Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9FDA814DA7A11EFA5943F75762E951A.roa
File: F9FDA814DA7A11EFA5943F75762E951A.roa (raw, json)
Hash identifier: lKf1HD+M7j4SCuFiNNHIZj0iYeSlWXbdDfxBg1GO/oQ=
Subject key identifier: 66:04:0C:0A:BB:F4:36:F6:F8:6E:61:50:AC:50:3B:CD:3E:7D:D5:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9FDA814DA7A11EFA5943F75762E951A.roa
Signing time: Fri 24 Jan 2025 17:45:19 +0000
ROA not before: Fri 24 Jan 2025 17:45:15 +0000
ROA not after: Tue 25 Feb 2025 17:45:15 +0000
asID: 44559
IP address blocks: 45.200.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69608 (0x10fe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 17:45:15 2025 GMT
Not After : Feb 25 17:45:15 2025 GMT
Subject: CN=6793d1af-7716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:d3:eb:d7:bc:25:91:ca:eb:47:4e:6c:04:
0b:c6:72:09:44:62:17:e1:68:d5:d2:cd:37:67:ad:
2a:32:34:b6:07:91:20:95:98:90:b7:43:1c:57:d9:
ba:a4:96:49:c4:f4:f5:89:15:79:a3:98:61:08:e8:
43:34:25:a6:47:92:0c:0d:2d:26:44:5e:7c:07:af:
76:8a:d0:b9:76:6f:39:b1:c1:d5:5b:81:10:d2:d2:
52:a0:81:e1:50:ee:9c:26:14:86:0d:96:df:d1:e7:
39:e9:87:22:65:a7:93:43:09:5e:1c:36:0d:6d:e9:
af:03:14:81:cb:a0:d9:84:b2:64:56:52:71:a5:5a:
f3:3e:99:c1:b3:d4:6d:1f:e4:c3:74:ea:8a:b8:ab:
a5:07:d6:8a:2c:ca:45:e0:90:ab:67:bb:0a:34:da:
c8:c5:62:ae:c7:9c:ee:48:36:18:02:04:c7:e0:59:
5d:81:f4:49:16:cf:dd:b3:17:b1:74:d5:49:3f:82:
30:52:d8:05:23:6f:0c:87:2c:cd:9f:d9:40:bf:2c:
59:83:2b:fe:76:c7:06:3a:c7:a2:b6:b3:14:ad:17:
6a:54:fc:9c:f2:f2:a5:e5:e9:51:bb:72:05:d5:0e:
b4:ef:73:c2:d6:1e:46:67:44:20:80:01:33:6f:11:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:04:0C:0A:BB:F4:36:F6:F8:6E:61:50:AC:50:3B:CD:3E:7D:D5:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9FDA814DA7A11EFA5943F75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5d:55:b5:9a:50:6c:4e:70:41:b0:bf:69:af:f8:97:c6:6a:
c5:9e:09:75:91:7b:b0:7d:7d:95:3b:c3:d1:e8:ed:4d:fd:ec:
5e:62:83:d3:39:7c:3c:da:7b:75:ee:eb:3f:b3:35:7e:83:00:
85:2e:7b:c4:ab:23:8f:9e:79:4b:8d:82:01:2d:7f:51:eb:f9:
3a:4d:5f:6b:5f:73:a3:59:84:2d:b9:c8:05:b0:55:b9:6c:31:
a1:a1:e7:15:0e:6e:c6:53:bd:b7:9c:cb:37:46:16:a7:ec:ab:
68:cc:12:7b:cb:b0:55:95:9d:9e:c8:59:a4:c0:9a:03:53:e5:
78:65:b2:70:48:2a:c5:54:56:9e:08:f9:67:5e:d5:b9:73:35:
a1:de:4a:7c:e4:43:78:86:54:a3:58:9d:c2:e5:46:44:dc:03:
87:4b:f9:37:c3:52:ca:94:86:de:ec:4b:76:2d:fe:50:15:71:
12:09:67:09:04:f5:c8:05:b3:5f:0f:0f:3b:09:ed:b9:42:3e:
08:44:48:2b:46:1d:36:e7:48:c3:f6:87:c0:5f:0d:48:0d:7f:
c3:ad:63:ed:6e:a2:6e:d0:e7:59:ab:47:02:8c:6e:af:9c:1e:
8c:79:93:22:a3:58:d0:85:35:90:56:e4:4b:85:51:cd:a6:30:
17:1f:44:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:00:17 2025 by rpki-client