Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0195CED0DB3E11EF8A0F449C762E951A.roa
File: 0195CED0DB3E11EF8A0F449C762E951A.roa (raw, json)
Hash identifier: J/Zq+pAKHhnM5Gkg9ki19o4qDuyhtPOuhUnteyPajFA=
Subject key identifier: CB:24:53:37:6F:FB:F6:95:7C:0B:1E:41:0C:38:30:8A:CE:83:FB:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011295
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0195CED0DB3E11EF8A0F449C762E951A.roa
Signing time: Sat 25 Jan 2025 17:01:23 +0000
ROA not before: Sat 25 Jan 2025 17:01:20 +0000
ROA not after: Sun 09 Mar 2025 17:01:20 +0000
asID: 63139
IP address blocks: 45.197.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70293 (0x11295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 17:01:20 2025 GMT
Not After : Mar 9 17:01:20 2025 GMT
Subject: CN=679518e3-6c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:4a:ff:4b:dc:fc:4b:17:b3:29:cd:c5:ef:
d6:6f:05:1c:ee:06:0e:5c:2d:bb:68:12:fb:b9:9b:
b2:0b:8b:fa:ca:c0:c5:0a:35:2b:7d:3c:8c:73:d1:
d1:04:fa:2f:2c:03:89:31:2e:4a:bf:07:8d:46:ab:
65:b3:a4:d9:d7:23:6f:fc:d0:c4:97:54:65:1f:80:
08:07:69:30:42:cf:1a:1e:7b:a6:0c:5e:7d:fb:1e:
92:58:06:2a:9e:45:01:bd:c1:b2:f9:50:54:5f:47:
5d:e0:0d:ae:f7:86:e1:f2:31:47:90:16:84:ec:0d:
80:18:8c:7f:f6:66:48:c1:8b:42:9c:78:d3:ab:ad:
94:ca:32:1b:05:ca:03:f9:4d:88:be:77:3d:13:0b:
53:e0:40:90:6a:5b:0f:86:21:19:f7:f6:ce:59:d3:
95:13:e8:47:a6:df:84:05:5f:09:27:a0:28:26:22:
da:86:78:e6:ba:ba:d2:ad:a5:bd:c2:03:95:ee:e2:
04:e3:6e:3b:3e:61:35:3e:c8:27:04:12:d2:7e:0b:
6a:51:26:5b:d6:ec:f2:1e:4f:d3:b9:9b:a6:c9:81:
4e:6e:e9:33:38:24:d5:4a:86:e4:6a:ab:b2:95:23:
13:57:fa:10:51:0a:3c:da:b0:d2:5e:59:59:56:f2:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:24:53:37:6F:FB:F6:95:7C:0B:1E:41:0C:38:30:8A:CE:83:FB:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0195CED0DB3E11EF8A0F449C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.65.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:18:c3:12:16:d9:03:0c:a8:db:97:6d:8b:35:e7:12:af:03:
74:e8:3e:d9:a2:cc:08:44:22:47:58:77:e7:b7:5b:35:3c:0f:
47:7a:f2:23:64:92:00:09:e5:62:7f:bd:76:35:55:bf:8d:81:
1c:ae:e4:71:a7:a2:76:22:c1:5b:95:13:ab:23:cc:06:ee:71:
08:7e:e9:a6:0f:31:0b:a4:26:1d:c5:fc:9b:b8:f9:49:49:94:
b3:2e:34:c6:ac:0b:a4:c1:18:9b:6f:05:dd:ff:7f:1f:26:f2:
9b:32:2a:0b:d3:44:84:9a:44:d2:38:49:f1:ec:17:6e:17:8c:
71:ca:8b:d0:6a:ba:6b:ad:37:1a:81:f8:db:7a:66:80:3d:43:
74:b4:05:43:8f:64:92:9f:11:3b:fc:9e:7d:d7:77:ea:48:50:
62:35:10:87:c6:ac:be:55:48:b9:d3:8f:71:cf:da:ed:de:d3:
cc:92:5e:c7:d5:7c:93:0b:b4:a2:f3:36:26:0d:79:04:ec:2e:
66:5d:93:d4:42:ab:eb:7f:1d:4a:c9:fb:56:98:83:60:15:87:
7c:95:86:49:d8:86:30:a2:19:2c:48:28:64:1a:be:c1:d3:45:
64:d5:be:80:d9:35:2b:4c:12:88:9e:0e:2a:33:7e:df:a5:81:
3b:a1:c3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:00 2025 by rpki-client