Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/153A2362DC8A11EFBBE80A60762E951A.roa
File: 153A2362DC8A11EFBBE80A60762E951A.roa (raw, json)
Hash identifier: 39kMuTZqbA6uzupeg5qYgQhfSLLpuxeN2orLDLlluTw=
Subject key identifier: 58:ED:7A:F6:A5:62:B4:ED:C6:EA:96:E9:9F:BB:60:A9:F1:F1:A4:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/153A2362DC8A11EFBBE80A60762E951A.roa
Signing time: Mon 27 Jan 2025 08:38:29 +0000
ROA not before: Mon 27 Jan 2025 08:38:24 +0000
ROA not after: Sat 08 Feb 2025 08:38:24 +0000
asID: 5065
IP address blocks: 45.199.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70833 (0x114b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 08:38:24 2025 GMT
Not After : Feb 8 08:38:24 2025 GMT
Subject: CN=67974605-fb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:62:7e:34:ca:27:ae:4e:d9:24:38:ac:9b:
6b:b2:67:b8:44:c9:e8:fd:7e:d3:b9:8b:de:12:fb:
cc:53:cc:59:38:a6:dc:00:c5:c6:f1:52:ae:db:cc:
2e:89:fa:cc:a1:e4:02:98:3e:b9:cd:97:a4:c5:73:
1d:51:62:66:16:3a:9f:4c:ca:f0:cf:91:b7:2c:d1:
d9:b1:4d:65:25:66:b0:f0:49:a3:d7:81:00:d9:d4:
59:bf:31:9e:f3:10:55:cb:34:1f:d7:c5:40:f4:82:
9c:eb:60:e9:ce:a8:d2:94:fa:a5:99:2b:36:d3:e6:
a7:ee:7d:5d:4e:60:94:bb:94:5b:d3:a1:98:0e:34:
13:6e:f2:02:6f:c5:05:dd:af:25:9d:56:09:02:17:
52:c8:94:f1:46:eb:4f:cd:42:af:1c:27:ff:01:39:
75:4c:3a:9a:8c:7d:3d:20:e9:21:dd:b8:58:35:b7:
45:11:ba:44:cf:e0:8a:21:e0:54:06:61:80:db:e4:
ac:be:b4:af:fa:99:9c:01:86:0f:24:f2:4f:87:05:
37:e4:b2:d8:10:43:f5:5e:13:37:50:06:15:4b:15:
39:5c:a5:4e:da:c4:92:ef:8d:4c:3a:cf:b2:b4:17:
51:74:0e:2e:cb:dd:bb:06:e1:1e:23:56:78:0b:2d:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:ED:7A:F6:A5:62:B4:ED:C6:EA:96:E9:9F:BB:60:A9:F1:F1:A4:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/153A2362DC8A11EFBBE80A60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.157.0/24
Signature Algorithm: sha256WithRSAEncryption
53:52:03:c3:6c:89:0f:53:ff:b1:3a:b7:9b:67:24:6b:fc:82:
a8:12:69:2c:03:ad:69:6a:e0:13:d3:e7:46:b2:1f:a5:1d:45:
b8:19:df:be:22:bb:32:2c:a1:ec:55:1d:d6:42:82:6f:19:48:
79:39:61:ce:a7:32:52:94:22:d9:95:07:9c:97:58:bd:4c:c2:
61:6d:a5:5d:bc:7c:b8:48:c5:ec:24:08:fc:1d:57:78:a5:ef:
61:39:93:25:ad:c1:26:5b:e2:9b:59:87:b3:37:c0:96:c2:bc:
30:17:74:c9:03:a5:b6:16:e2:67:80:8a:a5:c8:e4:94:2c:de:
6a:a4:0a:98:2b:8e:9e:73:2f:93:c9:c3:4c:39:7c:f2:d7:3e:
59:47:d8:c5:d3:2d:ca:ea:bd:be:5a:fc:c2:f0:fb:21:5f:0c:
1a:65:16:32:dd:df:7c:84:77:01:0d:ae:3b:3e:e3:56:d1:fa:
ad:10:c6:d7:64:f8:6b:c4:4e:22:a6:b4:ea:d5:48:2b:41:81:
9a:c1:7d:f9:44:a1:63:ab:09:34:49:54:cd:c2:ca:ba:bb:4a:
51:96:03:03:73:de:1f:e6:64:7d:a8:ef:38:60:04:78:1e:1e:
68:96:36:23:5d:6a:1d:46:ae:96:66:5f:a9:3f:60:b8:06:31:
99:97:4e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:22 2025 by rpki-client