Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D44E287ED58311EF859D1797762E951A.roa
File: D44E287ED58311EF859D1797762E951A.roa (raw, json)
Hash identifier: jRv40PqelBV86cHY4+g2OvZIk2ulq7PbD5f2r2VdF/M=
Subject key identifier: B2:5D:33:7A:AA:34:15:95:F6:42:EE:CA:A3:79:F7:12:EC:98:A5:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D44E287ED58311EF859D1797762E951A.roa
Signing time: Sat 18 Jan 2025 10:06:05 +0000
ROA not before: Sat 18 Jan 2025 10:06:01 +0000
ROA not after: Sun 23 Feb 2025 10:06:01 +0000
asID: 25160
IP address blocks: 45.201.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68461 (0x10b6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 18 10:06:01 2025 GMT
Not After : Feb 23 10:06:01 2025 GMT
Subject: CN=678b7d0d-851f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:42:b4:ac:2b:ea:cf:8b:31:3a:0b:bd:96:
3a:48:f9:de:db:63:0f:52:46:a3:68:c0:07:c1:ce:
82:5a:21:40:d2:3d:db:d9:0e:3b:6f:02:27:3f:b9:
80:10:00:cf:b9:02:be:38:3f:07:7b:a8:68:b3:7b:
a4:3b:2c:2e:43:d7:89:94:2d:be:fd:a3:9c:e6:2b:
b9:22:9f:a6:de:dc:34:0b:a4:00:b9:9f:66:b6:3c:
10:63:82:3d:a8:27:8f:94:7e:b7:bb:85:98:78:d6:
9c:dc:81:7e:2f:67:e5:ba:41:95:0b:26:e9:41:9c:
32:36:0b:08:40:cb:7e:4d:14:14:0e:1e:ed:16:68:
0c:37:60:99:51:d4:af:81:53:89:ec:f3:ab:8c:fe:
75:d6:30:a0:bf:75:c7:21:c9:db:33:45:af:c8:48:
c3:f9:f3:1a:cf:62:66:ce:c1:c8:b9:7b:4a:b4:76:
b1:bb:b3:63:2c:22:49:28:e1:d8:60:a6:03:ed:e0:
e7:33:0a:37:69:ab:01:e2:c5:2d:b4:70:51:11:cb:
33:cd:a8:06:20:f2:e8:a3:9d:cf:94:22:ac:99:f2:
c8:e8:65:e6:1d:9c:0e:d6:4e:70:09:d3:bb:26:f5:
33:b1:ab:29:07:e8:3c:9b:d0:7c:ec:7f:4f:7f:5d:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5D:33:7A:AA:34:15:95:F6:42:EE:CA:A3:79:F7:12:EC:98:A5:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D44E287ED58311EF859D1797762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.12.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:7f:cb:59:b3:f0:c5:70:11:c6:46:b9:0c:51:3c:76:5f:17:
35:c4:88:36:cf:4d:84:65:b8:46:f7:ad:fd:e1:fc:af:93:ef:
26:be:e3:6e:74:3e:a1:78:ad:f0:29:e5:5c:e3:76:ad:32:91:
4c:73:c3:a7:ca:56:cb:c8:cc:46:7e:df:d1:16:79:4c:56:66:
ad:b4:88:f7:34:c0:0e:48:51:2a:ef:b0:a9:92:0b:c3:0e:e1:
9a:37:db:bd:b6:9d:53:24:b6:36:d0:77:21:ff:a0:48:ce:eb:
03:d9:e1:df:3e:71:36:20:e0:2a:d4:d2:0c:d7:c7:77:75:b1:
49:af:0c:26:2f:79:9a:61:1b:4c:49:00:36:3e:81:31:4a:9f:
4a:b0:ad:6b:fa:2c:13:77:34:bb:87:df:29:cc:d5:c5:2b:58:
28:47:d2:3e:c5:0e:93:80:3a:b8:30:b7:a9:d6:af:0b:7f:20:
c9:5b:12:fb:94:bb:2a:6d:92:21:40:44:0f:ff:90:0b:12:eb:
68:de:4a:e5:90:bf:c3:2a:55:38:5a:bc:e7:9a:cf:11:be:77:
dd:84:77:96:d5:8c:ac:b6:17:88:f5:c9:95:c2:5e:19:c6:cb:
ad:b7:46:f8:19:3b:1b:63:ef:5c:56:25:38:5d:da:b4:c6:15:
4c:e5:50:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:29 2025 by rpki-client