Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0EFB29CDB0A11EF82FE2446762E951A.roa
File: D0EFB29CDB0A11EF82FE2446762E951A.roa (raw, json)
Hash identifier: yIrx/X4ehxA4S1ZORmlXailYGinwHj2S0YYw0EaBcOE=
Subject key identifier: 5F:DA:44:4A:57:F9:36:AD:56:AE:94:6D:14:89:2A:CD:00:36:B5:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011201
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0EFB29CDB0A11EF82FE2446762E951A.roa
Signing time: Sat 25 Jan 2025 10:54:57 +0000
ROA not before: Sat 25 Jan 2025 10:54:54 +0000
ROA not after: Sun 23 Feb 2025 10:54:54 +0000
asID: 44559
IP address blocks: 45.199.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70145 (0x11201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 10:54:54 2025 GMT
Not After : Feb 23 10:54:54 2025 GMT
Subject: CN=6794c301-0f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e5:3d:25:f4:e6:14:0b:b3:0f:50:57:c3:c0:
50:25:96:26:58:63:6c:e3:b6:17:19:64:64:49:eb:
df:2b:b8:28:a5:bc:31:c4:ab:98:ca:b6:3f:d9:3d:
05:d0:22:49:b5:b1:b9:a0:2f:21:7e:30:5e:de:94:
b3:29:d3:ec:66:b7:63:78:3a:00:54:34:1b:d7:1b:
c6:1c:54:e6:2e:d1:98:49:ed:8a:20:b6:fd:08:12:
b9:d0:ae:72:f0:cc:f6:1b:ca:42:52:02:a5:27:00:
67:7a:71:a0:09:d0:36:b4:68:8b:96:3c:aa:c6:2c:
c3:56:ba:1f:ef:7c:43:b5:50:37:a6:20:1d:44:3f:
4e:9a:cb:9c:cb:0c:d6:5a:6e:80:d4:38:87:49:98:
d0:85:8a:ce:d5:71:cb:7e:36:0c:9b:ca:c0:aa:f2:
0a:03:77:09:70:2c:9c:cb:6b:a3:b4:b2:22:fa:c4:
d6:a2:09:1c:f4:f9:70:4c:7e:f7:7c:9d:29:76:dd:
62:48:21:bf:78:36:d0:ed:58:91:c8:61:be:f6:10:
62:e6:5d:e1:ca:fb:36:70:8d:31:49:69:ba:dc:34:
48:cb:f9:67:57:f5:fd:31:31:b9:75:17:78:48:3b:
b5:f1:28:d7:0b:19:41:3f:be:ad:c5:de:3b:a7:4d:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DA:44:4A:57:F9:36:AD:56:AE:94:6D:14:89:2A:CD:00:36:B5:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0EFB29CDB0A11EF82FE2446762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.236.0/24
Signature Algorithm: sha256WithRSAEncryption
44:83:d4:1c:7e:4b:f3:c1:9f:a1:1b:da:6e:bd:75:24:9a:15:
fe:72:7f:40:41:7a:35:e2:23:ef:b3:69:91:50:9a:04:34:3d:
2a:d4:e8:19:4c:20:30:e7:99:d8:04:18:c3:c7:99:d8:d1:25:
1d:19:7c:32:77:22:cb:1b:0b:eb:4e:67:56:fb:71:a3:82:dd:
09:7f:b8:fb:31:a2:91:3e:d7:fd:3a:2d:e9:ab:56:32:fe:97:
d5:b4:d1:0a:39:6d:cf:01:94:54:29:42:34:76:df:9b:e7:46:
74:d3:b9:58:1d:16:9b:53:63:9a:d3:35:77:b5:ec:ee:39:34:
6e:c3:bf:a4:53:6a:30:be:44:aa:f7:77:dc:a9:4a:04:1d:86:
6f:5a:fb:11:b9:7b:1f:f2:0c:fe:ce:66:b9:ae:21:d4:9b:69:
a2:ae:46:25:6e:d1:76:31:82:b6:70:8c:9c:34:c7:dc:8f:cf:
e4:9b:d7:82:6c:97:36:c5:3c:b0:2a:b4:03:11:b9:12:0f:1c:
7a:2a:28:b0:f0:8d:80:04:8e:bf:38:95:44:a4:2a:72:7b:74:
39:09:be:00:b3:fc:f8:ce:1c:36:cb:35:bb:8b:f1:af:28:11:
a8:f3:84:6f:8d:31:93:68:4f:c0:c5:14:95:2a:2d:14:35:7a:
22:bb:ce:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:01:30 2025 by rpki-client