a6:1d:aa:3e:e2:7f:73:e3:c0:
12:e3:d7:a5:f0:81:87:fb:2b:58:f2:82:a3:ff:9f:
0d:ec:e3:f6:8e:1f:1d:d8:2c:ab:18:1a:c4:19:c6:
16:df:c6:fa:df:68:4a:57:16:65:a2:cb:fa:a1:86:
0c:06:3c:bf:87:2c:bb:87:5e:7d:67:6f:a3:ad:6c:
fa:cd:fb:ba:63:14:b7:a4:38:31:07:ee:69:28:1a:
cc:1f:03:cb:ff:48:13:23:db:4e:d9:9b:5b:fd:c8:
bb:c4:f6:37:c9:9a:bb:a7:3c:ed:dc:de:8c:39:ed:
de:db:d4:34:e1:37:6e:34:10:07:f0:3a:92:f1:16:
4c:82:6f:c2:c0:32:76:40:ea:c1:bb:f6:64:55:e8:
5e:d6:da:20:95:04:a7:ad:b9:6c:83:a1:28:c8:ff:
21:e5:65:25:7a:5c:a9:64:db:2d:25:f8:ea:59:ec:
a5:30:bd:3e:67:c2:1f:b4:d6:42:ff:91:39:f6:b9:
ba:17:ea:f6:87:e1:1d:df:d3:cf:47:ff:b6:28:ae:
03:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:79:C4:66:50:92:D5:49:08:FE:63:D6:4E:D4:B0:29:93:6E:9B:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C794AFE2D58611EFB2AAF4A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.23.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0e:27:a8:6d:8f:71:42:9a:65:4d:3a:31:64:61:78:2a:ea:
8a:d8:27:a5:29:c3:9a:9b:76:31:a0:9d:00:9f:3a:61:ac:97:
79:e2:70:9d:c8:6a:bf:d2:71:44:5f:16:52:03:41:83:3d:bd:
ef:df:ce:16:53:5f:3c:36:ed:a9:25:bd:46:9a:44:9a:de:b7:
00:af:b2:5a:f0:21:c4:64:4d:79:78:af:b0:8a:d7:87:f2:f5:
73:26:d6:fd:2e:2d:25:c5:b9:2d:d8:a9:48:17:cc:53:f4:63:
06:e3:f4:70:3e:56:b9:18:a8:f4:aa:9d:fa:3e:d0:49:37:f9:
a4:25:9a:1c:26:b2:9e:94:10:94:83:5a:a2:c5:85:00:2b:7c:
5f:5a:6a:4e:1d:07:f9:b2:79:03:5c:d3:79:b2:1b:e8:70:f6:
4e:2d:6d:b8:71:20:d2:cc:9c:a3:2f:41:42:fc:e6:9d:e5:e8:
24:d0:3f:8b:ec:c0:ca:bc:f5:30:12:5c:22:53:1b:3d:17:97:
3a:bf:7d:57:35:bc:6e:d5:11:14:8d:06:69:d1:27:e0:37:cf:
66:0e:fd:16:70:d1:f9:32:86:16:16:81:30:b4:12:b8:54:40:
fa:bb:c5:20:65:5c:4d:0d:88:e3:b5:c2:39:70:fd:42:c8:93:
c0:ce:fa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:39 2025 by rpki-client