Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8130414D70711EFAE69A781762E951A.roa
File: C8130414D70711EFAE69A781762E951A.roa (raw, json)
Hash identifier: fLFGuU2h8xfxk+YrrtK6BBwOKLDSna1XEjMdf8o9frc=
Subject key identifier: C5:8E:AB:BE:D2:2B:73:57:6C:EC:0D:E5:7F:3A:A7:89:7F:E8:77:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8130414D70711EFAE69A781762E951A.roa
Signing time: Mon 20 Jan 2025 08:23:09 +0000
ROA not before: Mon 20 Jan 2025 08:23:05 +0000
ROA not after: Sat 01 Feb 2025 08:23:05 +0000
asID: 48031
IP address blocks: 45.200.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68593 (0x10bf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 08:23:05 2025 GMT
Not After : Feb 1 08:23:05 2025 GMT
Subject: CN=678e07ed-83cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:03:97:3d:a6:1a:63:cb:70:64:38:cd:e6:
bb:54:45:4c:46:1f:04:b2:ac:72:d9:c3:be:6d:c5:
5a:bc:22:00:66:2f:b2:7e:48:ca:f1:e7:93:67:5a:
fe:cc:27:94:59:21:11:1b:2a:d8:93:63:74:52:d1:
77:d8:f4:6d:6c:f7:fe:ea:b7:24:1b:a8:a3:22:45:
f9:52:b1:10:59:a2:b7:ed:22:4e:b3:3e:36:f3:ef:
bd:71:8f:f3:f7:3a:cf:54:fc:63:44:7d:d1:67:68:
80:e0:7f:ad:0b:b6:ba:19:ef:c7:2f:52:81:23:c3:
ef:78:45:9f:8a:32:be:12:4a:7f:c5:6c:ab:f2:d3:
e5:b3:89:4c:7a:93:1b:f4:99:1d:c4:e6:d3:d7:6d:
8c:96:a1:2e:12:45:29:f5:0b:ff:47:e8:13:5e:ee:
32:21:1a:d0:60:69:5f:b9:42:a0:05:f7:ac:18:02:
23:67:1e:9e:2f:83:74:d7:bb:0b:7b:81:82:a4:f4:
29:bb:ed:a4:08:9d:9c:41:95:a7:48:3f:8f:fd:55:
3f:5b:10:8a:6c:86:a2:71:25:9c:4e:28:25:e5:ab:
6f:58:35:b1:70:10:b1:fd:bb:ce:b9:e4:53:61:16:
d4:c5:ef:14:6c:07:f0:b8:e8:f2:2d:12:8f:71:f9:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8E:AB:BE:D2:2B:73:57:6C:EC:0D:E5:7F:3A:A7:89:7F:E8:77:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8130414D70711EFAE69A781762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.184.0/21
Signature Algorithm: sha256WithRSAEncryption
94:f8:36:f5:04:b9:61:f5:cf:a0:53:1c:12:c6:23:a6:d4:97:
aa:a1:a3:00:50:47:5f:39:59:f6:5a:8d:d7:22:e0:ae:b7:d4:
97:94:a7:4c:d0:19:5a:5f:10:b9:1a:b9:86:b9:00:66:f5:dd:
b8:2c:96:79:7d:51:a0:ef:a9:c1:22:90:4e:99:ef:cc:fc:bb:
29:81:ef:67:d1:27:2a:9e:1a:db:8e:ae:26:bc:20:43:f8:d0:
b3:86:95:de:aa:c2:2a:f5:ab:aa:da:18:26:bd:7a:0b:b4:07:
c2:01:dc:ba:bf:c7:75:d0:93:65:6d:65:27:95:2f:56:b1:0f:
c9:54:c7:98:cf:3e:b2:ee:12:f4:ab:78:de:2a:9f:6f:6a:cd:
9d:41:c1:75:d4:0c:41:c5:ad:b6:b7:6d:fd:67:b0:20:59:5d:
65:35:98:4f:7b:ee:4b:38:a3:11:34:55:f4:96:c5:65:6a:24:
af:c1:7c:bd:78:de:28:69:10:6a:0c:81:8c:99:d3:4c:b2:d0:
0c:a7:ca:67:af:f9:44:51:c9:51:3f:12:47:08:2c:0a:a1:69:
76:65:5e:46:84:ee:f4:60:7c:1f:39:38:1a:a2:fb:76:a1:9d:
78:82:90:aa:1e:c1:a9:66:b9:04:92:1f:fa:65:fb:c9:d3:b2:
51:11:6b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:15 2025 by rpki-client