Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E05FE0B4D80B11EFA0EA9DA4762E951A.roa
File: E05FE0B4D80B11EFA0EA9DA4762E951A.roa (raw, json)
Hash identifier: 2UYYWrtcWEuVOx8vezd/7DrnvesGxbQ6oDZ7m9ajDYQ=
Subject key identifier: FE:1F:C1:F1:68:D9:EC:FB:25:DB:0D:F2:47:29:5E:B9:88:9E:95:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E44
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E05FE0B4D80B11EFA0EA9DA4762E951A.roa
Signing time: Tue 21 Jan 2025 15:24:59 +0000
ROA not before: Tue 21 Jan 2025 15:24:56 +0000
ROA not after: Sat 01 Feb 2025 15:24:56 +0000
asID: 44559
IP address blocks: 45.199.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69188 (0x10e44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 15:24:56 2025 GMT
Not After : Feb 1 15:24:56 2025 GMT
Subject: CN=678fbc4b-a71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:43:57:99:99:6b:9a:03:69:6c:6c:eb:9d:
ee:cb:83:43:b3:dc:b6:36:b0:f4:28:55:a1:6a:28:
25:b9:16:70:89:ed:40:ce:f8:32:51:29:76:74:6f:
d6:55:67:8f:cf:f1:21:17:36:43:2c:cb:1e:a5:04:
89:fd:3a:24:06:a8:24:82:95:80:32:65:e3:22:8a:
15:41:52:51:f2:1e:c3:a0:32:b8:fe:71:f6:4f:2a:
8b:21:45:ff:20:be:dc:4f:0b:cb:1a:f6:b0:06:ea:
c0:ff:7e:69:3c:e4:c8:56:e3:59:57:2d:73:c3:bd:
3b:b0:7c:95:f7:1a:ad:47:79:10:a0:78:d0:39:32:
b1:46:20:19:69:a6:60:84:76:f5:e4:45:96:a0:fb:
7d:0f:31:cd:28:87:06:35:90:4b:e7:cd:b3:3e:ef:
0f:6b:bc:03:75:1b:f7:0f:a1:8e:12:65:61:ad:a7:
86:a0:b3:ba:44:8c:5b:d3:f5:eb:3a:52:ef:bc:c2:
cb:ec:05:e2:62:98:ac:89:9f:13:e2:4e:e1:85:37:
ce:1d:47:85:7a:4f:da:b8:99:fe:77:2e:15:73:6d:
74:53:d5:c8:03:34:34:bd:52:6b:05:06:f1:00:aa:
9d:67:a2:72:02:02:cc:fc:95:4d:ff:10:90:38:27:
c6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1F:C1:F1:68:D9:EC:FB:25:DB:0D:F2:47:29:5E:B9:88:9E:95:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E05FE0B4D80B11EFA0EA9DA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.209.0/24
Signature Algorithm: sha256WithRSAEncryption
35:cd:2f:28:ee:dd:50:be:b6:75:56:21:56:54:18:01:74:99:
d9:61:55:db:d1:76:73:7c:b2:e6:7b:d5:23:8b:c1:6a:e1:fb:
4d:95:43:5a:11:78:97:24:c1:dd:09:b6:04:d8:bd:55:3b:7a:
d0:c7:fc:55:1f:69:ee:90:94:a2:b3:7a:99:fc:d4:ef:91:97:
76:6e:c6:17:4e:0b:ce:f2:29:cc:7d:b9:b4:d4:0c:2e:78:7f:
ae:af:86:0f:8c:95:50:24:b4:24:1a:88:06:70:d2:75:70:80:
f1:df:46:7b:2d:f3:fd:11:2e:fc:24:d1:b5:6d:2d:6e:b7:57:
cb:5e:db:0f:9a:bf:31:89:a4:0d:7e:72:3e:9d:c7:34:c6:c3:
9d:b5:cb:32:db:d7:6e:d1:dc:a0:da:39:0a:05:05:76:f9:50:
ba:d2:f5:00:6d:6d:67:ed:2b:f2:68:25:69:4e:cc:09:4f:5a:
cb:cf:fc:33:50:7c:b6:62:26:db:d1:c7:10:52:5f:d6:0d:85:
35:58:f9:38:ee:9c:f9:f8:a8:59:b0:ac:09:4a:3c:77:1d:17:
f2:ea:55:86:6d:f0:83:95:79:fc:5d:c3:fd:71:b5:22:57:a1:
0e:80:f9:40:7c:52:f1:a8:71:31:b2:1c:0b:39:ff:d8:66:05:
12:fd:9d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:55 2025 by rpki-client