Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC107AD6D71F11EFB711789C762E951A.roa
File: FC107AD6D71F11EFB711789C762E951A.roa (raw, json)
Hash identifier: 53m9n/ThZ8JsHHnua4P6jhEVKB623nN5auTuQHTY5ek=
Subject key identifier: 06:35:81:3D:9B:65:5B:63:F0:A2:40:7C:B8:13:2B:29:12:72:8C:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C35
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC107AD6D71F11EFB711789C762E951A.roa
Signing time: Mon 20 Jan 2025 11:16:24 +0000
ROA not before: Mon 20 Jan 2025 11:16:21 +0000
ROA not after: Sat 01 Feb 2025 11:16:21 +0000
asID: 44559
IP address blocks: 45.199.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68661 (0x10c35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 11:16:21 2025 GMT
Not After : Feb 1 11:16:21 2025 GMT
Subject: CN=678e3088-8dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5c:8c:99:1a:90:2a:fa:6b:02:ea:97:3c:fc:
8e:fa:83:59:c0:27:9c:bb:cc:b6:65:f8:e4:2c:8b:
96:fa:6c:c3:15:a3:a9:9d:ae:d1:3a:09:12:39:eb:
d4:a6:c8:d3:6c:d4:6f:14:50:3f:b9:c2:d4:c2:14:
c3:ce:9f:39:d8:65:40:5b:07:4c:7f:01:ae:02:43:
0b:97:40:b8:fc:36:c4:77:5a:1a:96:9c:94:3c:7f:
b9:70:2d:8a:0b:bc:2a:4f:58:91:77:c5:fc:81:6d:
87:ca:b0:70:9e:30:a6:bd:50:36:d2:e1:a1:5b:2d:
8c:80:bc:c5:e3:16:f9:5f:99:cd:67:8f:3f:13:df:
c8:ff:ba:01:00:ef:4b:ec:56:f2:12:f0:b5:65:b4:
97:f9:0b:ec:73:53:16:bb:d6:07:a3:db:f8:15:85:
ab:7e:28:0f:ae:43:16:8d:9c:f7:e5:02:6b:d7:5e:
00:1e:ee:cb:90:ca:ff:16:4a:be:ff:0f:c3:51:c4:
5d:c7:91:c4:55:8a:0b:95:9a:4c:89:ad:99:11:60:
a4:83:4b:6b:a5:87:5f:a3:63:49:7f:ce:e2:de:4e:
28:a7:78:67:bf:12:56:20:c3:7e:f9:7a:2b:a5:6c:
c2:4f:6a:55:94:1f:28:22:cc:b3:1a:15:49:60:4b:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:35:81:3D:9B:65:5B:63:F0:A2:40:7C:B8:13:2B:29:12:72:8C:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC107AD6D71F11EFB711789C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.239.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2c:13:9f:d1:91:5f:f2:e4:46:38:6a:e7:0d:12:7d:8e:5a:
92:21:36:08:ca:74:2e:f3:61:88:79:1d:e8:bb:6e:b0:1b:43:
4e:0c:7f:27:44:95:97:34:47:c5:da:c4:f5:ea:3d:7a:6b:25:
b6:2f:3d:b0:fa:bc:74:67:60:06:13:32:52:ee:f6:76:ee:31:
62:68:e1:33:38:4a:1d:68:44:4b:f2:c3:e9:a0:cc:a8:13:cb:
d1:d1:27:d8:83:31:8c:aa:90:48:c0:6f:3c:73:1e:83:5c:c1:
d3:3b:47:ab:7a:c8:ed:e2:09:4e:b8:42:23:67:ae:da:78:e3:
38:e7:32:fa:c4:73:b7:36:c2:a2:19:de:5b:30:13:96:df:be:
b5:ac:ba:4e:8f:68:3c:be:81:37:10:7a:e3:89:7a:9a:e6:e5:
20:76:4d:cd:54:a4:75:43:5c:7e:ac:a4:7a:c1:e4:ff:4f:fb:
ff:26:e7:f6:3c:26:78:e2:a1:11:ab:e8:06:63:11:6c:46:01:
74:bc:a0:d3:19:f2:af:31:ce:91:a7:82:88:16:18:a5:5a:58:
6b:fa:8f:da:1c:c9:0c:d2:1b:09:2f:56:e4:85:19:8b:7d:18:
96:f8:a7:6e:37:94:47:91:02:6a:7d:61:ee:79:6e:79:5f:96:
e4:b5:ff:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:37 2025 by rpki-client