Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47F71EF6BDD911EFBC49438B762E951A.roa
File: 47F71EF6BDD911EFBC49438B762E951A.roa (raw, json)
Hash identifier: dH8RO4TQr93ZeAFHjGvodT11BD3fAvAFkZ8SCtQmrzI=
Subject key identifier: 6C:8B:3C:1A:9B:4B:9C:AC:07:E6:B0:A0:F1:37:C9:90:4F:9C:57:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47F71EF6BDD911EFBC49438B762E951A.roa
Signing time: Thu 19 Dec 2024 07:17:18 +0000
ROA not before: Thu 19 Dec 2024 07:17:15 +0000
ROA not after: Sun 30 Mar 2025 07:17:15 +0000
asID: 28917
IP address blocks: 45.199.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58807 (0xe5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 19 07:17:15 2024 GMT
Not After : Mar 30 07:17:15 2025 GMT
Subject: CN=6763c87e-cfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:3f:5f:fe:e0:c8:31:4d:25:12:46:28:8a:
43:d3:97:c3:76:ec:d1:8e:9e:c5:f3:e8:65:db:9a:
10:a3:7e:17:8c:c6:2f:20:d6:1f:a1:6b:39:3a:bf:
cc:74:1a:22:cf:7a:9a:f4:be:87:12:2a:d8:55:e1:
dd:80:13:c5:30:e3:db:96:1e:8a:c8:65:1b:70:92:
a6:b7:db:5b:29:3a:db:38:a4:4e:4c:0e:38:97:09:
d0:7c:04:90:21:ed:a1:ab:3a:e5:88:04:2a:1a:4e:
5f:78:ba:44:6a:76:e3:2b:ac:de:34:45:df:7e:f6:
db:97:bc:2b:c1:b1:b6:ca:53:22:2f:53:43:88:61:
21:8f:96:a1:26:00:fb:10:d3:47:b2:b0:f0:ce:4b:
77:05:1f:7d:66:86:ee:b5:8a:ac:be:29:f2:de:a4:
60:08:5d:d0:4c:99:a2:a1:b8:11:04:25:45:9d:d5:
df:cd:a3:27:ff:a4:ef:2e:b2:8f:1b:ea:e3:a3:a0:
e9:ac:e6:66:73:ac:b9:2b:ff:d7:d1:43:2e:38:53:
cc:40:cc:03:6f:66:48:7c:9a:91:f5:17:6e:90:21:
da:01:c0:ef:1f:c4:97:8f:e0:3f:4e:5d:62:86:ae:
1c:01:f3:2b:35:d6:8a:c7:72:e0:31:14:70:8f:11:
f1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8B:3C:1A:9B:4B:9C:AC:07:E6:B0:A0:F1:37:C9:90:4F:9C:57:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47F71EF6BDD911EFBC49438B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:66:3c:e7:07:34:e2:cf:8d:21:8c:6f:8e:e5:40:24:b6:0f:
57:ed:a6:bd:03:eb:68:97:30:c1:d2:b7:66:65:34:46:27:07:
e9:52:50:70:b1:2d:80:bd:6a:d8:f3:dc:d4:8a:c8:72:b9:cc:
64:88:df:7a:d8:4f:3a:9e:50:c1:c2:da:7a:ac:9d:b9:40:09:
a8:60:68:aa:14:3e:58:2b:63:5b:c5:66:89:ff:e3:7f:34:7e:
3f:63:6e:b8:9d:0f:59:9b:04:56:cf:0c:e5:e9:25:f7:6e:55:
9c:19:68:f2:e2:fd:b8:dd:a9:4e:5c:3d:7c:ce:e4:e4:16:91:
01:b8:7d:80:f2:f6:bf:38:ce:2c:3d:73:3c:c8:d0:5e:00:95:
b0:3c:db:d9:ee:e5:c0:10:ba:9f:cc:bf:55:50:68:eb:45:ab:
bf:35:24:9e:ef:00:2b:6b:8b:a2:21:86:00:75:29:c9:c7:64:
70:fa:43:62:fa:10:61:08:5c:99:47:38:64:6d:46:56:a7:73:
d5:be:5c:a9:78:8b:ec:e8:22:e9:fa:04:8b:fe:b7:3a:91:91:
aa:68:38:69:d2:db:f9:ce:94:35:76:70:50:c4:55:d0:3e:05:
91:6a:46:09:af:d7:fe:55:25:e0:26:3c:56:2c:09:c3:9e:55:
1e:9f:38:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:46:36 2025 by rpki-client