Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73D55C12DA9A11EFB407F745762E951A.roa
File: 73D55C12DA9A11EFB407F745762E951A.roa (raw, json)
Hash identifier: S/IEf6qyg4zTTj7qgZJ4zY/ekZyXW4Bu2hHdhjDaSb8=
Subject key identifier: C9:55:3B:11:0C:A9:B7:EF:82:7D:BD:12:8A:F1:6A:51:A1:1C:40:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73D55C12DA9A11EFB407F745762E951A.roa
Signing time: Fri 24 Jan 2025 21:30:38 +0000
ROA not before: Fri 24 Jan 2025 21:30:34 +0000
ROA not after: Tue 25 Feb 2025 21:30:34 +0000
asID: 202656
IP address blocks: 45.199.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69812 (0x110b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:30:34 2025 GMT
Not After : Feb 25 21:30:34 2025 GMT
Subject: CN=6794067d-6888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:e1:b3:2c:bd:39:42:3a:2b:ec:c2:78:f1:
9a:66:d1:30:4d:07:ec:af:f7:67:7a:87:c4:67:08:
a3:28:24:69:90:cf:db:d0:88:a8:12:36:02:39:23:
bd:33:c1:b5:47:77:8c:96:84:55:37:d3:00:5f:a9:
ba:81:1a:f3:d9:6c:80:46:f3:7f:a7:93:1f:6a:3f:
c7:b2:41:5b:f0:42:78:51:c7:79:62:ad:0c:f1:82:
a5:0e:13:c9:d0:42:33:fe:13:61:bf:a7:61:f4:1e:
dd:20:26:41:1a:51:5f:96:2a:40:46:c5:83:80:be:
0c:00:01:4d:96:fb:d8:cb:59:25:7a:2b:c0:ce:7f:
8f:82:07:df:a4:cb:17:5d:70:16:da:4b:b5:5a:7c:
e8:ad:df:af:66:cc:e0:b1:79:5b:d2:cc:0e:dc:2c:
3b:d6:77:86:37:4b:66:e7:c9:ed:bf:81:2c:18:b8:
ab:cb:ff:6b:c0:a4:bc:ba:e6:32:9e:e6:d2:6b:89:
0a:2b:39:9a:00:3c:f6:3a:73:c2:ab:41:ac:c7:86:
d5:d4:fc:19:a9:42:f0:57:b8:7e:58:d9:65:cf:f5:
28:ff:14:64:db:b2:42:77:95:05:58:6a:38:bc:78:
fc:e2:83:6d:25:64:ec:78:cb:b2:1f:56:6e:61:1d:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:55:3B:11:0C:A9:B7:EF:82:7D:BD:12:8A:F1:6A:51:A1:1C:40:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73D55C12DA9A11EFB407F745762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.223.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4c:c5:14:53:c9:e3:f5:40:a3:4a:ce:72:76:e3:3d:22:a2:
56:c6:c7:73:54:08:9e:ee:c2:20:0d:b2:71:88:eb:2d:0e:98:
c6:0c:9e:65:28:ec:bf:c6:3d:a8:6f:b8:2f:d7:b1:34:17:ee:
ad:d0:92:8f:82:2e:15:49:05:72:82:85:eb:43:2a:ee:b7:33:
92:b0:d0:b9:a2:8e:f8:78:9e:14:37:65:cb:d7:4c:00:17:c8:
5e:87:83:d2:f2:ce:f3:98:a3:e8:07:d9:39:33:82:4a:df:39:
c0:92:a8:de:20:cf:62:48:06:01:67:e5:4c:e4:93:4b:4b:42:
c8:26:07:8b:a3:4f:47:8b:f3:8e:49:c3:b4:9c:cd:83:78:1a:
5b:c1:d3:60:14:d3:ea:74:0b:9c:e6:93:58:77:6d:b9:9d:23:
74:74:ad:59:a1:17:9e:e5:c4:97:a6:e6:01:06:4e:b1:8b:fb:
d9:2d:2d:9d:12:8f:24:9b:5d:8d:9f:ce:86:34:70:2d:40:bb:
e4:bd:41:e2:f0:25:4f:15:07:b8:22:df:b2:93:44:5c:b3:73:
bf:03:17:75:eb:02:73:18:e7:47:8a:4c:26:3d:62:20:3a:1a:
b5:c9:0f:d0:8e:b2:9a:45:2e:cb:97:e3:f2:ca:b3:14:4a:05:
d8:2c:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:37 2025 by rpki-client