Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB8EA198D51C11EF981EC765762E951A.roa
File: DB8EA198D51C11EF981EC765762E951A.roa (raw, json)
Hash identifier: 8bPdPjx3D+DNmobSAcl9eXPoHuNgbegkboqVakxyjBM=
Subject key identifier: C2:A8:2D:6D:7E:5F:43:D7:39:5F:78:DA:73:3E:E9:D4:43:92:71:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AD2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB8EA198D51C11EF981EC765762E951A.roa
Signing time: Fri 17 Jan 2025 21:48:59 +0000
ROA not before: Fri 17 Jan 2025 21:48:56 +0000
ROA not after: Sat 22 Feb 2025 21:48:56 +0000
asID: 141883
IP address blocks: 45.200.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68306 (0x10ad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 21:48:56 2025 GMT
Not After : Feb 22 21:48:56 2025 GMT
Subject: CN=678ad04b-8aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a2:d8:c2:ca:79:94:5b:4e:c0:8a:18:1a:81:
ba:a9:8a:18:3b:30:b1:56:bf:63:df:1e:53:90:80:
1f:38:4d:27:bd:48:56:31:96:33:7e:16:eb:80:07:
5a:c9:12:4b:cc:da:80:b6:f3:02:aa:68:b9:aa:8b:
55:76:70:d4:0d:1f:c3:67:a5:47:41:39:f9:07:0b:
20:a0:be:0a:ea:d9:6a:32:53:b9:09:e7:dd:c1:93:
d1:82:4f:f6:f0:c8:da:81:14:75:21:45:d9:0b:04:
34:c3:5c:ca:f0:3e:35:09:0b:8d:fc:e7:61:b4:c5:
85:21:54:b7:a0:e2:65:8e:44:4c:4b:78:cb:b3:e6:
44:fd:74:74:ef:87:2f:54:1a:30:b4:a2:26:f8:d7:
c4:1a:85:30:66:14:11:f0:06:a5:9c:47:e4:42:3d:
cc:92:6b:9c:be:bc:b8:f1:25:b6:b8:2d:f6:8b:94:
13:01:24:5b:20:54:34:3a:dc:d2:6a:28:66:50:e8:
ba:3a:62:52:0c:a9:af:27:da:74:b5:08:53:99:36:
3b:7a:52:de:ad:99:f3:92:8e:76:b8:20:bb:3c:df:
e2:de:fc:c3:b6:0b:cc:a8:cf:67:9f:83:78:3d:c7:
c6:4e:df:d9:c6:19:bf:08:13:69:cf:59:94:9d:4d:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A8:2D:6D:7E:5F:43:D7:39:5F:78:DA:73:3E:E9:D4:43:92:71:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB8EA198D51C11EF981EC765762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.24.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:08:16:53:e7:ac:a8:0f:16:0e:75:27:3a:3e:4e:4f:88:97:
c3:58:29:fe:63:37:1b:12:da:86:a3:39:12:69:70:19:84:b0:
a7:56:43:8d:11:ac:02:a6:d9:e7:4f:69:a1:eb:73:c5:a1:ea:
38:bb:9d:e8:25:58:ed:d7:66:31:fc:83:75:ed:ba:59:1c:aa:
4c:33:1a:45:73:8b:d7:0c:39:1e:59:f7:4b:68:c6:9d:56:ac:
ef:dd:9e:29:e4:dd:d1:67:9d:6f:ff:1c:aa:db:bc:84:e1:b1:
9f:48:87:7a:e8:17:ef:2b:3b:7b:f2:8c:17:0b:bc:05:f5:22:
2c:ef:d4:14:17:2e:36:b5:21:77:37:3d:cb:87:c2:4b:49:58:
e2:50:7c:7e:11:23:41:18:ae:34:03:fa:44:b8:90:71:2e:af:
16:32:ae:55:96:16:5e:50:47:28:17:5c:37:29:25:b8:b7:c3:
08:39:49:12:96:90:3c:c7:4d:02:8b:8d:23:7c:f9:cb:47:13:
a0:88:88:9e:b1:6d:25:bf:b8:f0:09:75:14:94:b9:bf:c7:18:
2c:98:7c:ae:2b:6f:f2:f6:02:09:9a:ae:c2:0a:ec:d3:5b:1e:
f1:30:ba:00:6a:d0:f7:f4:60:53:47:ed:8a:ae:a9:93:a9:93:
d3:f6:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:39 2025 by rpki-client