Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7EA1E52D80E11EFB293C1B6762E951A.roa
File: C7EA1E52D80E11EFB293C1B6762E951A.roa (raw, json)
Hash identifier: qZMs64R/z4lTO3r7S4QqD2dVHB7IMMKF347weXUQFnM=
Subject key identifier: 61:69:FF:51:21:95:A0:67:D4:77:8E:1C:C4:7B:AA:49:44:1E:F2:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7EA1E52D80E11EFB293C1B6762E951A.roa
Signing time: Tue 21 Jan 2025 15:45:47 +0000
ROA not before: Tue 21 Jan 2025 15:45:43 +0000
ROA not after: Sat 01 Feb 2025 15:45:43 +0000
asID: 202656
IP address blocks: 45.200.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69208 (0x10e58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 15:45:43 2025 GMT
Not After : Feb 1 15:45:43 2025 GMT
Subject: CN=678fc12b-b82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:ce:31:1c:3a:b4:61:dc:93:60:f1:32:5d:
1a:f2:37:fe:41:49:20:ad:88:c5:d5:19:1a:09:e6:
38:49:b2:3b:e9:04:96:21:bd:90:0f:63:99:90:c5:
46:09:09:2e:e2:9a:1b:a9:d0:43:5b:fd:97:f3:b7:
f4:0e:db:7f:89:91:a7:ec:f9:4c:db:e3:d0:a7:f5:
b1:04:d9:36:6b:4e:9b:47:48:a1:81:ee:a5:dc:0f:
3f:7e:d6:0d:0e:6c:da:19:fb:d1:59:61:c3:fe:67:
50:29:0f:f5:4d:cf:98:aa:d0:f7:0a:14:00:5d:ef:
bc:0c:0f:b8:a9:cc:20:01:39:65:0d:39:ea:19:af:
a9:8d:ba:ba:93:6e:6a:bd:01:d2:99:f8:53:e0:b4:
b9:7c:e4:9c:54:47:93:20:9d:d1:84:fe:e7:a8:06:
5c:10:92:82:87:17:c1:73:d9:84:14:4a:1b:ac:1b:
73:18:3d:98:d3:95:db:3c:f6:6a:dd:45:a7:55:2c:
20:c3:26:4a:66:e7:26:b8:05:d3:01:d6:12:fc:1a:
23:31:ef:67:47:61:01:df:47:47:22:32:0c:58:a5:
6a:e3:b0:37:48:40:b6:43:25:29:ca:eb:e4:e6:76:
e1:ff:ac:0a:ec:a0:26:56:8e:99:72:6b:2e:c2:20:
46:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:69:FF:51:21:95:A0:67:D4:77:8E:1C:C4:7B:AA:49:44:1E:F2:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7EA1E52D80E11EFB293C1B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.164.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:8b:df:59:2f:6d:14:04:db:19:24:d3:fa:5a:50:ed:c6:62:
58:40:4e:1c:69:6d:ba:d7:cd:b7:5c:63:8d:43:4f:c5:80:fe:
68:22:c4:e2:77:24:09:9b:14:4b:8c:ea:1e:f0:28:75:35:ea:
1d:e9:31:29:2a:93:6a:01:0d:3c:3d:25:be:e1:86:da:31:4f:
86:78:f6:b1:2d:bd:1c:12:26:3f:b0:e6:57:3f:98:48:2c:1c:
83:7c:47:f9:ee:7b:d0:ce:3e:26:62:38:4f:4e:2c:c8:26:1b:
fa:39:0c:f2:b8:58:76:c1:00:16:ac:4d:c9:42:bb:02:63:bf:
47:52:86:ed:a1:dd:40:9e:be:89:fc:b2:18:48:bf:62:15:57:
0b:6e:dd:43:95:df:8c:87:b9:63:e5:2c:11:bf:1f:28:f0:67:
17:14:28:27:bb:ec:76:75:e9:f5:32:ca:bb:c7:be:c6:5b:b4:
46:ca:1c:c8:28:ee:ea:b7:04:99:9d:31:87:0e:24:15:74:9a:
d7:19:e6:12:2e:a8:49:07:7f:03:29:0c:bf:e9:a8:f3:1e:12:
4d:9e:13:df:0b:d2:03:3d:63:d0:ce:1d:a9:92:16:4c:1a:8e:
05:23:1d:fe:dd:61:f6:5d:f5:ac:e1:4c:9b:0f:bf:e7:8b:a8:
fe:38:7c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:36:27 2025 by rpki-client