Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6A36226DA9311EFB7BBF29A762E951A.roa
File: F6A36226DA9311EFB7BBF29A762E951A.roa (raw, json)
Hash identifier: wGA5p79PLfK1G3kuMpI8tQGrjt9hz9BlyMCyNKIA8jI=
Subject key identifier: 08:F0:2B:4B:DD:36:58:04:86:A8:8A:F9:9B:F4:C1:6B:66:46:E6:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01108A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6A36226DA9311EFB7BBF29A762E951A.roa
Signing time: Fri 24 Jan 2025 20:44:11 +0000
ROA not before: Fri 24 Jan 2025 20:44:07 +0000
ROA not after: Tue 25 Feb 2025 20:44:07 +0000
asID: 202656
IP address blocks: 45.199.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69770 (0x1108a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:44:07 2025 GMT
Not After : Feb 25 20:44:07 2025 GMT
Subject: CN=6793fb9a-1c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:ef:f2:ed:68:d7:dc:f7:f9:ad:aa:d8:c0:
9f:a1:31:b9:93:e5:cf:bb:b1:d2:6f:4d:99:65:0f:
44:b9:15:df:1b:2b:fd:2e:59:7d:4f:b3:e6:63:bd:
d7:c7:45:0f:22:15:40:62:89:4a:b8:30:a3:35:da:
f5:ae:b2:70:d8:1d:5b:f0:bb:ff:b1:c3:02:ef:57:
7e:c7:d3:76:ad:a2:c3:26:95:98:0e:5c:c9:a0:34:
fa:7d:46:ce:77:b5:ef:72:38:cd:3b:7e:1d:60:08:
25:5f:ef:91:18:42:f6:27:8a:8d:83:4c:1c:b5:a7:
38:75:58:e5:13:a4:2b:37:95:0b:3e:ce:23:49:96:
96:ab:b8:6b:8c:70:ef:31:dd:5c:48:42:17:e8:3b:
ed:2e:69:db:27:98:0f:00:24:1e:53:f6:04:ab:85:
72:30:c2:bc:40:3c:76:61:b2:6c:d9:d1:73:67:ac:
2a:0e:55:86:ba:59:df:7f:d8:d9:d3:e8:41:a2:a5:
85:f8:7d:b4:94:0e:0b:53:0c:2d:5f:7e:25:de:eb:
ad:b7:ad:e7:9b:2d:20:87:22:f2:5a:a8:5f:76:db:
f3:ae:66:04:9d:c8:07:3a:a3:e4:93:54:32:a5:ed:
a0:d0:58:29:cb:cc:d0:bb:7d:f2:c2:a8:8f:d5:97:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F0:2B:4B:DD:36:58:04:86:A8:8A:F9:9B:F4:C1:6B:66:46:E6:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6A36226DA9311EFB7BBF29A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.193.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5f:5c:8d:07:df:2e:0d:88:16:4f:27:ab:15:01:34:3e:a1:
15:4b:2d:1e:91:56:53:b7:1b:55:5a:d0:a7:3b:01:fa:7c:ac:
12:57:57:fa:9f:d6:fb:19:ed:2f:fa:42:ea:a0:2e:51:87:ce:
fe:94:78:d0:1d:50:9a:80:1f:39:af:26:0a:dd:e0:f0:08:69:
e8:ed:df:80:5a:3a:60:de:be:5c:66:72:60:3a:5e:fa:40:42:
51:d8:94:a6:46:c4:3b:3a:47:da:fc:dd:21:eb:12:2b:3e:61:
03:68:d7:d2:83:63:fe:05:c3:62:c2:95:f6:4a:47:b1:84:13:
a4:9c:7f:95:a7:1c:53:4d:26:8e:58:ce:e6:a5:0c:ce:b8:e6:
d6:30:12:8e:5f:1d:f6:04:a7:b2:1b:4c:1d:fe:bf:43:6b:ad:
1b:a5:99:80:d3:81:33:d3:aa:44:6f:de:66:69:fd:0a:5c:54:
80:13:fd:cb:cd:d0:41:fe:fb:18:ba:85:2c:91:89:69:91:5a:
95:ec:2e:32:bd:8b:8f:c9:c7:6d:7c:7e:6d:55:8f:1c:ab:73:
89:5d:e0:f6:53:f4:04:63:94:36:f4:d1:0c:2a:16:d4:47:6e:
46:22:76:41:48:67:25:88:87:68:21:6f:eb:70:7b:7d:00:40:
e9:29:33:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:18 2025 by rpki-client