Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/141335B6DB0C11EF8E405B4F762E951A.roa
File: 141335B6DB0C11EF8E405B4F762E951A.roa (raw, json)
Hash identifier: MD5kHQ2cMSTTPF2ov6gjEiiNo5UiF7TygRxHW7d0vuA=
Subject key identifier: 4E:D7:9A:59:F0:95:1F:EF:68:AF:8C:CD:6F:BD:B2:9C:08:DE:31:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011209
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/141335B6DB0C11EF8E405B4F762E951A.roa
Signing time: Sat 25 Jan 2025 11:03:59 +0000
ROA not before: Sat 25 Jan 2025 11:03:56 +0000
ROA not after: Sun 23 Feb 2025 11:03:56 +0000
asID: 44559
IP address blocks: 45.199.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70153 (0x11209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 11:03:56 2025 GMT
Not After : Feb 23 11:03:56 2025 GMT
Subject: CN=6794c51f-23d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a2:79:d6:df:82:1a:bc:69:fd:5b:f0:f1:4d:
28:e0:7a:00:24:a5:39:af:1a:ab:d1:4d:5f:41:d2:
d0:d0:c8:d7:d9:b8:d7:b0:e5:1b:ed:97:a2:0b:3a:
c9:8a:6a:4e:45:f0:85:c8:a3:86:4b:45:83:35:ae:
5f:d1:0f:03:71:42:7a:f3:ce:66:42:36:61:1a:fb:
09:c5:9d:03:32:93:5c:9f:0f:1f:37:fb:8f:5f:2b:
78:7f:40:13:69:04:e6:aa:f2:ec:49:71:10:4f:f0:
5e:af:3e:f2:76:07:83:62:51:94:32:11:f2:60:48:
a9:ab:2e:1c:ce:36:eb:ee:01:68:88:ad:53:c8:92:
c5:fe:7c:91:f9:4b:6e:d6:34:5c:17:44:12:e4:2b:
1d:36:ff:c9:b5:0b:30:d7:ad:86:5f:bc:60:c3:ac:
fb:92:a1:0a:5e:eb:99:a1:eb:ae:02:0e:50:1d:1c:
cc:78:2c:d4:cc:12:9f:03:a5:fd:0c:9c:bd:cf:9f:
c8:e5:d8:75:ad:f5:a9:2b:01:a0:93:19:57:d0:6c:
be:2a:31:5f:5e:a2:d2:6a:cc:27:91:54:44:18:34:
c6:f7:8a:16:e8:7c:62:95:1d:66:bf:ca:b1:d7:a9:
72:de:87:0a:42:9c:cd:42:26:2c:3e:ec:ad:d5:0d:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D7:9A:59:F0:95:1F:EF:68:AF:8C:CD:6F:BD:B2:9C:08:DE:31:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/141335B6DB0C11EF8E405B4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.240.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:00:39:6c:3d:d5:1a:6c:23:4d:b9:73:be:b9:c1:4f:6f:20:
a8:10:83:a5:13:ed:a4:65:fd:1a:ab:e9:99:cc:45:b9:0f:e5:
3b:de:e6:dc:5e:75:e2:a6:66:ee:ee:0a:fe:d5:0b:fb:eb:a3:
f4:ef:ac:20:e3:53:c5:35:07:31:12:a5:3e:6f:ac:4a:bd:72:
5b:26:51:10:fa:fb:35:19:cd:d2:19:e1:b5:f2:f4:b8:fd:1d:
4c:c1:0f:1c:66:16:b3:76:79:e0:76:7c:53:c1:46:f1:ef:76:
6d:17:c8:01:7b:01:93:a7:20:46:79:59:5b:92:6b:bc:43:52:
05:90:04:d3:5b:4e:ed:56:e5:6a:46:31:7d:86:c6:65:66:13:
b5:2e:55:d5:54:b0:8c:68:95:0d:31:c2:3c:bb:02:0c:b6:e6:
24:90:e6:32:62:80:9c:d0:3d:8f:f8:20:21:47:db:2b:d1:ff:
b1:60:b5:f2:11:da:cf:80:fd:3a:9b:4e:28:45:b0:f5:f1:09:
d2:be:32:07:64:60:59:3c:51:fc:f9:9a:d1:80:cf:25:79:4b:
09:60:50:bd:36:bd:ec:bd:18:f3:75:e9:45:d5:5f:c1:e7:44:
31:0f:a3:63:ff:d6:b8:d7:be:07:fc:66:59:c5:f6:d9:35:7b:
df:dd:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:21:43 2025 by rpki-client