Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7D6CC20DA9C11EF82B6A157762E951A.roa
File: E7D6CC20DA9C11EF82B6A157762E951A.roa (raw, json)
Hash identifier: ZHBwTf9UZUHFRuFpH/Xkz8H/JdiOPFeI1uudoVSFp/0=
Subject key identifier: C4:7F:2C:E0:67:84:B5:76:41:BF:D1:E4:4B:3E:7F:C8:87:7E:B7:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7D6CC20DA9C11EF82B6A157762E951A.roa
Signing time: Fri 24 Jan 2025 21:48:11 +0000
ROA not before: Fri 24 Jan 2025 21:48:07 +0000
ROA not after: Tue 25 Feb 2025 21:48:07 +0000
asID: 202656
IP address blocks: 45.199.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69828 (0x110c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:48:07 2025 GMT
Not After : Feb 25 21:48:07 2025 GMT
Subject: CN=67940a9b-7bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:e4:54:4e:26:a2:2f:0d:c8:71:9e:6c:a9:
91:98:90:45:d3:db:4c:9a:88:73:3c:f2:9b:3a:4a:
53:aa:a5:4d:42:49:a9:db:a3:66:c1:da:c8:e1:8f:
6a:38:47:5e:2b:27:ea:65:76:bb:2c:b0:4c:c3:6f:
1d:75:1a:f6:dc:fb:7b:97:7d:fc:44:d0:8b:bf:02:
4e:f6:db:83:03:2b:2b:61:55:be:0f:13:7c:7f:bb:
1b:48:a5:ad:b9:bd:ca:21:bb:17:ca:e3:f5:06:2d:
72:c0:41:7c:85:59:ae:82:76:27:b5:ce:ba:0b:c1:
97:8d:90:7b:14:ae:4f:36:78:45:67:1a:02:82:29:
4b:7e:08:4e:b3:c3:43:dd:05:2a:03:d3:e2:91:22:
58:c6:c3:e1:bf:61:88:09:0a:af:8f:8c:a4:d4:52:
7f:99:38:b4:bd:e0:00:0e:48:0b:57:aa:00:31:ca:
30:f1:28:21:39:30:b0:50:dc:d6:d6:3d:9f:cf:7b:
36:6d:cf:b6:07:10:0d:7f:95:4a:fa:3c:ca:ec:20:
b8:17:60:b4:8c:48:b7:ca:62:75:85:16:5a:8e:a6:
d9:8a:f9:dc:ef:f5:0d:01:46:6e:84:7b:a9:b3:a7:
3f:87:f2:8c:c7:6f:7e:01:92:3e:19:25:9e:15:ad:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7F:2C:E0:67:84:B5:76:41:BF:D1:E4:4B:3E:7F:C8:87:7E:B7:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7D6CC20DA9C11EF82B6A157762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a5:4e:c4:86:15:a9:8d:62:4e:d7:d0:83:a6:78:d4:ff:03:
bb:0e:39:0e:15:a6:86:52:87:4c:18:5a:bf:09:4b:11:3f:a8:
d8:25:9e:72:d1:6b:ce:39:99:84:c8:b1:63:75:15:18:e7:2e:
1c:ee:2d:b3:85:01:c8:dc:c5:8e:f1:09:2f:52:1a:83:80:57:
c0:db:8c:91:38:91:6f:dd:df:d6:01:cd:ca:5d:02:96:98:be:
a5:8f:5d:a8:9b:87:32:fc:2a:9b:67:cb:22:6e:6c:92:38:48:
57:eb:85:9d:35:bf:cd:0c:cb:cd:e0:41:9e:fc:2b:8e:6a:d2:
c3:b1:b7:73:5e:64:20:3d:d8:54:df:1a:04:27:6e:3e:cd:84:
bf:b9:46:d4:99:11:26:4a:2a:06:e6:e4:d6:18:2c:b6:9d:f1:
e3:23:ce:d1:2f:be:98:6e:cc:cd:57:35:3c:72:3b:78:3d:40:
de:67:32:de:e5:f5:0f:f3:47:61:b2:07:cd:d2:5d:1c:39:7d:
9b:91:8b:11:33:ed:f7:1f:52:b8:3d:d4:69:bb:15:5f:5c:61:
67:a2:1b:e7:58:6c:46:d3:63:80:1c:fa:e9:91:4a:4c:08:7d:
52:11:f6:3e:a0:46:2c:a0:27:65:17:d5:a7:91:a8:ed:05:67:
00:bf:fa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:01 2025 by rpki-client