Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4E81124D72411EFA47998BB762E951A.roa
File: F4E81124D72411EFA47998BB762E951A.roa (raw, json)
Hash identifier: Af5m9pIZfl6XPPkzH4hYV4RYeB8aQ4GGxqE7PGRvxzQ=
Subject key identifier: FF:95:E8:89:B5:A4:2A:38:E7:D1:E2:81:EA:2D:54:C4:0F:DD:4A:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4E81124D72411EFA47998BB762E951A.roa
Signing time: Mon 20 Jan 2025 11:52:00 +0000
ROA not before: Mon 20 Jan 2025 11:51:56 +0000
ROA not after: Sat 01 Feb 2025 11:51:56 +0000
asID: 202656
IP address blocks: 45.199.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68695 (0x10c57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 11:51:56 2025 GMT
Not After : Feb 1 11:51:56 2025 GMT
Subject: CN=678e38e0-ca51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:98:31:3a:90:71:78:41:51:be:f5:c5:b5:bf:
da:8f:ee:a6:74:cd:a3:a3:01:d4:71:8b:dd:6e:d9:
22:d8:61:d6:16:2a:19:d1:00:f1:b0:da:13:d2:ae:
6c:e3:67:3c:0a:e6:6a:a7:7c:de:bb:6f:51:9b:ef:
60:35:62:94:01:64:49:d0:fb:19:b2:82:72:a0:14:
8d:05:9f:db:57:5e:7a:f1:84:cc:1a:45:ac:a6:4c:
3d:51:13:93:c6:5e:84:d8:3b:8d:c6:b5:6d:0d:3f:
81:d2:73:06:b6:2f:0b:80:29:42:56:16:f5:7f:63:
9c:c6:2b:9e:f7:a6:5a:f6:d4:db:97:3b:72:cc:41:
03:cc:1c:61:7e:e5:19:a2:e6:cb:78:0b:27:55:16:
b1:70:51:97:55:b1:32:a5:43:e2:81:0c:c7:a1:57:
28:60:e7:7d:a2:17:3e:23:fc:53:31:78:5c:4c:5e:
9a:ec:98:49:3d:a7:28:d4:54:5e:c6:23:4f:9e:68:
8c:25:71:71:8e:f6:60:af:71:1c:2e:64:fc:98:7b:
33:4f:8a:d6:b3:4e:39:4d:ab:07:9b:d0:4b:c4:60:
ad:bf:e0:df:8c:bd:f9:c2:2a:87:d7:11:c8:18:c7:
f7:86:61:af:d5:b5:b1:3b:6a:bd:e9:52:eb:09:4f:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:95:E8:89:B5:A4:2A:38:E7:D1:E2:81:EA:2D:54:C4:0F:DD:4A:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4E81124D72411EFA47998BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.230.0/24
Signature Algorithm: sha256WithRSAEncryption
91:58:22:d3:2d:cd:06:ce:bd:b6:46:f6:a9:c2:0d:9b:ef:1d:
85:a2:86:4a:31:84:bb:3c:db:6e:39:d7:99:0c:10:30:46:9c:
fc:8d:94:90:36:6c:9d:56:e2:bf:86:c7:7c:ca:17:76:f9:b5:
d7:fa:64:77:61:84:24:5c:51:77:6b:3e:10:18:0c:5e:06:ce:
99:37:e6:1f:ee:e5:f6:c6:1e:94:2f:16:10:c7:e0:6c:44:7b:
f8:ce:19:ab:cb:d2:bf:e4:92:71:1c:37:58:2c:f2:3d:af:8a:
bb:30:83:0d:45:c8:a7:27:70:ab:af:cc:51:cb:1b:2b:30:85:
12:46:aa:76:61:df:46:e1:7c:bc:8c:1c:b2:21:ce:d3:c6:3d:
04:40:9a:1b:b2:a3:63:1a:4c:8d:c6:ce:a8:a8:54:5d:3e:f2:
aa:e6:5c:60:f3:b7:f1:b4:b8:88:8f:0f:55:7d:b7:82:1a:66:
47:af:a4:9a:f9:27:de:62:d5:c5:75:1c:50:fa:75:e4:1d:d9:
e4:26:44:54:0e:c3:e6:76:3d:30:64:bd:d4:53:b7:c8:73:e2:
ee:db:8b:5f:a0:0f:01:24:5a:79:2e:eb:00:c2:f8:e9:19:ec:
ca:ac:ab:6e:3c:07:44:f7:1a:e6:0c:44:b4:bb:35:62:95:1c:
46:4f:b6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:13:02 2025 by rpki-client