Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38ED5DF4D80911EFBA215A93762E951A.roa
File: 38ED5DF4D80911EFBA215A93762E951A.roa (raw, json)
Hash identifier: ikyD7bmytZ+gnhnsLwP8Lpmj0dvQ1+ekCbNivMBZYiE=
Subject key identifier: D8:2D:87:97:D7:29:92:B8:80:80:2E:83:EF:29:6D:34:36:7D:1D:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E32
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38ED5DF4D80911EFBA215A93762E951A.roa
Signing time: Tue 21 Jan 2025 15:05:59 +0000
ROA not before: Tue 21 Jan 2025 15:05:55 +0000
ROA not after: Sat 01 Feb 2025 15:05:55 +0000
asID: 44559
IP address blocks: 45.199.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69170 (0x10e32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 15:05:55 2025 GMT
Not After : Feb 1 15:05:55 2025 GMT
Subject: CN=678fb7d7-9b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:b8:a3:59:9a:fa:e2:23:5b:79:5a:70:fe:
4a:13:ab:3a:86:e3:2e:83:6d:43:ac:ff:bd:99:34:
4b:2e:dc:74:2d:05:ff:cf:e3:e5:43:8f:6c:2a:bf:
17:6f:c7:85:ae:24:27:99:28:33:ce:27:8b:10:7d:
0b:73:ee:14:3f:67:84:1f:06:f6:4a:10:d9:48:cf:
2c:7b:cd:76:0a:6f:f2:0b:0b:e7:e3:27:07:fb:d1:
85:68:c6:ba:59:66:9e:26:2a:41:f0:c6:7d:e1:42:
a1:43:0d:76:87:bc:56:ed:ae:cc:66:40:69:58:87:
50:4f:aa:3b:14:9c:31:2c:41:66:eb:1d:62:f8:66:
9e:00:8a:d0:09:35:f6:e1:a3:f5:d7:29:10:56:5c:
a8:3b:3f:4b:93:f3:0a:58:a6:17:fa:b3:73:31:3e:
a0:86:bc:a9:0d:85:b5:ca:76:86:86:60:20:5c:cc:
65:40:d1:f8:ec:42:60:60:be:5d:c7:fa:03:ac:b4:
bb:9a:c6:f4:00:98:93:02:ee:73:3a:9a:8c:f1:07:
b1:3f:dd:c3:11:36:34:12:a7:ff:32:a5:de:2b:3b:
46:cf:b8:45:6b:cb:96:44:5f:89:96:6d:f5:86:4a:
7e:9b:f7:99:00:39:a5:06:59:72:46:23:b4:1c:1c:
f4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2D:87:97:D7:29:92:B8:80:80:2E:83:EF:29:6D:34:36:7D:1D:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38ED5DF4D80911EFBA215A93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:36:9b:38:24:cc:0e:ab:5c:3c:c5:05:df:55:42:a3:37:89:
21:5f:c6:a7:95:24:fb:a9:92:42:f6:9c:41:31:97:56:4d:f8:
fd:9b:36:07:b2:b4:f3:8b:26:51:dd:7b:91:72:34:51:dd:5e:
53:a9:45:42:97:fb:8b:37:79:a7:83:44:7c:a9:8e:3d:09:de:
26:88:68:f3:ba:63:79:21:43:c6:61:f0:c9:18:3b:aa:46:e0:
cd:79:42:79:3c:2e:83:14:21:ee:b8:a4:6e:f5:25:5d:ec:8e:
61:ae:f8:ff:a3:b2:09:dc:30:1d:1e:6b:d6:33:3b:fa:fd:06:
8a:ca:9c:06:c0:7d:71:68:30:01:15:0e:b4:b2:af:57:7a:58:
18:b6:ff:b6:c1:00:59:cd:0d:23:47:ac:54:ca:0a:e0:61:cf:
c1:80:9d:e8:24:d3:ba:66:71:22:f8:d3:75:cb:3d:46:36:4c:
b6:f0:43:e4:fe:d4:e7:a9:7b:e6:87:c7:46:ee:72:c4:48:a4:
96:89:96:c7:60:5b:02:c1:88:78:e8:68:c8:c3:5d:79:31:b4:
37:f9:1d:b7:6c:23:b5:26:c9:a7:00:ee:27:c5:3a:99:02:1e:
dd:87:c2:74:61:cd:ea:ef:9c:7b:2a:f1:bd:ae:1e:59:37:52:
72:0e:e4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:45:08 2025 by rpki-client