Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D5A1EE0DA9F11EF8DF44D65762E951A.roa
File: 1D5A1EE0DA9F11EF8DF44D65762E951A.roa (raw, json)
Hash identifier: XgRdKVfzhUCCKSYTV6FNUTKkrKD9E8pn501Kl0BmePM=
Subject key identifier: 9C:63:26:02:83:11:74:4A:F0:08:6E:75:DD:90:ED:B7:40:88:1D:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D5A1EE0DA9F11EF8DF44D65762E951A.roa
Signing time: Fri 24 Jan 2025 22:04:00 +0000
ROA not before: Fri 24 Jan 2025 22:03:56 +0000
ROA not after: Tue 25 Feb 2025 22:03:56 +0000
asID: 202656
IP address blocks: 45.199.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69842 (0x110d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 22:03:56 2025 GMT
Not After : Feb 25 22:03:56 2025 GMT
Subject: CN=67940e50-426c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:db:aa:2e:51:ea:a8:e8:93:fb:4e:97:7a:d4:
49:56:ad:2b:4f:6b:87:41:78:94:cd:eb:ee:ca:c6:
a7:dd:2f:6b:0e:8e:fb:c0:94:3f:25:76:b2:0b:7c:
e9:39:cb:93:a2:21:b1:9a:0c:af:06:a9:cb:96:f8:
df:cb:fa:57:91:38:80:b4:58:75:c0:d7:96:38:2f:
25:84:42:8c:1d:28:13:85:02:1b:0b:34:17:21:1b:
1e:e8:fc:a7:4a:e2:b1:02:cc:d6:4d:65:92:94:e6:
47:04:da:9e:c5:f4:10:23:bd:1a:b3:81:58:b5:74:
89:fb:6e:db:ea:4a:75:c8:04:df:7a:00:fc:c5:bf:
f0:95:8c:bf:86:da:ba:43:02:d6:8f:aa:27:f5:f9:
4a:98:09:ca:6c:a9:0a:aa:e9:a4:25:82:2b:61:0e:
81:7f:f6:ad:68:6f:8a:e6:8e:9e:75:b0:54:cb:da:
d8:99:62:b4:3e:2c:06:2d:72:15:6b:21:59:28:7a:
4b:b6:b9:35:f9:41:ad:f9:04:e3:cf:2b:a7:d7:b0:
75:66:81:f4:01:dd:7f:89:19:8e:83:5e:7e:49:4e:
97:a9:f2:cc:1f:94:85:88:6b:b0:fd:e8:3a:d5:70:
1c:45:b8:31:90:78:f7:ab:cb:6b:6c:e8:49:b4:6e:
16:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:63:26:02:83:11:74:4A:F0:08:6E:75:DD:90:ED:B7:40:88:1D:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D5A1EE0DA9F11EF8DF44D65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:81:30:bf:02:5b:5f:e7:d1:65:25:8f:63:a4:38:65:b4:c3:
63:e7:2a:10:d1:fd:e8:df:c9:34:9c:f5:19:3d:55:36:b3:63:
cf:79:04:5d:5d:6e:55:67:a2:ba:dd:c2:59:29:7d:5e:f7:c4:
2b:88:97:c6:be:00:e1:71:42:c9:4b:13:24:62:e7:6d:ea:1b:
63:2a:3f:06:ef:5c:97:a7:ef:0a:17:41:48:cf:78:3c:16:5d:
50:41:ac:b9:79:2f:18:80:19:ac:9a:fb:4a:38:e2:36:5c:7e:
ae:9b:0d:9c:97:d9:99:0c:f4:c4:e7:7e:27:46:ac:b3:6b:23:
4a:93:f2:d1:cf:43:3a:bd:85:87:07:87:bb:b7:af:8a:e7:a3:
59:4e:b5:d1:92:52:fa:da:aa:7f:1a:97:b5:ef:62:f5:23:2c:
2a:64:58:fe:ca:a4:34:f3:94:71:4d:3b:66:da:ec:43:31:b0:
8a:f2:78:1e:2f:c1:35:3e:a8:df:da:3f:ac:f4:fe:26:ea:ba:
f0:a8:e1:97:a6:26:4e:84:f6:7b:7b:e0:b5:ad:5b:9f:b6:11:
9f:ca:3a:72:fd:81:4a:42:66:93:65:b5:9a:ea:9f:64:5e:be:
34:fe:23:49:41:46:7c:37:5d:e1:b9:5a:91:d3:40:81:ae:1f:
83:25:3c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:54 2025 by rpki-client