Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/0809CD56F2A511EF9A1CF353762E951A.roa
File: 0809CD56F2A511EF9A1CF353762E951A.roa (raw, json)
Hash identifier: 4iGumIvcUo97EFB8blys/rxgOUPw+Tx3jCeD20ZEIcg=
Subject key identifier: E7:98:E4:BD:92:90:D5:B2:A4:BB:F8:E1:D7:AA:6E:AD:FF:CC:CB:57
Certificate issuer: /CN=F361D299AR/serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
Certificate serial: 0BF2
Authority key identifier: F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80
Authority info access: rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/0809CD56F2A511EF9A1CF353762E951A.roa
Signing time: Mon 24 Feb 2025 11:46:49 +0000
ROA not before: Mon 24 Feb 2025 11:46:45 +0000
ROA not after: Sun 24 Feb 2030 11:46:45 +0000
asID: 37199
IP address blocks: 45.221.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3058 (0xbf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361D299AR
Validity
Not Before: Feb 24 11:46:45 2025 GMT
Not After : Feb 24 11:46:45 2030 GMT
Subject: CN=67bc5c29-6ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9a:4f:b2:45:3a:76:1a:76:0a:3f:f9:76:ed:
4c:6f:69:d2:be:9a:08:d5:ab:6a:ca:cf:02:ce:3d:
30:41:83:8b:d3:6b:5f:08:38:28:f4:eb:66:00:25:
1d:40:30:35:7d:e2:c0:05:a8:7e:9c:43:40:3b:30:
ce:5f:2e:a7:0a:fc:f2:04:22:d9:e5:bb:87:c7:a7:
06:c2:58:91:ae:db:1c:eb:8f:d1:38:93:f9:e6:d8:
4c:22:b3:0f:a7:9b:5c:8a:2f:6b:cf:b0:4e:23:62:
19:9a:e1:5d:f0:20:99:45:32:c0:63:a7:64:40:db:
c2:e6:00:50:74:df:3c:bc:f7:7f:21:39:6a:e9:64:
9e:96:53:2a:c6:4b:30:ad:69:40:45:1e:9e:45:d8:
e4:fb:c1:1f:26:64:97:d9:12:e4:61:58:ab:a0:ad:
a5:b8:50:6a:35:50:26:b1:a2:04:b0:e8:ce:01:df:
64:44:f1:40:d4:4e:ee:54:7c:18:e1:a8:12:75:73:
4f:e4:00:9a:82:7c:c4:6f:3b:52:e8:4a:db:b2:ab:
51:3a:c4:e7:b1:87:11:b8:ca:ad:25:8b:82:af:15:
c7:14:24:f2:45:94:a2:69:b8:20:aa:cc:20:aa:00:
60:ce:5a:0d:d6:bd:f0:8e:ba:bc:8c:7c:68:58:f1:
48:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:98:E4:BD:92:90:D5:B2:A4:BB:F8:E1:D7:AA:6E:AD:FF:CC:CB:57
X509v3 Authority Key Identifier:
keyid:F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/0809CD56F2A511EF9A1CF353762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.128.0/18
Signature Algorithm: sha256WithRSAEncryption
64:c0:5f:b6:d8:74:d4:2c:2c:a1:8f:02:b0:bd:24:93:ca:8f:
45:60:65:65:76:c2:79:73:ea:57:51:45:01:6a:62:76:71:0c:
40:3a:ca:c2:f3:67:6b:26:c9:a4:bb:e5:48:67:09:d7:d2:98:
96:4a:30:f9:f1:46:10:94:52:4f:31:9e:c6:57:bd:f1:79:20:
b2:0a:45:80:c0:6d:14:0b:cd:09:d0:fd:5c:3b:b7:79:4c:ce:
9f:09:25:de:7f:e3:60:53:57:2f:67:2d:3d:d7:25:bf:0b:c5:
cf:22:43:3f:2d:85:b1:ea:57:92:45:c3:02:e6:54:7d:6a:14:
94:84:f9:db:cc:d8:57:56:f8:c5:43:a7:3b:23:be:8c:05:16:
91:bd:8c:f5:f5:e9:cc:1a:8c:e8:f9:a9:5b:7e:58:9a:f1:77:
56:21:cb:df:12:c8:0a:aa:75:b7:36:bb:58:67:71:d8:1e:72:
19:40:30:b4:71:15:a6:9c:43:37:86:d6:d8:84:a4:32:28:1f:
55:11:26:46:ef:2b:38:db:f7:5e:d8:68:bb:07:32:f7:85:67:
78:c2:74:2b:0e:6c:fc:8f:11:9a:77:f9:73:7c:fa:f8:09:29:
08:ea:35:62:e0:d0:0f:57:48:30:1b:c5:eb:74:fc:0f:a1:f4:
d4:fa:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:41:08 2025 by rpki-client