Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CA1588ED80A11EFA005BB99762E951A.roa
File: 1CA1588ED80A11EFA005BB99762E951A.roa (raw, json)
Hash identifier: njBYGySUwYXbL2XGS6ZUt9QWNI7ZIXEb1wgDha18eIw=
Subject key identifier: 79:DD:E5:F0:E7:BE:F5:5E:B1:80:7E:54:73:08:70:71:C4:98:54:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CA1588ED80A11EFA005BB99762E951A.roa
Signing time: Tue 21 Jan 2025 15:12:21 +0000
ROA not before: Tue 21 Jan 2025 15:12:17 +0000
ROA not after: Sat 01 Feb 2025 15:12:17 +0000
asID: 44559
IP address blocks: 45.199.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69176 (0x10e38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 15:12:17 2025 GMT
Not After : Feb 1 15:12:17 2025 GMT
Subject: CN=678fb955-9a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:92:7b:29:a7:e9:ff:09:36:dd:42:0a:69:
1e:1e:07:39:47:88:79:61:26:1e:9c:7d:84:ea:76:
32:e1:df:9d:42:5a:fd:82:2e:4c:68:0d:95:fb:96:
bc:2c:cc:00:3c:08:38:c7:c3:b7:63:d2:26:0d:b9:
93:ec:f7:fa:89:61:66:63:86:c2:25:e8:01:b3:85:
6c:a9:c1:82:70:30:04:85:19:e0:d5:65:d1:cf:43:
8a:6b:9f:d6:40:fc:ad:80:f2:12:2c:53:97:0a:3b:
cd:1d:17:02:18:e0:d9:38:91:d0:1b:b1:4f:23:23:
36:77:a6:35:1e:c0:01:a0:79:89:21:10:47:10:73:
5c:57:2f:0d:e4:18:c0:9e:4f:76:c7:e6:98:2f:9f:
45:39:5f:2d:42:d6:be:72:ff:a5:91:09:e2:6c:0a:
0c:7e:58:40:f3:8e:35:60:e0:f3:16:93:db:56:b3:
ee:ab:40:3e:e4:51:6d:ba:1e:40:a6:a1:c2:8c:37:
04:0f:7a:54:48:0b:3e:d2:45:88:2f:d7:aa:13:39:
1a:d1:8a:4b:67:c1:fa:06:5d:53:f4:57:6b:88:33:
ed:13:bd:95:3f:b3:4e:a2:46:9f:bb:b8:06:84:87:
ba:2f:4c:ea:5b:96:54:4e:0a:14:c9:58:40:66:bd:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DD:E5:F0:E7:BE:F5:5E:B1:80:7E:54:73:08:70:71:C4:98:54:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CA1588ED80A11EFA005BB99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.212.0/24
Signature Algorithm: sha256WithRSAEncryption
35:aa:18:9c:98:cc:49:72:02:c7:8b:91:b9:e1:11:f0:08:a0:
5e:54:0d:f0:a7:86:0a:d7:8b:00:f6:0a:8c:a4:11:92:59:5b:
8e:b7:f8:32:9d:8c:78:bc:dc:53:28:d1:2e:f6:27:2d:83:2a:
4b:dd:2f:dd:4c:3a:22:a4:b7:6c:86:f4:24:97:59:a4:0e:39:
66:e2:b6:6d:a1:a4:9a:fd:bc:2a:68:40:6a:ef:1c:64:fe:0b:
ba:5b:83:60:4e:d8:e4:c5:d3:b8:c4:72:0b:d5:b1:3f:06:10:
65:07:88:7d:55:ce:74:84:ae:55:f8:fa:79:3f:7e:82:f4:dc:
6b:9b:a8:d6:99:c7:09:4b:f4:59:0d:a2:da:b3:e0:b6:ad:7a:
6f:23:f2:fb:3b:e9:75:c8:11:44:ae:8c:56:07:dd:3f:39:1b:
2a:43:24:c6:d2:b0:32:76:85:7e:09:e4:e0:80:19:f0:e3:19:
7c:01:a7:9b:68:4b:8b:c1:8d:78:c8:24:e6:25:f0:24:1a:1b:
a9:82:73:e6:26:fc:ba:42:ec:0d:7a:56:15:7d:c6:62:ed:9e:
df:48:55:df:59:7c:b5:0c:f5:f1:85:2d:f0:5d:f3:aa:bf:73:
aa:b5:ad:51:27:e1:1a:50:a9:7b:30:ef:ba:81:ee:77:fa:eb:
00:52:2e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:19:59 2025 by rpki-client