Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D96B5644D51811EFAF6D7A4D762E951A.roa
File: D96B5644D51811EFAF6D7A4D762E951A.roa (raw, json)
Hash identifier: jhFyZv/75alLTw1u4O9Q5PQdn9MrTHtlxJLKwegJjYI=
Subject key identifier: 6C:B0:48:73:40:F6:F3:71:0C:C9:CE:9B:CE:EE:72:D7:30:4B:E8:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010ABC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D96B5644D51811EFAF6D7A4D762E951A.roa
Signing time: Fri 17 Jan 2025 21:20:17 +0000
ROA not before: Fri 17 Jan 2025 21:20:14 +0000
ROA not after: Sat 22 Feb 2025 21:20:14 +0000
asID: 141883
IP address blocks: 45.201.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68284 (0x10abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 21:20:14 2025 GMT
Not After : Feb 22 21:20:14 2025 GMT
Subject: CN=678ac991-f169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:99:b9:5e:32:11:17:f1:2c:f1:0b:58:c6:
9f:6f:0c:e1:a6:c8:97:91:97:3a:ff:62:ad:9a:22:
a6:cd:97:fa:f1:c0:34:65:f8:4c:3c:3a:dc:ef:c4:
b4:4b:cf:8b:13:95:8b:bf:ea:d7:68:24:a0:df:d8:
95:f9:6d:c7:eb:4a:59:df:a1:9d:f8:be:db:28:7b:
a6:26:7b:61:ba:10:d8:44:86:cc:00:92:55:c6:aa:
c9:d5:c2:f0:85:5d:85:49:dc:1f:28:3f:a0:5a:00:
96:4d:d7:10:2f:64:4c:8a:6b:21:0b:94:8d:ee:f2:
34:f8:d3:70:23:77:e0:d3:4c:0b:d7:65:d7:20:7e:
6b:6b:b9:5d:53:d2:16:47:ff:c0:f0:3a:c5:f9:8c:
a1:d2:3a:5e:53:10:84:63:ce:9e:b2:3a:eb:e7:1e:
e2:31:4c:5c:4b:a8:c3:b8:49:66:5f:e6:af:9f:3c:
5e:ba:7d:2e:74:98:f0:b4:e9:37:6b:1d:9d:8b:81:
24:71:b6:75:75:5a:6d:e8:9b:fe:e6:64:95:9e:80:
43:02:60:bb:7b:70:5a:dc:40:3d:a5:02:94:75:2e:
df:5d:25:0a:8b:3a:21:b2:b4:b8:4e:fb:bb:18:e6:
3f:a8:75:61:75:00:5e:64:40:8c:bf:5c:5f:c5:9d:
10:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B0:48:73:40:F6:F3:71:0C:C9:CE:9B:CE:EE:72:D7:30:4B:E8:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D96B5644D51811EFAF6D7A4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.224.0/21
Signature Algorithm: sha256WithRSAEncryption
87:53:a9:61:48:b7:fa:57:fb:ad:44:2f:84:c9:e7:b8:4f:e1:
22:72:0a:eb:53:3c:db:6b:52:a5:5a:8f:10:b1:c5:63:e4:98:
18:3e:fd:a4:99:dc:40:4d:61:63:fc:f7:59:22:d8:07:2c:86:
21:1c:c1:b0:37:6b:f7:ec:03:5d:70:51:c3:72:94:4d:1b:b2:
46:29:91:95:c9:80:81:51:a4:36:ae:72:91:17:67:c3:61:c3:
a8:53:a6:f1:8f:fe:12:7b:1b:f9:cb:36:d3:67:6f:06:71:5c:
b0:61:40:9b:92:97:d8:6a:99:7e:c1:ae:6d:38:e8:34:24:b8:
2d:5f:3a:04:bd:7e:a5:84:c6:36:e8:8b:84:a8:fd:ef:1e:06:
db:23:28:6e:cd:8f:aa:92:55:83:af:9d:ca:42:9e:95:34:0f:
c4:a5:28:e2:e3:50:86:86:6e:3c:1e:84:3f:6e:ff:2f:b5:cb:
6c:2b:44:df:64:55:fd:a2:78:ec:ff:4f:91:aa:16:dd:54:5e:
07:58:7f:31:50:8e:13:db:4e:99:b5:22:c0:90:02:a5:10:d2:
bd:7e:55:5b:6b:22:47:83:5c:69:e8:f9:38:40:ed:a7:6d:83:
e6:58:bf:46:33:7a:b6:99:e8:ca:35:f4:02:fe:90:a1:c0:e7:
34:ac:d0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:58:53 2025 by rpki-client