Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F35FA3A4DA8E11EF922A207B762E951A.roa
File: F35FA3A4DA8E11EF922A207B762E951A.roa (raw, json)
Hash identifier: gZ86gU870+KY6U7Pv4OsLjf6Bi3Pnvr4DpwXoiJfqVY=
Subject key identifier: BA:96:FC:F4:84:B9:AE:B4:D9:DD:32:0A:99:A5:E3:04:97:E9:E5:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01106A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F35FA3A4DA8E11EF922A207B762E951A.roa
Signing time: Fri 24 Jan 2025 20:08:18 +0000
ROA not before: Fri 24 Jan 2025 20:08:14 +0000
ROA not after: Tue 25 Feb 2025 20:08:14 +0000
asID: 202656
IP address blocks: 45.200.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69738 (0x1106a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:08:14 2025 GMT
Not After : Feb 25 20:08:14 2025 GMT
Subject: CN=6793f331-bf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:fa:b8:a9:aa:07:a0:46:ef:e0:90:8d:3d:
db:0f:4e:f2:0e:ce:cf:45:fa:d5:56:15:fd:a2:51:
77:92:c2:8c:1d:7a:ec:5f:fe:ae:4f:df:3e:94:16:
3a:56:59:5b:5b:ba:77:19:f8:6c:95:7e:16:9d:3c:
82:16:24:ae:98:88:1c:60:ad:5e:cf:25:06:13:8e:
3e:89:8c:61:f8:10:e7:8b:81:9c:cb:30:25:5c:3d:
0e:9e:ac:35:7d:af:ab:b4:02:4d:5c:ed:e9:28:3e:
f5:43:3f:2b:d6:b7:e1:62:54:ca:83:8b:c8:03:9e:
b0:02:c8:79:c6:c9:37:80:c8:c1:c5:c1:92:18:e7:
46:3f:94:1e:5c:ea:48:2b:01:f5:50:c2:c2:4f:62:
db:16:5a:b8:5f:8d:79:fe:f2:4b:71:2f:be:e4:0a:
a1:7f:a0:47:bc:7f:67:45:75:a2:98:16:9e:3a:7b:
51:7e:8d:5f:4b:a9:f7:67:46:f1:0d:cd:ac:51:31:
7d:0b:03:4f:b7:65:91:d4:c8:71:13:d2:c6:44:43:
77:57:25:cc:57:d5:c8:c4:c5:76:c9:95:c4:9e:37:
f1:88:92:34:06:f4:9c:01:56:b6:9f:a9:f6:83:ea:
79:fe:33:14:55:86:00:97:40:f5:0b:42:90:3e:db:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:96:FC:F4:84:B9:AE:B4:D9:DD:32:0A:99:A5:E3:04:97:E9:E5:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F35FA3A4DA8E11EF922A207B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.168.0/24
Signature Algorithm: sha256WithRSAEncryption
03:5d:bb:6b:4f:0c:02:34:bc:49:8f:fb:3f:4f:6f:89:78:cc:
28:2f:28:05:d7:04:ce:59:68:16:21:f5:ac:19:fa:1c:da:28:
6b:29:f5:c6:e5:83:9a:96:76:71:0a:73:43:40:cb:78:55:bc:
70:91:d1:f7:8b:7d:2a:f0:c6:a6:b5:ab:7f:c4:08:d0:04:d4:
87:56:10:10:71:60:e5:86:45:a2:3a:fc:12:2a:8c:db:c4:3c:
d4:b6:b5:b2:ab:ef:05:fa:01:e2:b7:6d:c0:24:33:bb:5a:84:
75:b8:95:61:50:d0:35:c6:2b:24:5d:b9:58:4a:d5:9b:4c:94:
3e:8a:b3:90:9b:ec:86:c3:e7:83:87:c2:04:2e:9e:b9:17:c9:
48:72:dd:72:36:82:53:c6:11:30:6e:78:35:77:ba:68:c6:ae:
63:a3:7a:bb:0f:95:e7:a6:5d:fa:ac:f9:c8:9d:fe:85:40:a2:
f4:4d:d3:ee:cf:53:39:ae:69:be:d9:10:2a:ed:61:8d:10:61:
b6:77:71:37:84:38:ea:4e:e6:b7:76:f2:1e:57:f3:23:92:ab:
87:4f:44:90:89:eb:b9:7c:23:a0:70:ff:68:62:d4:4e:f1:e9:
61:84:e1:06:73:76:6a:e5:cc:eb:01:ff:41:d2:72:b2:48:46:
d2:b8:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:11:54 2025 by rpki-client