Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8981784ADA9D11EFBB5FD95B762E951A.roa
File: 8981784ADA9D11EFBB5FD95B762E951A.roa (raw, json)
Hash identifier: dpOMBaQ80Kr27L+KKHZLRW2Ip0nQfGCztMrkaqWgZos=
Subject key identifier: 99:78:A5:62:42:C6:56:45:18:F4:85:30:FB:32:E0:4B:D6:90:18:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8981784ADA9D11EFBB5FD95B762E951A.roa
Signing time: Fri 24 Jan 2025 21:52:42 +0000
ROA not before: Fri 24 Jan 2025 21:52:39 +0000
ROA not after: Tue 25 Feb 2025 21:52:39 +0000
asID: 202656
IP address blocks: 45.199.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69832 (0x110c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:52:39 2025 GMT
Not After : Feb 25 21:52:39 2025 GMT
Subject: CN=67940baa-9609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:a3:d5:a1:c4:09:f2:a1:ba:4f:7e:dd:84:
5e:d8:65:e0:ce:e5:24:a4:14:7f:90:2e:74:f2:07:
44:45:fc:d1:c3:ca:c5:bc:bc:d6:73:5b:43:0b:98:
ce:bf:f9:f9:72:36:04:4c:b6:c0:aa:33:fb:f3:e8:
98:38:56:a4:ea:30:e2:32:3a:fb:d5:28:36:65:5f:
15:f6:02:20:73:6e:f8:09:cd:53:10:15:cd:1c:44:
31:5c:73:f3:0b:ac:7e:17:bb:90:15:6b:cd:74:3e:
11:b4:14:d1:91:e4:5a:f8:18:ea:e2:4b:05:85:56:
4b:4c:03:4a:1a:6f:18:04:79:51:69:77:01:7e:bd:
cc:57:ee:e8:d4:fb:f8:bb:96:14:ff:4c:49:ee:ed:
92:e9:fe:87:5a:2b:f2:b1:73:a4:36:4e:af:a6:38:
ba:dc:75:98:2f:56:3c:cc:d8:47:aa:32:42:c5:9c:
31:57:f6:c4:ce:e8:c1:92:cb:04:66:55:97:4e:61:
52:9f:e2:e2:b1:a9:54:67:20:1a:c5:ea:41:cb:25:
b5:e8:0a:17:7b:41:c9:b0:6d:f9:1e:8a:81:b7:58:
a4:53:43:e1:e2:a9:8e:78:92:63:39:1f:de:a5:4a:
37:c3:3b:8a:c6:c0:b9:ff:65:4f:fc:fc:f0:ee:fa:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:78:A5:62:42:C6:56:45:18:F4:85:30:FB:32:E0:4B:D6:90:18:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8981784ADA9D11EFBB5FD95B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:17:9d:04:9b:0d:d0:2c:6f:c1:62:c0:1c:83:90:3f:49:2e:
d7:31:df:21:97:24:0b:ca:b6:d9:ba:20:4f:51:4d:39:73:f1:
4a:8e:82:1a:9a:fb:cd:b7:c3:3a:22:4f:e0:2b:82:e5:12:47:
07:b3:3d:e1:af:26:1d:ed:1e:92:a9:11:17:c6:08:79:3d:f4:
fd:80:3d:72:67:45:38:08:ec:e3:d8:50:81:88:a7:1f:5c:a7:
fe:c7:05:6b:77:3b:56:94:57:21:ec:83:22:3b:48:0e:ca:79:
af:1c:ba:a7:ad:2e:30:2f:25:54:fa:81:be:6c:64:b6:ef:a4:
9a:39:d5:19:34:28:66:12:c5:df:f4:4a:ac:13:a6:ad:27:c7:
c4:35:10:31:91:18:82:a0:f5:7b:71:47:72:60:29:1c:ed:d7:
c2:fc:aa:e6:26:ee:71:92:f0:ac:f9:f0:47:a4:ff:10:1d:6b:
9e:3c:79:11:bc:14:ae:8d:01:3e:cd:c0:56:8c:4e:e2:b0:59:
c4:57:1e:fc:dd:10:1b:20:5d:ce:32:4f:a2:26:70:4a:8a:59:
ea:8f:d3:9c:23:71:a2:f6:40:58:ee:12:6d:2b:b0:ee:05:13:
ad:05:6f:76:b7:25:0f:f7:13:30:fb:49:7e:1f:cf:24:22:51:
22:b0:bd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:57:41 2025 by rpki-client