Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0034EE6CD80B11EFB9E820A0762E951A.roa
File: 0034EE6CD80B11EFB9E820A0762E951A.roa (raw, json)
Hash identifier: lX4Jm5CKzRyFpt00yCId6jsJBfKGAkyLxgKz3YyLizw=
Subject key identifier: B0:AB:E6:FD:47:05:92:0E:20:C8:EE:EF:08:08:73:BD:21:07:9D:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E3E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0034EE6CD80B11EFB9E820A0762E951A.roa
Signing time: Tue 21 Jan 2025 15:18:43 +0000
ROA not before: Tue 21 Jan 2025 15:18:40 +0000
ROA not after: Sat 01 Feb 2025 15:18:40 +0000
asID: 44559
IP address blocks: 45.199.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69182 (0x10e3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 15:18:40 2025 GMT
Not After : Feb 1 15:18:40 2025 GMT
Subject: CN=678fbad3-cf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:ca:3c:33:dc:57:4e:49:78:a8:60:e8:fd:
db:ac:01:c4:ec:cc:24:de:f4:c3:93:fc:28:3b:1b:
d7:84:43:6d:a7:3a:2f:b5:82:d6:74:14:38:0f:3d:
ee:4a:45:d2:6d:a4:8b:36:03:f7:1f:e2:a0:9f:56:
08:de:82:72:91:f8:fd:d6:c7:87:b2:e4:78:3c:ab:
5b:55:32:d6:14:ca:e0:57:44:f3:62:21:aa:bd:95:
2e:7c:99:8a:ad:19:7b:58:f1:e3:c9:07:78:43:2d:
79:1f:23:7b:b2:1f:47:b5:fb:fe:24:65:65:47:9e:
ce:17:59:bf:3d:f8:1b:21:99:c3:f7:3c:c1:1e:3e:
37:55:0a:c3:36:e5:a8:2a:02:6b:27:40:9c:3d:f4:
9c:87:a9:0b:0f:20:4d:31:3d:0f:c9:df:47:88:48:
87:c0:62:cc:25:7f:74:4b:a6:ea:85:35:87:8d:7e:
06:ce:5f:42:de:c4:8e:b3:1a:20:c9:fc:cb:f6:50:
86:2d:e5:42:47:44:7a:69:fc:f5:1f:7b:41:0b:50:
a0:34:ed:be:2d:d6:ba:51:b4:f7:0f:c3:63:a1:ff:
7e:e9:63:02:d4:65:7f:fd:e6:ba:02:f4:4d:b9:b1:
ba:6c:b3:c1:0e:6c:ea:92:9e:c9:ac:4c:39:ce:c0:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AB:E6:FD:47:05:92:0E:20:C8:EE:EF:08:08:73:BD:21:07:9D:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0034EE6CD80B11EFB9E820A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.215.0/24
Signature Algorithm: sha256WithRSAEncryption
69:3d:57:6b:07:4c:80:8e:72:1c:cd:5e:2c:b8:ec:36:ba:7d:
36:8e:9a:13:0e:b0:4b:bf:a1:40:b3:f8:4f:ee:83:d3:8b:c9:
b2:f3:42:cf:31:e8:7c:bd:67:91:a7:1c:ff:00:64:fe:06:1d:
9a:90:6b:54:8c:f8:4f:61:52:2f:72:9b:0d:06:49:41:5c:cf:
80:1d:c9:c6:c7:4b:d9:69:ef:ee:be:34:79:62:36:5a:af:5d:
93:cf:d4:3e:cc:5c:5c:b5:ac:3f:21:6b:73:7f:9d:55:c7:f8:
b6:fe:cd:89:ae:24:0d:8d:a3:e3:d2:67:0e:3d:3e:dc:bf:52:
ef:47:e8:62:1b:7d:30:60:6f:50:ee:ab:fa:93:92:67:e8:8a:
7d:bc:95:eb:fa:3a:2d:c3:f4:e5:b3:ec:f5:65:c3:c5:78:a4:
47:fd:15:63:27:bf:56:be:2b:98:0e:69:e3:00:8e:1c:c7:2b:
8b:8f:c1:9a:8d:d1:13:f5:9d:a5:f8:95:a0:eb:82:63:66:bf:
67:f9:72:e2:26:64:29:17:97:4a:bf:c2:04:0b:5d:a3:1c:e7:
57:4b:07:f3:87:26:36:ad:6b:34:bd:60:a9:04:70:de:fa:32:
9b:4c:dc:8d:2f:2b:0e:da:92:06:95:58:26:61:ea:98:28:50:
fc:1a:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:10:42 2025 by rpki-client