Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21711C62E47311EFB9A5DABD762E951A.roa
File: 21711C62E47311EFB9A5DABD762E951A.roa (raw, json)
Hash identifier: 6hiDfg/lX6jjJiu/NIMgNhSS4NqWDSie1UjY2RVUgDk=
Subject key identifier: E4:76:28:4F:54:4A:2D:EA:60:74:1F:37:3B:49:18:2C:1D:A4:92:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011B9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21711C62E47311EFB9A5DABD762E951A.roa
Signing time: Thu 06 Feb 2025 10:14:20 +0000
ROA not before: Thu 06 Feb 2025 10:14:17 +0000
ROA not after: Thu 02 Oct 2025 10:14:17 +0000
asID: 399823
IP address blocks: 45.199.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72602 (0x11b9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 6 10:14:17 2025 GMT
Not After : Oct 2 10:14:17 2025 GMT
Subject: CN=67a48b7c-ebf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:72:e6:eb:31:34:39:73:98:2b:3d:f3:b3:
30:00:e6:20:3c:c7:03:38:d9:96:a3:f3:a7:65:b1:
2e:09:e0:c4:e7:0c:55:42:13:d8:35:03:05:5d:6a:
ff:b0:3d:9c:19:6b:e1:e7:5b:b8:25:a0:ba:b6:73:
32:07:6b:eb:72:47:b7:8e:22:1a:9d:b7:48:c4:e4:
5a:5d:05:19:a0:33:33:4b:5b:71:be:60:56:85:d3:
c5:b4:f9:80:e3:4b:c0:69:62:fd:1c:36:06:02:fe:
53:c6:fe:97:5f:20:44:f4:45:4f:6d:8b:70:27:09:
e7:1a:d0:54:e8:b6:2f:3d:5b:a9:fd:38:f8:bc:a8:
cc:a1:cb:c5:10:4e:e7:b6:65:11:62:1e:05:10:8e:
7b:5d:c1:0f:02:38:99:89:b1:7b:fc:19:e1:c1:c1:
0f:7e:82:65:fd:ab:23:c5:19:41:4c:2c:81:cf:19:
96:c3:3f:89:84:f7:0c:23:9c:ed:99:43:07:14:88:
2f:c6:fe:29:cb:37:da:5a:a5:1f:f8:ad:a8:13:c3:
25:3f:6a:a0:c3:db:7e:66:a1:37:8e:b7:d0:6a:ec:
d2:e3:32:e5:42:74:4f:0b:66:cc:57:a2:04:d7:7c:
b8:4c:9c:87:eb:db:58:f9:e7:a8:35:5a:3a:9b:45:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:76:28:4F:54:4A:2D:EA:60:74:1F:37:3B:49:18:2C:1D:A4:92:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21711C62E47311EFB9A5DABD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.164.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f4:cf:ae:8b:28:79:1e:c5:da:d5:8b:54:1f:ab:20:6e:89:
fb:dc:a3:a1:15:47:04:bf:b4:f4:5e:51:02:57:a1:9b:7d:de:
bf:14:d9:4b:7d:d7:b8:a2:1b:6c:93:ad:d9:28:0e:c9:99:ee:
89:e6:41:3a:e9:1a:27:34:e3:16:8a:67:5c:ff:5c:e7:2b:14:
72:b1:1c:a6:0e:55:2b:d8:16:e9:fa:e5:5c:4d:af:1d:0e:75:
e8:38:f4:17:17:8c:bf:a6:2a:bc:5f:89:f5:f1:b2:29:dd:f3:
0f:ab:27:da:26:fb:62:c6:1e:f5:4d:00:12:fb:1c:38:c0:86:
3b:18:13:4e:40:2a:08:77:53:6f:ec:9b:ce:7d:60:6e:13:6e:
de:e4:0a:81:b9:ae:ef:72:b4:f8:dd:ce:a3:14:ce:09:d2:34:
d3:04:f0:b7:f9:2e:01:de:40:82:50:3e:89:d0:1f:6b:fd:4d:
f0:a6:44:08:47:f6:c8:a5:15:99:da:ef:be:46:3f:9a:2a:63:
b0:69:7e:42:fa:89:5b:f0:b6:74:c2:64:7f:8d:3c:e7:3b:f9:
f9:79:5b:cb:e6:1a:a1:ed:ba:b1:36:3d:10:54:32:4a:42:a4:
76:7c:08:cd:cc:76:53:32:f1:4d:76:39:3a:ad:df:9b:ed:48:
b7:ed:4a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:23 2025 by rpki-client