Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0D2190CD80911EF9C9BBF97762E951A.roa
File: D0D2190CD80911EF9C9BBF97762E951A.roa (raw, json)
Hash identifier: uyNioElp0xddCaD3QSGUawiHaYGiZ6tuRBH643vZWsU=
Subject key identifier: EB:9E:8B:BD:95:57:35:E0:FF:69:FC:FD:A1:F6:A3:06:4B:D9:7E:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0D2190CD80911EF9C9BBF97762E951A.roa
Signing time: Tue 21 Jan 2025 15:10:14 +0000
ROA not before: Tue 21 Jan 2025 15:10:10 +0000
ROA not after: Sat 01 Feb 2025 15:10:10 +0000
asID: 44559
IP address blocks: 45.199.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69174 (0x10e36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 15:10:10 2025 GMT
Not After : Feb 1 15:10:10 2025 GMT
Subject: CN=678fb8d6-0bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:02:fb:50:2f:02:bb:1e:13:a0:ab:28:3c:1a:
9a:ef:40:f2:fe:50:f7:f9:ae:67:c2:06:8c:e4:34:
bf:a8:bd:55:42:b0:24:72:35:72:e7:2b:b7:9c:ea:
4c:d6:a0:b1:0c:31:e2:3a:8c:1a:7e:c3:bc:b8:a5:
b7:91:55:7d:be:dc:71:57:7b:06:dc:fc:7a:da:73:
22:59:b6:7a:44:95:55:5a:51:3f:69:f6:be:61:50:
96:8c:df:b3:cc:1d:c1:48:56:26:69:70:2d:c2:11:
2a:3a:f1:d3:07:a7:5e:f8:20:d7:ba:52:b9:70:af:
bd:11:c5:20:d5:6e:dd:5d:8a:92:0d:a8:54:62:fd:
61:42:34:8c:ff:f3:b1:2a:fd:45:bb:4c:3a:6a:16:
e6:57:92:85:1f:42:e9:b1:f6:03:2a:74:76:e5:50:
a6:cf:0e:9f:bf:60:15:c3:e0:6b:82:f9:61:8e:3f:
59:86:17:18:87:e9:2a:7a:3b:be:99:1a:e8:b6:53:
32:02:9d:33:80:da:2d:37:ea:0b:52:99:1c:bb:46:
69:a3:33:65:22:8e:b3:92:9b:d9:6f:44:90:2e:6e:
20:72:7b:37:ea:26:e4:94:cc:8f:f0:13:0b:72:f5:
78:88:50:48:74:f2:e6:a9:bc:f1:18:fb:89:83:dd:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9E:8B:BD:95:57:35:E0:FF:69:FC:FD:A1:F6:A3:06:4B:D9:7E:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0D2190CD80911EF9C9BBF97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.219.0/24
Signature Algorithm: sha256WithRSAEncryption
71:50:45:45:89:e7:1e:6e:d0:bc:9e:f5:c4:ef:2d:d7:9f:05:
b5:1b:b9:76:a5:63:ce:07:fe:0f:e3:be:fc:ca:ff:0c:52:b1:
b6:7e:c5:72:4e:7a:c9:28:11:05:22:c5:2c:66:7b:86:65:ce:
c8:34:f4:de:9e:38:5c:ae:2b:ad:9f:b6:66:73:37:59:6f:02:
0b:2b:ef:94:7a:ef:ab:50:dd:e1:89:5e:43:65:e1:eb:06:74:
31:fb:a4:1e:a1:e8:a6:9d:4a:b3:cd:13:4e:35:ea:91:bc:22:
ec:e7:81:2c:79:7d:07:e2:8b:cc:ce:20:78:d3:26:c9:a8:9b:
73:35:33:77:3c:f3:b9:70:ed:ef:84:08:6f:2b:3b:5c:9c:f6:
a1:b8:a7:9f:34:be:91:de:5d:77:ba:0d:ac:fc:36:33:18:25:
20:d2:1b:82:59:6a:51:f7:40:04:d0:4e:66:1d:44:ba:15:57:
c3:6e:1d:fc:a0:90:7e:d5:62:d8:6d:74:e4:e5:49:31:ce:7e:
98:33:34:df:62:a8:50:32:77:22:a4:95:2a:03:d4:6f:18:14:
02:11:a5:e3:5f:1b:79:bb:a3:82:3a:eb:1c:ee:c1:91:34:ba:
b6:27:55:2f:f1:56:36:3f:c8:45:a1:09:7a:6f:9d:fd:6b:95:
ac:4a:46:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:23:55 2025 by rpki-client