Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F4D6A6DB0F11EFA70BB165762E951A.roa
File: 61F4D6A6DB0F11EFA70BB165762E951A.roa (raw, json)
Hash identifier: cVfZD1apsio9p+tRLEqU4H0S27hEQd1ks8iDAGTcw7o=
Subject key identifier: 68:F9:6F:54:C5:43:A8:7C:D4:79:34:0A:15:60:D4:C7:AE:20:75:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01121F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F4D6A6DB0F11EFA70BB165762E951A.roa
Signing time: Sat 25 Jan 2025 11:27:39 +0000
ROA not before: Sat 25 Jan 2025 11:27:34 +0000
ROA not after: Sun 23 Feb 2025 11:27:34 +0000
asID: 44559
IP address blocks: 45.199.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70175 (0x1121f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 11:27:34 2025 GMT
Not After : Feb 23 11:27:34 2025 GMT
Subject: CN=6794caaa-bde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:a1:0e:1c:6f:b5:5d:63:25:3f:7b:92:79:
ba:33:97:67:4f:91:19:85:a1:2e:a3:57:d6:90:ba:
a4:41:6b:3c:cf:df:65:ef:ac:84:51:31:44:15:73:
15:1b:ec:66:5e:93:65:81:f1:36:50:46:19:1f:41:
87:79:3f:aa:cb:30:f8:61:a9:54:02:2e:23:1d:7d:
b2:ce:54:30:98:2b:06:49:78:c1:15:88:07:ab:5b:
44:71:9a:f4:28:c1:bc:d7:37:5c:0b:76:6f:6a:a0:
ee:80:0f:16:83:ba:45:a0:ea:66:08:81:6c:53:ff:
02:93:20:cd:b2:dc:7e:00:94:d7:c5:9f:11:f4:7d:
ec:c8:13:0f:bc:bf:81:89:61:4c:e9:3d:dd:3b:3c:
f7:fc:0b:cc:56:7a:ab:eb:d8:3c:a6:a1:58:e5:37:
46:ed:f1:71:6d:9d:39:04:d1:47:6b:41:e5:3f:af:
6d:a8:de:08:22:c2:ee:7b:3b:53:48:0c:b6:51:b7:
3c:b0:32:49:da:74:76:44:c9:9c:f1:69:f5:e9:b9:
3a:ea:0f:9c:76:08:37:a6:bd:30:82:06:35:3a:45:
8a:9c:fb:d5:cd:e9:cb:07:63:50:b0:60:60:90:95:
11:dc:15:07:2e:78:0a:0f:7a:61:e2:0e:fc:de:5e:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F9:6F:54:C5:43:A8:7C:D4:79:34:0A:15:60:D4:C7:AE:20:75:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F4D6A6DB0F11EFA70BB165762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.211.0/24
Signature Algorithm: sha256WithRSAEncryption
62:12:93:99:c7:bd:e9:b8:eb:bb:4b:4e:83:48:ac:3d:71:85:
ed:3e:ef:b4:d8:9c:ee:b9:e6:bc:c4:e0:e9:3a:f9:74:51:e3:
81:83:80:46:97:17:6c:82:a6:aa:4a:05:89:3c:8f:d3:63:c4:
af:62:c6:15:07:de:8f:1c:da:50:d6:db:97:5b:07:e9:d1:99:
95:9a:8b:b9:8c:01:59:4f:29:d9:15:82:6e:e9:d4:8c:02:10:
30:92:80:11:59:ad:4e:83:76:9a:15:4d:e7:a2:0e:b4:ba:78:
17:4e:61:f9:6c:2f:20:2e:94:4d:79:c5:96:c8:67:f6:b5:64:
45:63:f5:32:d8:6e:ce:5f:1a:d3:71:e4:99:68:95:02:16:79:
ed:f4:45:38:ee:de:b5:1f:79:ae:9d:25:75:c3:fa:78:7b:ea:
b0:9c:57:1f:fb:20:c4:f3:e4:4b:40:f3:9b:6b:79:ff:49:02:
71:0e:55:5d:f2:0c:c1:ca:e5:de:3d:ec:8d:2e:bc:aa:20:84:
e7:9b:f2:1f:07:e0:17:18:28:ba:c2:06:eb:a3:13:de:6c:0e:
a5:7c:03:73:6a:52:e3:7d:5e:4f:48:a1:cd:ff:cc:64:49:4a:
3c:8a:3d:c3:55:ee:30:8a:c6:a6:62:ac:42:80:6f:2a:02:27:
8a:66:b1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:27:13 2025 by rpki-client