Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62C6B546D72111EFA5555FA5762E951A.roa
File: 62C6B546D72111EFA5555FA5762E951A.roa (raw, json)
Hash identifier: KMPAcPEWV1hHaVRxLBJFJJJU0p8B9IGECSUMUvrb1dA=
Subject key identifier: 6A:0C:91:BD:A9:7B:45:E5:58:D4:07:59:AF:94:EE:C0:C6:36:D3:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62C6B546D72111EFA5555FA5762E951A.roa
Signing time: Mon 20 Jan 2025 11:26:26 +0000
ROA not before: Mon 20 Jan 2025 11:26:23 +0000
ROA not after: Sat 01 Feb 2025 11:26:23 +0000
asID: 44559
IP address blocks: 45.199.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68671 (0x10c3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 11:26:23 2025 GMT
Not After : Feb 1 11:26:23 2025 GMT
Subject: CN=678e32e2-98b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:49:d3:ed:e6:0a:cc:1d:fc:57:62:4f:0e:e2:
c2:77:22:30:52:42:89:aa:d4:38:25:b0:b3:c4:3b:
52:57:76:b9:69:64:aa:1a:c9:e4:3f:03:e2:70:6f:
61:7d:86:00:79:a8:4b:f1:01:ec:f9:c0:c2:78:9a:
5d:ff:4e:17:99:95:56:b0:e1:f8:83:b3:52:e6:33:
d1:23:eb:69:16:c9:6e:05:46:c7:a5:16:b8:ce:b2:
4e:07:e0:05:41:6f:3e:e3:a8:83:2e:4b:64:5b:f5:
33:71:78:ba:3f:50:27:59:09:bb:a6:05:d5:8e:c3:
d2:e1:7c:01:77:66:87:4c:8f:da:7f:1c:3b:b3:12:
9a:e2:3f:93:17:18:95:32:c3:c1:ea:2d:e1:a1:2f:
66:45:a7:d5:6c:de:b9:36:cf:f5:16:de:60:cc:8d:
4c:0f:94:2d:08:85:dc:9a:1c:60:9b:7f:81:1b:bc:
04:65:69:90:46:20:66:fb:a3:cb:57:02:bc:89:65:
81:86:76:eb:11:79:6a:18:d4:17:dc:4b:7a:c0:1e:
6c:39:8b:41:3a:2d:8a:fd:92:bd:55:d4:58:23:53:
47:65:7e:f1:43:56:df:ea:2d:aa:2f:e5:5b:a9:5f:
7e:e6:10:82:e3:28:db:0c:89:e2:b5:de:b4:1c:d8:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0C:91:BD:A9:7B:45:E5:58:D4:07:59:AF:94:EE:C0:C6:36:D3:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62C6B546D72111EFA5555FA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.210.0/23
Signature Algorithm: sha256WithRSAEncryption
91:eb:6e:8b:75:c6:06:be:69:35:a9:1f:6c:02:e5:8e:51:01:
20:62:d4:4a:18:aa:1d:43:80:24:c3:4b:16:4a:12:63:41:7f:
c7:ba:74:e8:39:10:45:9d:76:6c:e9:1a:11:50:82:d2:73:2b:
e6:19:7b:e8:c6:ba:fe:a7:43:a1:83:d8:a9:0c:a0:8b:41:00:
cb:27:ee:08:a9:15:69:42:d2:bc:94:b1:88:3d:24:85:49:6f:
78:a0:e0:f1:88:36:c6:27:2a:7d:12:87:e0:90:5d:6b:e8:e6:
af:9b:c2:bb:68:fc:d0:f8:0e:38:53:5f:55:00:9b:96:98:ef:
36:48:f1:dd:44:a0:04:c9:4b:ab:13:db:51:99:bd:96:8b:19:
05:f6:b9:30:d3:9a:5b:a5:59:91:77:1d:45:31:0e:8c:fd:42:
24:e7:e4:7e:ee:09:09:86:cf:5f:a9:ae:30:8e:b0:b5:1b:27:
18:c7:fc:43:db:94:13:8f:4f:ea:03:76:3d:32:ba:c9:65:39:
3a:c9:91:6b:ed:67:ec:63:18:ee:b4:19:28:7a:a2:5b:47:2b:
ce:39:3e:4d:7f:65:b0:ba:b8:69:c7:45:69:2c:49:09:84:01:
08:7b:cc:46:75:a0:02:14:d0:17:42:28:9e:3a:00:08:04:19:
49:d0:07:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:27:12 2025 by rpki-client