Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F56C8882D4A411EFA8D4AA5D762E951A.roa
File: F56C8882D4A411EFA8D4AA5D762E951A.roa (raw, json)
Hash identifier: NYyzKAG4qS1VPKMhP8RnUjYv7+XDJ80d71wY7/hpJdw=
Subject key identifier: FF:06:C9:12:2D:CE:B8:C9:78:4A:EB:1B:87:E8:18:32:9D:36:8D:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010915
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F56C8882D4A411EFA8D4AA5D762E951A.roa
Signing time: Fri 17 Jan 2025 07:30:43 +0000
ROA not before: Fri 17 Jan 2025 07:30:39 +0000
ROA not after: Thu 20 Feb 2025 07:30:39 +0000
asID: 133180
IP address blocks: 45.200.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67861 (0x10915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 07:30:39 2025 GMT
Not After : Feb 20 07:30:39 2025 GMT
Subject: CN=678a0723-b7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:94:68:8c:32:9e:39:90:1d:42:21:4a:30:
3b:d9:65:5e:49:70:cc:f6:80:c5:d5:5b:e8:38:ed:
bf:d6:f5:85:bc:1d:7b:3e:f6:d0:6d:46:e6:89:7f:
be:cc:34:ae:7d:19:c0:fd:b0:a8:10:65:e2:bb:89:
f9:c6:e5:24:38:ca:4d:c0:62:2c:b9:19:41:49:b7:
f4:95:1e:c4:a8:6d:17:bf:93:6e:69:e4:e6:51:06:
3b:e5:88:38:b7:99:0a:a3:c0:e2:ef:e8:fd:33:17:
ba:04:1a:ea:39:dd:bb:83:f0:40:26:05:c9:fd:ab:
98:90:91:c2:b6:01:ef:0c:f1:87:2d:61:d4:0b:df:
a0:8b:14:19:24:40:df:e1:6c:7b:2c:af:6c:1a:fd:
dc:92:7c:9e:5d:84:ee:a4:4d:22:e7:47:e0:30:6a:
10:a9:7b:79:02:5e:a9:77:09:fb:c8:15:8f:bc:61:
4a:98:f0:e8:63:3d:f9:cb:d9:cd:35:67:87:57:ed:
bf:f8:f5:b9:7f:0b:a1:64:b9:98:c8:f6:62:b5:7c:
dc:2b:33:7c:1b:4d:61:2a:1f:71:9a:36:49:0a:94:
b7:22:09:2f:c6:1c:85:dd:89:13:63:f6:c9:e7:27:
1b:8a:66:a8:3e:e1:6c:d3:52:63:0d:0b:00:47:45:
91:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:06:C9:12:2D:CE:B8:C9:78:4A:EB:1B:87:E8:18:32:9D:36:8D:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F56C8882D4A411EFA8D4AA5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
30:7f:c8:0a:ca:b8:6d:e6:43:ce:1e:c2:9c:61:06:c0:36:82:
56:41:24:49:97:87:04:37:78:d7:6f:d3:30:b1:8a:dc:29:4d:
08:a2:c1:53:3a:a4:77:c4:13:9e:50:8a:72:40:98:a7:5f:80:
7a:c3:cc:4a:b0:d3:fb:25:0e:e5:af:75:76:fd:55:4f:a4:be:
89:a9:2f:60:4c:bc:f5:73:46:fe:22:f0:44:3b:71:06:48:d5:
04:ec:43:9c:2f:35:43:f7:33:00:96:ff:4a:86:26:f8:10:06:
4b:33:cd:92:d0:0d:b6:b1:5e:f5:ca:b6:8c:d7:6d:d3:ff:e7:
0e:7e:f4:cc:95:6d:66:4a:80:dd:c7:5e:3f:89:06:f9:27:b4:
9a:53:97:bb:51:f5:8f:60:63:d8:89:fa:cf:4f:1d:05:b1:e9:
47:1c:cb:f0:56:05:81:77:9f:64:bb:75:d8:37:1e:07:84:03:
57:51:d8:45:85:45:92:76:6a:2a:3a:d1:6f:8e:05:2a:db:d7:
f8:f0:1b:58:00:9f:a0:7a:a2:01:8b:c8:79:79:02:46:0b:8d:
1e:d1:8f:a1:e9:f9:04:e2:82:9c:03:68:7b:5d:a0:b1:f7:fe:
38:f1:e6:9b:e6:65:dd:83:2e:38:ca:38:a0:88:be:d6:22:c5:
90:fd:b9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:55:40 2025 by rpki-client