Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60ED5680DA9B11EFA9FD404E762E951A.roa
File: 60ED5680DA9B11EFA9FD404E762E951A.roa (raw, json)
Hash identifier: b9ramyo3ks5TXxENVROrqHyWb0oCcsI0uWFkalut95E=
Subject key identifier: 07:5E:57:13:5A:58:96:71:EC:EC:27:D8:FB:07:1B:28:05:21:33:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60ED5680DA9B11EFA9FD404E762E951A.roa
Signing time: Fri 24 Jan 2025 21:37:15 +0000
ROA not before: Fri 24 Jan 2025 21:37:11 +0000
ROA not after: Tue 25 Feb 2025 21:37:11 +0000
asID: 202656
IP address blocks: 45.199.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69818 (0x110ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:37:11 2025 GMT
Not After : Feb 25 21:37:11 2025 GMT
Subject: CN=6794080b-2c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:7f:25:f6:0e:2a:f5:a5:0f:d6:b8:1a:cb:
a6:0b:90:ba:dd:00:90:92:2b:cd:c2:c3:d8:83:da:
8f:3a:f0:a0:1d:fb:77:64:b3:ad:34:4c:09:dc:5c:
aa:ab:59:c9:f5:fb:8b:43:36:26:fd:45:bf:44:81:
4f:2c:9e:bf:f2:56:7a:99:66:45:83:21:51:2f:16:
f2:ed:5c:e3:e0:28:23:2c:e9:05:8b:9b:df:2f:51:
ff:aa:91:33:12:b9:f2:3f:ba:cf:7b:74:63:1b:24:
38:d5:1e:99:67:f5:29:a9:bf:3d:31:9b:00:dc:ca:
bb:ef:1d:5d:d1:78:5a:4f:fc:60:89:25:cd:fa:ba:
91:36:8b:27:e6:a3:e4:94:f7:95:69:eb:d9:95:b7:
e6:df:85:9e:40:dc:06:77:73:01:25:4a:00:cc:58:
1e:21:5f:d2:e2:0d:c4:ca:2f:6e:da:9d:2f:bb:c6:
97:0d:86:3f:aa:45:29:39:7c:e6:08:15:eb:fa:40:
eb:97:73:6e:42:89:d9:88:a7:bf:41:6d:10:3b:1c:
c1:ab:76:56:a2:73:5b:c5:87:0d:d2:39:34:46:af:
c0:d5:2d:3b:09:06:32:40:0e:c0:4d:e4:3b:24:0c:
86:8b:00:49:e5:48:7f:45:b9:3f:4d:2f:de:74:61:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5E:57:13:5A:58:96:71:EC:EC:27:D8:FB:07:1B:28:05:21:33:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60ED5680DA9B11EFA9FD404E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.225.0/24
Signature Algorithm: sha256WithRSAEncryption
16:dc:b6:4d:10:9b:11:80:5e:94:9f:cd:aa:81:2a:bc:f8:23:
88:71:e7:84:12:8e:0b:7c:32:22:9b:ab:a4:ca:f7:87:8f:80:
ca:93:06:95:3e:eb:24:63:1f:37:67:ff:d5:63:36:00:52:b5:
7c:60:bb:31:75:9c:0c:65:01:ac:69:fd:bb:f5:99:bc:ff:68:
04:4d:41:25:8b:20:a6:01:ac:16:bf:4e:4c:87:9c:53:d7:db:
9b:64:ca:de:78:b8:c1:23:fb:e0:3e:1b:1d:ab:72:81:93:60:
b0:2c:84:f6:ca:2e:b6:92:3e:bb:93:7d:31:a6:6c:b7:f5:7e:
5f:15:75:3c:fd:ae:7c:70:45:dc:7b:fd:4b:f0:9b:54:1b:3e:
9f:ea:cf:97:67:a9:20:31:5d:b5:61:fd:44:40:b1:db:e8:c2:
7d:7c:53:67:de:12:c5:26:ea:39:83:20:1d:0e:89:c2:4a:f2:
57:65:0c:65:4b:9a:8f:74:fa:95:d4:ad:fd:7f:09:05:c4:b6:
6d:ef:ef:8a:45:ef:f4:46:6a:24:0c:3c:14:25:a3:a6:49:57:
6e:62:3a:5e:8e:0a:26:d0:4d:9b:df:80:77:e1:8e:ee:78:c9:
e0:3a:20:1a:6b:d5:f2:92:3c:ec:94:14:44:08:ed:8d:34:1b:
99:eb:66:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:37:45 2025 by rpki-client