Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BBE6EE8DAE711EFB5170458762E951A.roa
File: 3BBE6EE8DAE711EFB5170458762E951A.roa (raw, json)
Hash identifier: 4ZKNSKVJu8m3m4J+b1fWbA/kqSfPYS0tfYrfwfPeU7I=
Subject key identifier: 27:0A:8B:08:5E:BE:FC:AE:EA:A8:1C:51:63:8B:8E:34:51:C9:30:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BBE6EE8DAE711EFB5170458762E951A.roa
Signing time: Sat 25 Jan 2025 06:40:15 +0000
ROA not before: Sat 25 Jan 2025 06:40:11 +0000
ROA not after: Sun 23 Feb 2025 06:40:11 +0000
asID: 202656
IP address blocks: 45.199.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69855 (0x110df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 06:40:11 2025 GMT
Not After : Feb 23 06:40:11 2025 GMT
Subject: CN=6794874f-c07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9c:bc:0c:9c:01:d4:fe:3d:a5:01:b3:f8:6e:
53:e0:b2:09:1d:c0:fb:e3:96:a3:2e:7d:c6:a6:87:
80:b0:02:34:3a:58:17:10:f9:e6:92:b9:1a:c9:d5:
37:b3:bc:ed:08:6b:eb:0d:ae:83:ad:b7:6e:2c:32:
92:cf:3f:c3:71:b1:e7:21:9e:ec:f3:fd:d8:ee:9c:
12:23:1d:2d:a4:1f:ff:dd:6f:25:01:a1:72:b1:b1:
ac:99:96:32:6d:11:6a:ac:d2:10:8a:3c:91:29:68:
6c:30:ad:78:59:02:4f:0d:ab:25:a5:3a:78:e6:bf:
ce:7b:b3:55:d2:99:16:34:8e:d0:53:5e:ae:4e:e8:
bc:82:07:da:96:9a:42:a2:3d:4e:e5:41:a4:97:9c:
ce:60:5f:8e:94:c5:29:16:b3:31:65:a5:3a:c0:32:
40:44:44:17:16:71:ba:01:9c:91:40:a5:79:f5:8f:
50:33:6c:17:36:25:9b:4f:ce:77:75:77:74:9a:25:
26:18:8f:db:6a:87:73:1c:60:c2:61:3d:cb:45:83:
ab:92:66:51:a0:cd:87:01:e0:95:62:33:a4:cc:25:
52:bf:73:e6:1e:9d:f3:20:be:08:a6:5f:90:61:94:
4e:cd:46:04:1d:fa:ad:67:13:5f:01:bb:9d:d9:5d:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0A:8B:08:5E:BE:FC:AE:EA:A8:1C:51:63:8B:8E:34:51:C9:30:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BBE6EE8DAE711EFB5170458762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.245.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a9:2f:11:87:25:65:2b:2c:f2:48:f7:7d:8d:99:c5:be:fa:
91:45:00:76:b0:c5:85:90:f9:48:c2:21:f9:ac:ff:6f:42:6f:
23:4e:8d:e3:07:5e:55:e8:eb:38:25:16:ca:f7:36:63:87:1c:
51:f2:19:ec:5c:24:4f:45:e3:d1:2b:b8:fd:5a:37:78:65:87:
04:33:ed:5e:86:d5:4a:7f:b2:e0:d4:ac:3e:00:4c:5e:f8:78:
86:55:97:26:ae:a6:6f:c8:1e:94:9d:6a:4c:80:03:ad:9b:61:
e2:f1:9a:6b:53:62:19:29:65:f8:dd:91:48:05:81:22:75:ff:
94:38:8a:4c:9b:24:b8:95:e5:d3:0c:9c:71:e8:49:f0:c3:36:
28:b1:a7:0a:93:5a:d9:75:75:d6:31:31:86:82:bb:21:4c:5d:
d0:e5:70:31:8c:31:12:01:aa:69:97:5d:c7:98:0c:f8:bf:08:
dc:d1:a0:6f:45:e2:82:26:ec:5a:b5:02:f0:48:1d:91:31:77:
ab:2a:f6:1d:f0:04:2c:30:25:39:26:87:f3:64:db:5e:41:38:
03:36:b3:7b:3e:e7:a0:a2:69:83:15:a1:ee:45:18:ce:9e:ef:
95:3d:da:6a:0c:81:10:0f:fa:b2:42:29:07:ab:8c:7c:ba:bd:
bf:74:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:19 2025 by rpki-client