Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D0A414AD80711EF87A10186762E951A.roa
File: 0D0A414AD80711EF87A10186762E951A.roa (raw, json)
Hash identifier: 2jWzGTZZVYYjCRViO2/+d8YZaxdfxXZ8H3lxTYDd1ho=
Subject key identifier: 19:DF:F1:04:D5:46:08:57:B9:15:3F:8B:BC:4E:38:72:80:4F:E2:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E22
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D0A414AD80711EF87A10186762E951A.roa
Signing time: Tue 21 Jan 2025 14:50:27 +0000
ROA not before: Tue 21 Jan 2025 14:50:23 +0000
ROA not after: Sat 01 Feb 2025 14:50:23 +0000
asID: 44559
IP address blocks: 45.199.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69154 (0x10e22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:50:23 2025 GMT
Not After : Feb 1 14:50:23 2025 GMT
Subject: CN=678fb433-4d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:6d:46:1b:4a:b4:f1:48:76:b8:1e:27:13:
d4:06:7c:43:7f:22:1d:f6:79:dc:dd:90:5c:0f:f2:
3a:b8:84:fe:36:0b:d0:2f:e3:e0:00:2f:56:ce:ef:
fa:1b:12:38:37:59:fa:a6:8b:71:5e:c3:be:31:39:
35:c9:07:ca:9c:f4:6b:99:b3:bb:9f:0f:c5:fc:14:
93:f2:cb:91:16:16:ee:97:19:2d:71:f4:4e:b0:32:
a3:86:16:ff:e8:74:98:d5:33:98:0f:6f:41:cd:6b:
96:0e:e8:fc:fb:a0:44:35:bc:2c:20:9c:c5:67:59:
c0:5e:4c:ef:84:eb:9c:8d:59:8b:05:33:a4:65:f4:
24:c0:b9:71:24:60:55:6f:c1:fe:59:22:96:80:5b:
9c:ef:a1:7d:61:3f:6c:6e:5d:6a:f8:6d:48:50:80:
1e:44:98:f7:43:2f:03:9b:2a:91:d1:db:79:ca:a0:
a5:bb:60:d2:be:9d:ef:e3:be:bb:e9:6d:1d:61:88:
a4:7a:30:05:a6:72:d1:08:9a:a1:7e:0e:a0:31:b4:
89:62:db:22:7e:fd:d1:e3:bb:49:a6:60:22:9a:1f:
d0:03:4b:a8:0d:80:39:fe:9f:43:d0:7a:42:7e:f3:
5a:f9:92:b3:c6:6e:bb:b3:6d:2d:a4:2c:b6:21:ed:
3e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DF:F1:04:D5:46:08:57:B9:15:3F:8B:BC:4E:38:72:80:4F:E2:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D0A414AD80711EF87A10186762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:82:4f:79:fe:f4:26:07:da:49:59:a7:1e:ed:78:f4:ac:32:
a7:01:a5:7b:bc:13:6c:cf:6c:db:cc:8c:ce:69:62:cf:0e:c1:
0b:dd:bd:e4:45:89:6a:08:ed:df:ff:31:48:4f:c2:4b:49:d6:
31:77:49:58:1c:9a:33:05:df:e1:3a:a4:4c:0e:2a:0c:ee:7b:
31:09:e5:65:78:9f:d0:5e:46:79:85:7d:e0:8a:04:63:6e:c4:
da:75:00:81:a2:ed:bd:7a:f3:ff:6b:ae:ee:78:91:c6:81:83:
c3:49:0d:8b:c0:1e:4b:59:13:7d:8f:58:cb:79:5a:f7:03:88:
ce:36:36:1d:c8:6d:c9:99:95:1e:f6:fd:1d:b3:5f:2b:e5:45:
d3:76:0b:bb:0f:18:95:d3:ef:0d:86:cd:a8:1f:f7:af:b5:b3:
fc:6f:5e:2e:d0:50:11:2f:35:d7:e4:c6:1c:79:14:90:e3:ed:
a0:96:25:33:92:6b:63:db:df:fa:07:f9:a1:64:40:f8:1e:dd:
8c:39:db:eb:3b:4e:58:0a:02:9e:ff:08:58:e5:35:1b:20:f0:
57:8e:41:e1:f5:4c:cd:4d:32:79:a1:ce:9c:fd:42:23:03:64:
07:08:28:cd:9e:3e:1d:98:8d:99:f6:97:a8:2f:60:eb:dd:bc:
35:f1:94:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:21:51 2025 by rpki-client