Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FB1F610D4AC11EFBD07F98A762E951A.roa
File: 2FB1F610D4AC11EFBD07F98A762E951A.roa (raw, json)
Hash identifier: HIfIzksFKYR8aSMa+JMUfQVHlgYLpjgZko7I6sdgIrk=
Subject key identifier: A9:A1:4A:72:FC:76:90:F7:1B:00:6D:88:19:FA:68:02:B4:B9:3A:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010935
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FB1F610D4AC11EFBD07F98A762E951A.roa
Signing time: Fri 17 Jan 2025 08:22:27 +0000
ROA not before: Fri 17 Jan 2025 08:22:23 +0000
ROA not after: Thu 17 Jul 2025 08:22:23 +0000
asID: 63199
IP address blocks: 45.201.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67893 (0x10935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 17 08:22:23 2025 GMT
Not After : Jul 17 08:22:23 2025 GMT
Subject: CN=678a1343-3bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:1d:40:7e:f1:6b:c0:46:59:bb:6d:16:7f:
8a:4d:ad:86:31:26:57:27:6e:da:d0:be:ee:31:65:
64:d2:7d:0c:15:d3:82:f8:5a:f3:e0:80:7d:f9:6e:
1e:78:24:a4:20:48:69:de:0b:1c:1a:5b:02:80:98:
20:24:3d:96:11:09:85:04:85:4b:c2:02:0d:be:4f:
db:9a:82:42:02:f1:e5:1a:eb:f3:30:4a:10:ae:fe:
a7:2f:48:b9:b9:fe:a9:bf:3b:a0:41:58:b6:f4:ec:
bd:34:cb:94:46:e5:f8:4a:80:66:5b:3f:2f:a9:82:
76:48:4f:3b:41:a3:d5:13:93:29:72:02:f6:9c:92:
23:78:89:11:df:58:ac:d4:a5:95:85:77:c5:9e:cf:
c3:c0:b0:9c:84:bf:ca:9f:cc:10:3a:97:c7:ed:a8:
e8:08:29:1d:29:49:3e:8c:e3:1d:f8:83:f3:22:6b:
95:b5:1e:3c:9f:df:5a:77:34:45:a3:22:82:5f:ee:
49:37:23:13:81:74:d0:71:09:5e:2b:62:95:f7:1c:
3d:6b:7b:33:05:39:28:f5:57:b4:a8:c5:ac:01:0e:
10:cd:45:63:70:24:1a:b0:aa:87:10:bf:05:b3:c7:
66:9b:df:43:99:4c:82:9b:a9:1c:d0:12:4f:a2:d5:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A1:4A:72:FC:76:90:F7:1B:00:6D:88:19:FA:68:02:B4:B9:3A:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FB1F610D4AC11EFBD07F98A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.233.0/24
Signature Algorithm: sha256WithRSAEncryption
18:3b:4f:f9:f1:49:89:20:ff:8d:86:60:85:15:06:54:1b:7a:
71:40:3c:e8:96:64:06:f3:00:00:95:20:9d:ae:c3:9d:56:08:
ad:4d:52:0b:bf:3a:27:1c:3a:33:87:2e:7d:fe:04:53:45:d6:
63:b4:fc:e0:ef:d4:1a:bd:0f:7c:2a:d6:3c:ab:5a:a1:60:34:
b5:67:1a:34:43:67:27:3e:cd:cb:c0:78:00:22:4d:e5:28:23:
1d:ad:af:2d:af:c8:bf:de:b1:e3:1b:98:e8:ab:33:20:bd:70:
35:88:68:15:e7:3e:15:df:f3:1e:f4:d3:6f:c3:69:fa:9b:cb:
36:72:39:83:5a:a6:60:39:84:45:85:2d:6a:e9:e8:4a:83:e9:
51:2c:1e:31:7c:23:ee:db:7f:80:23:9e:a7:0e:7c:3b:ab:2f:
d2:f3:fc:76:1b:a7:7a:59:3e:75:60:e7:af:2c:c0:6b:dd:1a:
8e:d9:f3:dc:9f:e5:b4:f3:85:65:91:ec:92:ff:8e:82:3c:1d:
b6:90:b3:cf:f7:65:99:45:dd:fe:23:6b:72:a0:eb:ba:42:0e:
79:fa:5f:55:88:b5:10:6e:0a:cf:b0:ec:59:c3:85:a6:5d:02:
1a:c0:43:8d:51:a5:82:63:e3:02:7e:ad:eb:29:aa:63:93:33:
91:1e:f2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:01 2025 by rpki-client