Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DA7AFC2D72311EF985DA6B2762E951A.roa
File: 6DA7AFC2D72311EF985DA6B2762E951A.roa (raw, json)
Hash identifier: R42Dpgaod5/eGpk+t9gws4gOaKXnmszEVRL+rLp229A=
Subject key identifier: C7:58:EB:97:45:DB:84:B2:72:38:0F:57:08:8B:2B:16:D1:18:87:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C4D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DA7AFC2D72311EF985DA6B2762E951A.roa
Signing time: Mon 20 Jan 2025 11:41:04 +0000
ROA not before: Mon 20 Jan 2025 11:41:00 +0000
ROA not after: Sat 01 Feb 2025 11:41:00 +0000
asID: 202656
IP address blocks: 45.199.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68685 (0x10c4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 11:41:00 2025 GMT
Not After : Feb 1 11:41:00 2025 GMT
Subject: CN=678e364f-d8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:bd:e1:d0:13:78:ea:e6:d6:16:05:01:ae:
81:1c:fd:b6:60:21:a8:d0:8b:00:87:21:85:37:d2:
a6:29:8d:45:d6:b2:41:73:59:d5:61:ab:56:d2:4c:
95:13:6d:43:81:c5:c2:56:0e:4a:cb:dd:dd:86:b6:
cc:4a:ac:10:49:03:2f:89:3d:d3:4e:a8:82:b5:13:
8c:58:84:0c:d8:7e:12:0c:ec:8b:e0:e0:c5:89:c8:
fd:e2:a9:eb:6c:04:3f:02:69:57:2a:1f:38:87:47:
54:b2:f1:a6:c9:b9:57:dd:62:88:05:9f:7b:06:bd:
47:7e:99:4b:21:a5:3f:9d:05:db:27:ab:e5:0d:45:
38:20:88:26:96:e4:6e:50:d2:54:fa:c6:26:6f:2a:
6a:d4:51:72:cf:8a:e0:aa:ef:fa:bd:7e:3a:c0:2a:
a8:93:50:3e:d0:3c:a8:bb:9a:7a:2e:7c:57:e1:10:
69:2e:09:83:26:60:5f:5a:e8:b2:23:d8:dc:16:9b:
2d:bd:ba:ab:ce:34:e2:ee:c8:01:65:80:37:85:d8:
85:90:73:15:40:86:7a:8e:51:f6:31:96:bd:c5:90:
08:ac:ff:70:23:3a:38:df:90:50:68:30:d1:d4:97:
5c:ba:a2:ae:84:19:15:c0:2e:07:72:67:28:53:8b:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:58:EB:97:45:DB:84:B2:72:38:0F:57:08:8B:2B:16:D1:18:87:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DA7AFC2D72311EF985DA6B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.208.0/24
Signature Algorithm: sha256WithRSAEncryption
15:40:96:1d:1b:70:6b:11:9b:e9:82:0b:45:14:75:53:5f:ae:
d5:54:f2:3c:7c:46:2c:9c:2e:6d:b4:02:39:cc:72:21:dc:13:
73:c0:1a:3c:ec:65:e1:60:2f:95:1b:53:18:9c:08:3f:a9:0a:
9c:6b:73:c6:0c:47:60:1e:45:74:fe:e8:0e:a3:44:1a:de:87:
fb:21:17:73:60:02:97:b8:4c:2a:9f:d9:f4:7a:7e:27:35:8f:
e8:9d:09:2c:92:be:b0:c5:16:2b:19:21:16:46:4a:bd:cd:00:
a5:cf:64:ee:1c:8a:97:e1:0b:d2:41:f2:62:dc:92:f6:31:8b:
15:3a:fc:1d:eb:59:82:c5:0f:01:49:bf:11:22:c6:bc:46:d4:
6f:52:1c:9f:6d:42:27:17:e7:56:15:d7:54:97:d2:f3:d9:1e:
14:87:08:6e:d0:c8:4c:6b:e3:3e:91:22:72:81:a2:4b:19:a3:
6c:a7:62:69:ba:5b:fb:00:28:78:b5:60:4a:09:45:03:c7:c2:
1e:4d:1a:3c:ba:3f:51:51:e6:e1:e5:f7:d8:04:54:73:ea:5d:
d4:3c:df:d3:97:6e:2b:0f:6f:e5:9d:f7:7c:25:a0:2f:06:32:
c0:4e:90:78:90:cb:31:83:0e:2d:22:f5:00:b7:84:37:10:d3:
7f:0b:55:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:52 2025 by rpki-client