Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDC7CE58DFE611EF9B5F7587762E951A.roa
File: BDC7CE58DFE611EF9B5F7587762E951A.roa (raw, json)
Hash identifier: nKArKevTBVcIy7USodbjDjft4RDrsWXBiY455yPrd6k=
Subject key identifier: 31:FE:FF:29:3E:27:17:DF:91:D1:1E:A8:36:97:24:31:E6:76:B3:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011624
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDC7CE58DFE611EF9B5F7587762E951A.roa
Signing time: Fri 31 Jan 2025 15:19:19 +0000
ROA not before: Fri 31 Jan 2025 15:19:15 +0000
ROA not after: Sat 03 Jan 2026 15:19:15 +0000
asID: 40065
IP address blocks: 45.205.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71204 (0x11624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 15:19:15 2025 GMT
Not After : Jan 3 15:19:15 2026 GMT
Subject: CN=679ce9f7-3d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:ac:54:44:98:ac:c7:69:25:25:fa:81:b9:
8b:aa:7f:ff:1e:32:2a:55:e4:90:82:b1:d5:4f:33:
db:57:f4:c4:60:46:8d:cb:b4:ea:9c:70:2b:ff:f1:
f4:f2:e7:d8:eb:c1:9b:90:ce:a2:c8:d7:9c:93:e4:
2d:bf:e7:75:2d:d3:37:d2:b4:68:4e:9a:03:b2:8e:
6c:4c:ed:39:6e:96:10:1e:c4:73:05:47:e3:c5:9a:
aa:d3:50:05:04:9b:49:9b:d9:9a:3e:29:41:f2:c0:
44:04:83:af:b9:7b:cc:30:4e:c0:8a:4e:4f:7d:a1:
4e:59:bd:65:c3:05:27:6f:49:f7:c6:a1:80:b7:47:
fe:e6:f2:7a:79:94:52:16:45:b2:26:e1:d1:65:ed:
3b:00:c8:ab:f2:65:d1:b7:9a:8f:15:b4:10:01:2d:
21:ca:0e:58:2f:96:17:a8:d3:ee:6b:e2:e7:a0:02:
48:49:2a:c1:ed:c0:f1:94:4b:13:d4:62:c8:e6:cb:
bb:c5:4c:a4:85:bf:b6:77:23:1a:37:b0:52:cb:14:
8e:d6:64:c6:54:e9:ad:42:77:89:5e:b3:12:e7:d6:
e3:5d:d3:ed:d6:19:c6:92:c8:5d:af:8c:73:1d:a7:
8f:96:a0:88:3b:b7:d5:3c:2b:a5:15:92:d7:53:90:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FE:FF:29:3E:27:17:DF:91:D1:1E:A8:36:97:24:31:E6:76:B3:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDC7CE58DFE611EF9B5F7587762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.2.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:b7:74:ce:91:12:c9:b8:5b:ec:77:23:74:8b:c0:75:72:44:
d9:b8:0c:7e:d2:17:a5:35:68:3f:15:47:53:8a:3e:1d:78:14:
99:3a:13:07:cc:ba:42:3a:9e:6e:bf:8a:c4:21:f9:b6:08:7c:
24:54:a9:fd:c9:0a:2d:b0:3a:15:2c:db:da:97:93:bb:3d:78:
b6:47:34:f1:13:17:fe:64:91:e4:f6:95:bb:56:6b:44:b2:f5:
42:05:45:2e:1e:8f:cd:54:f3:15:84:94:e4:67:1f:c3:77:09:
40:05:b4:5b:75:ce:62:cb:7d:84:aa:8c:b6:2d:2c:c0:f5:fc:
b1:57:b6:66:3c:8b:14:40:65:fd:38:9f:aa:d7:ac:ee:38:91:
03:19:bc:00:4d:c1:09:7a:c7:36:2c:fa:01:8a:15:b4:6f:37:
67:ac:1a:97:fd:ba:3c:df:2b:de:19:ea:03:a7:69:2e:57:a6:
82:36:c6:c9:c3:d4:28:e7:34:43:4f:cd:71:8e:c2:ab:50:58:
ed:1f:e3:49:a4:d1:9b:58:15:2e:99:b9:0a:c1:11:90:70:06:
34:5f:f3:60:b2:9b:bc:0d:10:5e:5f:f3:19:82:99:0d:1e:db:
56:ab:8b:48:f0:06:bc:94:f5:84:f5:e3:17:22:04:17:5f:bf:
4c:7a:25:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:01 2025 by rpki-client