Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1C6C246D4AB11EF9D41B38A762E951A.roa
File: E1C6C246D4AB11EF9D41B38A762E951A.roa (raw, json)
Hash identifier: ELVvNeQeQxBi9FV+/5wXPGyIwTPxmV0NHc2EH1LgxEc=
Subject key identifier: C7:77:18:59:B6:7E:92:82:7B:FA:14:AD:AA:5C:D1:75:1E:52:1F:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010933
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1C6C246D4AB11EF9D41B38A762E951A.roa
Signing time: Fri 17 Jan 2025 08:20:17 +0000
ROA not before: Fri 17 Jan 2025 08:20:13 +0000
ROA not after: Thu 17 Jul 2025 08:20:13 +0000
asID: 63199
IP address blocks: 45.201.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67891 (0x10933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 17 08:20:13 2025 GMT
Not After : Jul 17 08:20:13 2025 GMT
Subject: CN=678a12c0-1cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:18:e7:71:1e:5d:fe:71:8f:2b:ed:17:ad:
d6:8d:a7:99:10:bd:5e:51:8b:4c:0a:4b:a7:ff:91:
96:53:2c:50:8d:6a:8b:9f:ff:9a:c0:dc:ba:e3:fa:
37:17:2d:44:61:8c:f0:d7:89:63:21:57:78:38:6c:
17:82:c5:1f:10:d0:12:fc:52:b4:ba:3f:b8:32:35:
8d:00:a6:65:20:44:50:91:14:20:89:c4:38:1f:cf:
5b:70:64:be:cc:22:28:f6:76:b6:4e:18:a3:83:b7:
b4:1d:02:26:b8:49:98:1e:6b:79:1a:50:05:e4:ed:
ce:08:f1:7b:3d:43:f9:e6:e3:6c:d8:3d:0d:4d:2d:
6f:26:37:16:a1:3c:e0:b6:b8:c8:34:1d:38:4f:11:
10:9d:7e:9d:36:96:d3:5d:29:5b:87:d4:49:fa:30:
81:f3:f2:cc:50:e7:f0:d5:80:17:98:dd:93:52:93:
01:c7:cd:e9:df:2e:a7:7f:ae:67:d8:27:b0:3a:81:
23:fd:74:72:c0:5b:dd:e8:fc:44:7a:52:b4:e2:95:
05:16:c9:e1:cb:1e:70:cf:b7:c2:18:4f:21:b5:62:
da:b8:77:ea:7a:85:77:3e:79:02:a0:f2:2b:f2:f9:
dd:d8:9e:f9:5d:8e:62:f9:8e:f9:6a:1b:ce:14:ad:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:77:18:59:B6:7E:92:82:7B:FA:14:AD:AA:5C:D1:75:1E:52:1F:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1C6C246D4AB11EF9D41B38A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.232.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d5:fd:f6:63:aa:a3:aa:76:cc:fb:97:53:5a:52:92:26:25:
be:5a:1a:93:4f:0f:63:af:76:67:89:ff:3b:84:1d:e1:c6:86:
b8:be:e7:a8:9b:54:8e:87:92:82:ed:df:40:cd:b6:af:20:ec:
a9:d4:e1:b8:d5:aa:d2:00:22:17:c2:b2:53:11:3e:cd:31:7d:
fd:d8:fd:17:48:ce:ea:e2:13:48:81:a4:fa:73:e8:5d:65:ee:
fd:4f:8a:08:33:d7:bf:81:cb:bb:d1:5d:98:7c:bd:3f:1e:bf:
9d:af:13:08:a8:0d:b7:4b:40:1a:2d:6e:c0:53:eb:2e:d9:46:
04:7a:b6:e7:07:0a:3b:cb:f3:3f:41:60:0c:42:3f:5a:57:2f:
77:ab:e2:cd:5e:ed:e6:4c:6f:cc:eb:2e:9a:a3:3f:01:01:34:
85:6e:5f:e0:68:15:09:3d:17:d3:1d:69:bd:9b:00:db:c7:f5:
19:99:49:96:eb:0b:c2:ee:af:af:42:5a:5e:fb:18:82:77:5c:
1e:90:0a:82:c9:7b:ac:11:5a:5e:a3:a5:84:0e:d7:33:73:1f:
21:8b:57:12:e4:33:3c:af:f3:88:22:57:c5:83:11:09:68:37:
bb:61:c8:fd:2b:43:41:e5:93:d4:a0:05:ee:db:62:9a:67:42:
66:b7:c0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:19 2025 by rpki-client