Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B46857CDAE811EF8E556C5E762E951A.roa
File: 2B46857CDAE811EF8E556C5E762E951A.roa (raw, json)
Hash identifier: QVs3cpF42NzR/XSNN7zHATu2woW0U0yKhlDK9VSw+Ok=
Subject key identifier: B5:24:EC:84:E7:85:19:6F:A9:D3:9E:D0:58:DE:66:3E:2E:A8:9F:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B46857CDAE811EF8E556C5E762E951A.roa
Signing time: Sat 25 Jan 2025 06:46:57 +0000
ROA not before: Sat 25 Jan 2025 06:46:52 +0000
ROA not after: Sun 23 Feb 2025 06:46:52 +0000
asID: 202656
IP address blocks: 45.199.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69861 (0x110e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 06:46:52 2025 GMT
Not After : Feb 23 06:46:52 2025 GMT
Subject: CN=679488e0-d7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7e:73:f6:17:50:65:7e:7d:6b:de:b3:47:5b:
81:a5:34:c7:15:f3:81:99:7a:e9:ab:94:69:43:24:
74:c6:0b:5a:78:5e:a0:0b:2d:a2:0e:34:5c:6f:9a:
5c:a3:6e:70:ca:f7:15:26:a0:7a:78:a6:0a:ca:82:
b5:c6:ae:7e:c7:ab:bc:cd:61:21:8a:a1:e3:16:e6:
65:7a:e5:a0:c2:5a:ba:80:3e:bd:97:34:23:f0:85:
2e:f8:4a:61:a4:3f:19:2a:ee:4d:71:da:6a:2c:9d:
78:f6:fc:47:53:f6:80:dc:25:b8:5e:a0:31:3b:29:
da:26:2b:df:94:3d:40:08:e8:dd:b1:c9:4e:bf:df:
5c:fb:e5:db:f9:ea:da:c0:11:f4:b9:60:e5:2e:ce:
59:34:a9:bb:67:4b:e7:2d:fc:b4:06:06:0b:2d:40:
70:c6:64:16:a0:20:01:61:c5:28:dd:b7:29:2d:b3:
d5:90:dd:e2:ce:cf:34:e9:4d:90:ec:08:fa:06:f6:
ee:3c:e8:b4:de:c3:0d:e0:cc:43:bb:27:91:4b:df:
af:32:59:9d:2c:9d:06:3f:50:c0:d4:42:c6:d0:73:
6e:a0:a4:92:df:a1:a4:56:bb:c3:40:eb:c0:80:07:
61:3a:f8:70:53:75:1c:04:a3:9a:be:60:69:f1:fa:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:24:EC:84:E7:85:19:6F:A9:D3:9E:D0:58:DE:66:3E:2E:A8:9F:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B46857CDAE811EF8E556C5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.250.0/24
Signature Algorithm: sha256WithRSAEncryption
68:94:c5:ab:06:2f:d2:83:a6:1a:33:6f:1f:77:b0:92:f3:88:
70:29:20:9e:ab:14:f7:e7:56:c8:df:39:43:63:30:78:57:9b:
20:11:b5:f3:20:1a:bc:29:33:71:68:39:d1:aa:6f:09:2b:f2:
c9:55:2b:2e:81:df:c6:e9:09:89:a5:ed:cc:6f:13:81:01:89:
d4:64:27:95:1e:58:ba:64:04:1a:d3:b2:9d:d4:58:4f:73:cc:
e9:1a:c9:45:38:52:15:c4:8d:32:01:ac:31:a9:af:f6:5e:c2:
97:02:ea:d3:c8:9d:d8:35:1e:75:03:57:f5:90:fe:3f:10:34:
7d:72:81:ba:13:6f:e5:87:2d:e0:03:f1:c9:4c:65:c3:73:4c:
b0:4a:58:69:e0:e1:23:88:22:a0:a7:ea:f7:40:32:80:e0:d0:
9a:c3:ff:dc:8f:24:d3:09:3b:24:da:56:c7:7f:4c:c2:3e:95:
8a:22:85:d7:16:2c:6a:1d:21:52:36:05:cb:1f:1d:aa:f2:16:
7d:25:bc:f3:43:74:81:a4:be:97:76:0f:79:6d:2c:29:c1:96:
e8:2e:ff:0c:20:55:9e:73:3f:b3:73:68:b2:38:c0:f8:25:37:
da:d6:01:74:6e:50:a2:f8:dc:4f:7d:c4:ff:4d:3d:b6:f6:28:
c6:29:c0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:33:05 2025 by rpki-client