Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10C06D50DA9B11EFA2E7354A762E951A.roa
File: 10C06D50DA9B11EFA2E7354A762E951A.roa (raw, json)
Hash identifier: kShDCLwEc5h+zl3Gzey1c0etb1kpdE1LOCJ24YQ4mzI=
Subject key identifier: 9D:79:9F:31:54:F2:AB:14:29:38:63:C1:91:7B:B7:FF:57:DE:F5:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10C06D50DA9B11EFA2E7354A762E951A.roa
Signing time: Fri 24 Jan 2025 21:35:01 +0000
ROA not before: Fri 24 Jan 2025 21:34:57 +0000
ROA not after: Tue 25 Feb 2025 21:34:57 +0000
asID: 202656
IP address blocks: 45.199.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69816 (0x110b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:34:57 2025 GMT
Not After : Feb 25 21:34:57 2025 GMT
Subject: CN=67940785-edac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ca:11:de:e9:8d:bd:2e:41:9f:0a:c0:1e:b0:
9a:f3:d6:d6:79:b7:45:d6:24:57:85:5e:06:8f:0a:
fe:17:e4:e0:ee:36:ef:7f:5e:81:9f:6f:97:71:e7:
b9:7b:e1:c5:27:55:b5:b3:57:e6:50:c4:d6:22:a6:
c5:9a:e7:6d:86:7b:6f:01:60:82:10:58:0e:63:a4:
39:0d:d2:83:bc:6f:8c:fc:ec:9a:85:51:f3:ea:3d:
d4:a9:1c:45:ef:54:2e:c5:eb:54:99:23:55:2a:72:
0a:2f:29:4a:f7:9f:7d:14:b9:2d:b7:0e:9e:b8:7f:
c0:b8:92:49:74:2f:a0:71:22:0d:b8:1c:cd:35:c2:
23:89:d3:55:0e:f7:1f:31:84:ca:7f:37:17:ce:e7:
3a:58:1c:b1:c5:3a:ad:9f:2e:f9:5e:c6:6a:e6:cf:
cb:06:65:51:ab:39:63:29:c2:5f:96:89:79:c3:e1:
3a:8f:03:57:15:c0:0c:87:f4:29:b8:3b:2d:eb:ee:
d2:3c:82:be:89:00:91:0e:bf:7b:3e:93:41:4b:9a:
6b:ef:76:b4:aa:ed:55:a0:7a:32:b2:55:95:18:45:
5b:d4:a2:ec:21:fe:92:e4:56:05:1c:ce:2b:06:76:
80:35:a6:2c:4a:32:77:47:f6:23:76:7a:40:bf:4b:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:79:9F:31:54:F2:AB:14:29:38:63:C1:91:7B:B7:FF:57:DE:F5:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10C06D50DA9B11EFA2E7354A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.224.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:cf:f1:05:5d:f2:fe:5b:14:65:5a:8c:89:e0:e8:c1:8d:cc:
a4:86:f2:58:f3:d3:dd:3e:7f:1d:f8:77:01:c8:d1:9f:5d:43:
f6:b4:03:37:4a:7d:89:1d:28:08:74:82:50:d3:6d:cc:cc:7c:
e1:50:39:53:b0:9d:5d:f4:59:44:f6:c5:d9:60:10:39:66:8e:
db:b2:05:5e:91:45:6d:c1:f9:97:d9:fa:db:96:dd:49:f4:f5:
47:97:35:04:67:bb:1c:c5:c8:e2:2d:da:f1:bc:f2:ba:98:96:
f4:61:27:03:8b:f5:7d:0b:5f:ef:1b:7e:de:d0:3d:bf:d5:1b:
3f:d2:af:ea:53:41:62:f1:65:79:4a:15:9d:ef:42:9d:63:32:
45:9e:e0:f0:84:b2:e4:f4:5d:9c:68:1f:ad:84:6f:4a:5d:79:
42:d6:3d:c5:40:10:c1:87:70:46:e6:66:53:03:c0:6d:9e:72:
a1:98:f9:d2:fe:a6:51:05:41:ac:0d:b6:66:4a:07:a0:9f:05:
71:89:48:5a:f4:19:52:10:5c:de:8f:9b:4c:83:10:c0:1e:c0:
6a:db:8a:fe:b5:e1:b0:19:31:13:29:5e:1a:bd:c7:e6:da:18:
26:ca:63:a1:c7:6e:f4:34:dc:24:3e:0a:d8:59:fa:4f:2f:6f:
33:ca:6d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:15 2025 by rpki-client