Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E19FA7FEDA9811EF9705BABA762E951A.roa
File: E19FA7FEDA9811EF9705BABA762E951A.roa (raw, json)
Hash identifier: gkYFVYjqqZGtXmL1MuzZ5J3el48WFv0ukxPLWBlPFyE=
Subject key identifier: 2C:16:19:20:D8:DB:92:F5:B6:0F:41:96:21:34:F8:28:01:69:AE:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E19FA7FEDA9811EF9705BABA762E951A.roa
Signing time: Fri 24 Jan 2025 21:19:23 +0000
ROA not before: Fri 24 Jan 2025 21:19:19 +0000
ROA not after: Tue 25 Feb 2025 21:19:19 +0000
asID: 202656
IP address blocks: 45.199.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69802 (0x110aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:19:19 2025 GMT
Not After : Feb 25 21:19:19 2025 GMT
Subject: CN=679403db-d494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:5a:a9:a1:62:52:f4:9e:8f:24:4d:e1:0b:
dc:90:10:1e:73:b0:85:43:d4:48:47:13:f5:fa:3a:
14:ee:7d:67:5a:d9:9a:56:c5:5e:85:0e:80:81:74:
4d:7d:71:3f:df:4a:7c:a5:77:95:cd:04:a4:71:c7:
db:a5:16:24:fa:d2:ab:b7:21:a3:67:4d:b6:4f:04:
ee:b7:00:23:4c:55:35:0b:12:c7:1d:be:01:7c:06:
c6:4e:85:43:8e:a1:3a:bb:2a:e4:b5:02:7f:9c:bc:
a3:90:b9:2d:d2:ae:ac:33:e5:26:f0:b5:d4:33:e2:
af:0d:06:50:a4:02:c6:31:05:70:dd:37:79:9c:6f:
b0:50:a4:fa:f6:6b:7f:98:80:ed:0b:68:d2:42:b5:
20:a4:0e:7d:89:07:18:05:61:87:a1:d8:aa:9e:93:
7b:7a:ea:8a:5c:69:b0:cc:41:34:2f:3a:17:c5:7d:
25:98:cc:14:46:e3:4c:9d:00:c5:be:80:28:01:a6:
04:cb:ab:58:a5:5e:4c:3c:a4:96:92:eb:b7:7c:5e:
12:0e:28:96:f3:04:32:e7:b2:3d:6d:31:21:07:f1:
c7:c6:e2:3f:30:57:6d:60:be:a7:5a:f1:17:62:72:
b6:20:d4:e6:45:1d:d8:e1:31:f2:56:e7:da:bc:dc:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:16:19:20:D8:DB:92:F5:B6:0F:41:96:21:34:F8:28:01:69:AE:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E19FA7FEDA9811EF9705BABA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.208.0/24
Signature Algorithm: sha256WithRSAEncryption
04:91:75:05:32:f6:a9:3b:af:0c:fb:c1:34:08:46:74:e7:99:
2c:c1:50:af:fd:89:04:4c:d4:be:90:a4:b7:36:26:71:e0:5a:
12:76:4f:b6:50:a3:0b:7b:fb:bf:d1:bd:1b:69:2d:c7:5d:b1:
be:23:fb:5d:f7:ee:ce:e2:37:3f:62:9f:44:8b:3c:50:f2:5e:
9a:32:d3:9c:a7:9f:ba:b7:e4:31:da:53:e2:6a:06:99:f2:68:
31:dc:72:6b:c7:07:ed:c4:2c:c9:2e:53:8b:3e:d8:b2:01:b7:
96:fe:f7:c1:6c:65:d2:8c:67:1f:92:8d:d3:2f:7f:ae:a6:f9:
1a:5c:14:85:e8:81:12:73:d5:a4:cc:41:aa:95:4f:b5:d6:57:
8b:1e:f6:d1:d8:95:ed:7c:fa:d1:3b:76:d4:f6:5f:4b:60:57:
55:7e:52:65:60:e1:92:09:3a:83:b5:ac:d4:f7:23:6a:12:97:
6b:f3:cf:89:11:d1:49:89:7f:2a:4c:f9:88:45:af:ed:11:5c:
dc:aa:01:27:4b:3a:9e:33:6a:27:cb:b6:b5:09:25:ce:37:31:
80:3b:3f:bd:00:9f:a9:2a:c3:fa:14:8e:59:38:22:25:68:00:
e2:45:a2:0c:22:84:96:77:b4:90:b2:0e:bf:07:28:14:a6:b8:
57:06:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:46:43 2025 by rpki-client