Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AD5E2B4D80B11EF8696A0A0762E951A.roa
File: 4AD5E2B4D80B11EF8696A0A0762E951A.roa (raw, json)
Hash identifier: pm84C9hyWsHppZR9rV9zQ7YbDeWrk2SiiFYk3+2ybjg=
Subject key identifier: 96:40:A1:DE:24:78:69:35:0D:70:62:62:B9:F7:28:7D:38:00:56:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E40
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AD5E2B4D80B11EF8696A0A0762E951A.roa
Signing time: Tue 21 Jan 2025 15:20:48 +0000
ROA not before: Tue 21 Jan 2025 15:20:43 +0000
ROA not after: Sat 01 Feb 2025 15:20:43 +0000
asID: 44559
IP address blocks: 45.199.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69184 (0x10e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 15:20:43 2025 GMT
Not After : Feb 1 15:20:43 2025 GMT
Subject: CN=678fbb50-6648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:5a:15:79:5d:6b:cb:be:22:5b:f9:60:ca:
de:6c:8b:26:57:e8:fc:fd:0e:49:f2:4e:7d:54:dc:
a7:46:b4:25:86:91:82:ec:6a:68:ae:52:74:52:68:
82:29:36:28:1f:57:ea:ef:d5:5e:a3:60:1a:bd:1b:
69:65:1e:c2:eb:bd:6a:ba:d9:55:7c:76:14:3c:8c:
0b:8b:b5:6d:8b:31:7f:93:c1:57:d9:47:d8:c5:1d:
ab:89:71:4e:49:2b:23:d2:d2:8c:c4:e9:c9:4d:ef:
6c:97:59:05:64:cd:ee:77:bd:e8:6a:a6:13:d6:72:
a2:1a:bf:b4:06:27:0d:8f:a1:93:e2:d1:de:95:93:
65:d0:7c:6e:ea:8a:e2:cd:d2:5a:7d:e9:4c:ff:29:
19:74:1f:ac:91:3b:27:b3:6d:e4:b3:81:8d:9f:f1:
38:32:10:c4:32:8e:52:59:5c:d7:a8:d3:b9:af:40:
c2:82:72:28:29:77:53:bc:94:99:68:53:88:95:4d:
73:89:31:ed:30:af:9d:cd:92:6c:93:2e:de:18:1a:
d3:0f:64:b2:c8:a5:fe:5e:1e:d4:a4:d7:7c:74:d4:
4a:13:d4:20:2a:23:f2:e7:40:bc:18:44:7e:30:8d:
be:20:26:f6:12:1a:07:d0:1d:9d:42:e2:e1:c6:56:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:40:A1:DE:24:78:69:35:0D:70:62:62:B9:F7:28:7D:38:00:56:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AD5E2B4D80B11EF8696A0A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a7:eb:a3:bd:be:26:44:b8:a5:53:8a:0e:98:69:af:48:25:
86:94:37:e4:2e:e3:57:ec:30:39:37:33:34:08:54:7c:0d:49:
63:e8:18:2c:fb:94:ba:f5:34:e3:89:62:9a:2b:c4:6d:00:bd:
0b:b9:79:f7:ef:a7:c6:5e:83:0e:9e:fb:05:0d:bf:c6:16:73:
10:eb:82:6a:dd:e1:22:31:b6:f2:23:38:2d:43:5d:e2:30:7f:
a0:60:57:8f:52:7e:d6:77:69:5f:c4:33:cf:5f:22:1e:5d:e3:
d8:09:e2:8c:1e:42:e7:b1:b8:02:df:72:83:31:56:fa:9d:e4:
21:e3:4e:0d:20:49:d8:19:14:36:f5:38:a2:b2:cf:eb:7d:b2:
66:48:95:f3:a2:84:b3:b8:3b:62:67:38:5e:29:81:1b:97:d5:
92:9a:69:e0:1b:67:90:fc:22:7e:34:5a:b9:42:a7:16:31:c3:
4c:40:34:1c:a8:9a:76:6a:dd:72:9e:6a:43:99:99:b5:1e:1f:
98:f2:7a:41:5e:be:d8:23:fc:b6:7f:8c:da:bd:31:a6:e0:9b:
94:c4:1a:e1:e7:04:a9:2f:9a:db:0c:f3:a0:92:16:71:46:96:
e8:c2:14:cd:ec:c8:af:cb:b7:12:d5:68:9c:7b:6b:09:f4:4a:
f7:e0:32:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:52 2025 by rpki-client