Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2524B25CDA9A11EF8F4F5A45762E951A.roa
File: 2524B25CDA9A11EF8F4F5A45762E951A.roa (raw, json)
Hash identifier: WfbrNZC144in09C1Z/K0rexuaL91HVo3ROvl2ndc0ro=
Subject key identifier: 03:AA:EE:BE:8F:08:FA:96:18:A9:96:E8:3A:ED:A8:68:12:5D:91:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2524B25CDA9A11EF8F4F5A45762E951A.roa
Signing time: Fri 24 Jan 2025 21:28:25 +0000
ROA not before: Fri 24 Jan 2025 21:28:22 +0000
ROA not after: Tue 25 Feb 2025 21:28:22 +0000
asID: 202656
IP address blocks: 45.199.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69810 (0x110b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:28:22 2025 GMT
Not After : Feb 25 21:28:22 2025 GMT
Subject: CN=679405f9-a31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:63:30:15:14:3c:01:05:5b:6c:43:e4:7e:
a3:d1:4e:ed:14:54:02:43:6a:4e:0c:ec:5f:00:72:
e6:06:23:7e:ab:e6:75:95:cd:e0:d8:40:f9:8a:ea:
85:29:8f:9f:53:27:c0:7a:79:f0:0e:79:d8:ec:bb:
fa:53:89:02:a1:33:bd:84:18:8b:c7:a0:16:31:52:
26:56:89:f5:e7:51:dd:37:02:9a:0d:96:c3:b5:60:
98:ff:3e:1a:33:dd:46:b7:bf:3d:16:e3:6c:95:ac:
53:0b:92:be:b7:89:c2:61:6e:7b:a6:f8:36:f7:de:
f8:84:ca:4a:21:15:49:59:de:27:3a:5d:1c:1f:62:
cf:b5:c1:8f:7e:b6:00:9a:91:f2:d5:c3:49:4c:c0:
75:49:4a:80:30:e8:8c:dd:ef:ce:75:29:9c:b4:f7:
7f:64:32:b1:a8:6b:c4:04:01:63:7a:35:d8:7a:4b:
18:d4:18:b0:86:e5:2c:e1:d2:81:8d:7f:0f:b4:b4:
50:95:74:20:71:2e:2c:ef:77:06:98:56:1c:b4:cd:
f5:b6:3a:11:05:ad:4f:b9:1f:07:a2:5d:11:33:95:
1a:6f:ac:e2:71:27:ce:be:08:b3:5d:f4:b0:70:a4:
ec:5f:26:93:34:a2:d9:0f:fc:37:7f:a2:04:b7:7f:
d9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AA:EE:BE:8F:08:FA:96:18:A9:96:E8:3A:ED:A8:68:12:5D:91:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2524B25CDA9A11EF8F4F5A45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.222.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9b:7d:3d:24:29:fb:ef:0e:a5:a9:36:ac:24:26:b4:b5:3a:
f4:5b:f4:fc:84:b8:04:07:25:ad:d4:18:c1:4e:48:f0:db:38:
62:b6:57:d4:59:31:8b:b0:08:9e:20:b3:c1:eb:0b:72:93:12:
d2:09:af:86:2b:66:47:a9:d4:b0:53:95:d2:40:ba:46:c7:7e:
b5:a6:03:09:eb:dc:b4:ee:b0:8f:9a:35:97:21:7d:2b:04:c3:
9e:c3:92:e5:1e:47:3b:83:e1:69:ec:32:ee:47:72:35:89:29:
7b:18:9f:3e:9f:62:8a:65:ad:7f:c4:9f:d6:4d:e7:cc:04:bc:
ae:4e:95:ad:57:0a:e7:fe:29:32:2c:6d:bc:98:a8:2b:c7:e4:
4c:c0:c5:3a:e5:84:ba:64:79:4e:d2:e2:9b:28:bf:89:8c:05:
83:c8:0a:31:c5:dd:d6:86:dc:06:9e:84:1a:26:80:e8:d5:b7:
4c:5d:07:25:20:3b:c2:10:33:00:96:c3:16:64:dd:9e:9c:0f:
4d:24:9d:7e:61:c9:3e:c0:83:43:dc:2e:48:60:77:5b:17:43:
77:19:5c:99:55:80:13:21:db:41:77:50:30:a8:af:0d:36:cf:
a3:79:cd:dc:e9:f1:a9:a4:5d:8d:0c:3b:ef:85:93:fd:02:23:
fd:ec:85:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:51 2025 by rpki-client