Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6CCBF64DA9611EFB36D18AD762E951A.roa
File: B6CCBF64DA9611EFB36D18AD762E951A.roa (raw, json)
Hash identifier: Q6+pAzuqeCJlRgkUmc5r0P0xhRVVEgbR2XJtyEGT8ZI=
Subject key identifier: 13:BC:76:E3:17:A2:03:DE:60:48:34:B7:00:A7:81:23:20:7D:63:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01109C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6CCBF64DA9611EFB36D18AD762E951A.roa
Signing time: Fri 24 Jan 2025 21:03:52 +0000
ROA not before: Fri 24 Jan 2025 21:03:48 +0000
ROA not after: Tue 25 Feb 2025 21:03:48 +0000
asID: 202656
IP address blocks: 45.199.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69788 (0x1109c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:03:48 2025 GMT
Not After : Feb 25 21:03:48 2025 GMT
Subject: CN=67940038-fa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:56:7e:46:67:23:62:d8:8a:09:67:5b:7a:
19:d5:2c:bf:0f:ec:53:38:e2:a6:99:e1:b5:c1:87:
d6:bb:9f:3b:ec:fa:ba:0c:30:2c:dd:ec:52:91:5d:
b3:63:54:74:47:97:2a:00:76:65:90:c5:52:68:54:
d3:2b:8e:74:ee:94:35:c4:d8:d0:5a:59:2b:ca:19:
bf:08:3f:27:12:d2:18:8b:eb:c3:29:99:1e:bc:7f:
66:f4:32:ef:83:e3:57:e7:d6:2a:ba:bd:07:c7:de:
7b:d1:5d:94:e9:05:ae:74:af:8e:d6:d9:40:e7:1f:
6e:4e:c2:14:04:ca:a1:92:24:ee:31:88:ad:4c:7e:
72:d5:81:cc:67:93:64:8c:0b:89:0e:03:34:f2:10:
2f:41:9a:a3:48:46:82:cc:5b:6c:a4:37:37:cd:72:
a7:50:67:49:cb:b0:e4:89:41:e3:a5:2b:29:80:60:
8a:bb:ec:d8:61:f0:b4:c2:33:23:ee:e0:cc:28:1e:
17:36:ad:0e:eb:85:a3:20:a3:cb:29:95:ae:81:b4:
f8:17:ad:ec:e0:76:33:e2:fe:e4:bb:32:d2:f4:9b:
6a:1c:49:7d:bd:35:cb:36:0e:4a:ca:b8:36:6c:e9:
a3:75:c2:9b:fd:be:23:45:37:23:a5:a5:cb:63:3a:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BC:76:E3:17:A2:03:DE:60:48:34:B7:00:A7:81:23:20:7D:63:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6CCBF64DA9611EFB36D18AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.202.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e1:73:04:2d:28:5b:a7:69:8d:9e:7a:33:c4:2e:44:84:cd:
9d:83:7e:15:c8:c5:82:b9:ff:e6:bb:81:2f:42:fc:bb:96:d7:
ce:f9:9e:0d:db:22:76:ed:56:a8:8e:38:a3:e8:48:41:84:c9:
87:77:d7:d1:46:d6:a2:ec:6c:22:d8:7c:57:f6:21:72:15:74:
dd:d0:14:d6:f9:e0:15:85:51:a0:21:cf:56:9c:6d:93:d9:bf:
4c:aa:c1:a4:e5:68:46:96:fd:db:55:90:18:66:51:e8:e8:2c:
19:32:41:f1:0e:db:db:ac:43:00:8e:b6:61:ef:4c:15:29:06:
87:7c:7f:ee:53:bd:c9:c4:8d:14:d9:2b:5e:e9:4e:82:40:e5:
e7:08:46:ea:35:90:a3:35:04:2f:58:21:c1:21:4f:fc:e7:f2:
17:27:65:f7:83:e2:d1:bd:03:ac:6c:20:aa:e9:7c:00:96:5e:
db:1e:f7:f7:18:f9:6c:2f:16:dd:73:23:b7:91:78:53:58:14:
f0:75:f7:9c:ff:14:07:e3:47:1d:2d:cb:b8:cd:8f:7b:9d:06:
b7:83:df:e4:b9:70:be:3a:bb:ee:5c:50:fc:bb:c5:d4:01:2c:
ed:b6:d1:04:22:91:52:91:8b:86:02:a9:6c:72:06:c1:02:38:
6a:1f:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:47 2025 by rpki-client