Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C0A7A44DA9C11EF83B4C353762E951A.roa
File: 9C0A7A44DA9C11EF83B4C353762E951A.roa (raw, json)
Hash identifier: PTer+Zo/dXFMMytjHbWZb35b1AkOEO3qoqH6twD/qQg=
Subject key identifier: 25:53:5F:78:77:7C:E2:07:6F:1A:24:E9:14:8E:81:33:23:00:B3:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C0A7A44DA9C11EF83B4C353762E951A.roa
Signing time: Fri 24 Jan 2025 21:46:04 +0000
ROA not before: Fri 24 Jan 2025 21:46:00 +0000
ROA not after: Tue 25 Feb 2025 21:46:00 +0000
asID: 202656
IP address blocks: 45.199.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69826 (0x110c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:46:00 2025 GMT
Not After : Feb 25 21:46:00 2025 GMT
Subject: CN=67940a1c-dbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:96:82:6e:94:a1:75:e8:d9:b5:37:16:ee:
11:14:e3:58:a5:a4:c5:89:ed:19:06:41:36:73:22:
b8:1d:0b:f6:d2:4e:46:95:7b:7c:64:eb:4d:4c:e3:
ce:9d:75:a3:32:a3:95:18:0f:33:a3:6c:b9:92:a1:
7e:94:44:3f:2e:9c:40:d4:cf:39:93:07:ab:b6:11:
71:2e:a6:3b:20:7c:3a:ca:d7:df:b4:eb:a8:84:f7:
d6:14:6c:08:fb:37:f5:83:ed:47:c3:2f:ab:d8:7e:
af:b9:3e:dd:27:54:b9:33:33:27:12:ff:95:3a:cb:
ed:41:a8:28:51:c0:c8:27:2b:ea:fa:31:e1:c1:86:
be:c9:c2:78:98:5a:3e:ee:28:68:48:bd:e7:a3:87:
83:cc:bd:82:05:5d:6f:2e:43:1d:41:fa:85:26:82:
d7:b6:3b:c8:aa:35:30:52:4e:08:db:bc:ec:e1:f9:
d0:3b:f6:1c:d6:c5:97:9b:e1:18:92:3e:3a:97:1e:
59:0c:e3:83:71:68:2d:43:81:c1:06:c3:7e:6d:e3:
7b:e3:e4:c0:fb:aa:f5:81:d0:20:58:73:a8:3a:c6:
ab:23:bc:38:46:73:b4:9e:31:97:8b:b8:b5:b8:25:
5c:24:46:4d:ec:e2:fa:95:4d:9d:aa:fa:31:ae:13:
56:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:53:5F:78:77:7C:E2:07:6F:1A:24:E9:14:8E:81:33:23:00:B3:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C0A7A44DA9C11EF83B4C353762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.228.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:9f:3f:4e:52:01:1f:f7:cc:45:ea:58:05:1a:c5:3e:42:6f:
86:c7:1e:cb:35:f4:2c:89:cf:11:19:15:2b:e7:c6:27:a9:62:
b5:01:8a:69:2e:ae:70:e0:bb:21:3e:eb:83:56:72:87:84:a7:
08:1e:fc:28:a1:67:f0:3f:bf:f0:3c:be:8c:81:d8:9d:ea:b7:
cc:f4:9c:e5:94:26:51:02:4b:83:1b:bf:13:ae:10:90:8b:6e:
2d:ed:cf:32:d8:8c:7c:a6:f5:5b:23:b7:61:55:51:ad:c5:8c:
e7:37:e3:a9:c7:fc:52:83:ee:26:da:b5:37:16:c6:45:96:b2:
f3:b7:61:14:70:9a:9e:eb:a7:54:13:d1:f1:16:d2:a1:d2:02:
0d:56:68:99:9c:a6:ab:69:67:ae:ef:7a:a7:b8:09:29:73:92:
58:2a:56:3f:62:a3:d1:08:5c:7a:05:b8:3c:3d:ca:41:1d:e8:
c7:30:5a:ba:e9:d1:d7:77:57:0c:d2:c2:c9:9c:03:84:cb:37:
bf:8d:c3:a4:f4:cd:76:86:21:7f:8e:50:33:28:47:7e:d3:3d:
ca:ca:70:90:3b:84:41:45:c5:a8:d0:42:d9:6b:a1:14:d9:90:
6e:cb:39:18:ab:b1:34:0a:17:1b:7a:de:62:7c:4e:25:c3:0e:
03:0f:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:20 2025 by rpki-client