Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/041DCF82DBD311EF9223878C762E951A.roa
File: 041DCF82DBD311EF9223878C762E951A.roa (raw, json)
Hash identifier: HFdKXvA4XjDDRI2kFbDJtNIQfXAXiVWLmgU99usVLGg=
Subject key identifier: F0:E0:5B:04:1F:2D:E8:40:03:66:D8:EA:97:6E:96:FC:C0:26:BB:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01132A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/041DCF82DBD311EF9223878C762E951A.roa
Signing time: Sun 26 Jan 2025 10:48:03 +0000
ROA not before: Sun 26 Jan 2025 10:47:58 +0000
ROA not after: Tue 25 Feb 2025 10:47:58 +0000
asID: 202656
IP address blocks: 45.195.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70442 (0x1132a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 10:47:58 2025 GMT
Not After : Feb 25 10:47:58 2025 GMT
Subject: CN=679612e2-705b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4a:f3:e2:e9:10:74:e0:1b:78:80:b6:95:98:
3b:cf:4e:00:42:be:a6:58:3b:fb:29:83:b9:23:75:
4f:22:90:92:7e:a9:4d:8a:59:66:62:97:3a:ff:d2:
03:33:db:fc:c3:a5:ad:29:3d:72:97:c9:80:ff:6f:
96:7b:0a:80:d0:63:1f:84:fc:fe:49:15:e0:cd:4b:
e6:b0:86:93:e2:19:08:a6:db:50:bd:2d:8c:e0:e1:
58:55:61:19:72:13:44:d6:e2:6c:28:4b:b7:3b:de:
e3:86:5d:a7:d5:6b:a9:ba:d5:29:ea:c5:50:c5:10:
31:11:ff:00:55:fc:bd:1f:10:e1:d6:33:cf:1f:6d:
d4:2c:45:3f:fa:17:6e:8f:cd:a5:9f:b1:8f:28:56:
2f:6c:af:af:b4:c2:d9:38:be:b4:52:9d:08:1e:d3:
18:bb:72:4a:85:6c:10:94:83:7e:bd:b1:f1:c5:56:
0f:52:dd:9b:0e:90:91:7d:0c:af:ac:9b:5c:7f:74:
16:36:04:4f:99:1c:e6:39:47:43:57:fe:d9:d4:ba:
6a:cf:ec:5d:19:b2:0f:80:b2:0b:ba:7e:fe:06:d9:
14:34:f9:83:e1:ae:0b:88:23:db:07:52:6a:11:b2:
b6:34:6c:da:73:94:f5:23:27:9c:fb:b6:8b:b4:5e:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E0:5B:04:1F:2D:E8:40:03:66:D8:EA:97:6E:96:FC:C0:26:BB:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/041DCF82DBD311EF9223878C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.161.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:81:4d:c9:8f:26:31:c9:49:f2:3d:85:df:93:44:15:82:c1:
53:ff:37:77:09:a6:84:84:3e:0c:07:71:f2:16:1f:ba:3e:f4:
8e:f2:df:7d:54:95:0a:df:10:e8:7a:67:7e:8b:16:fe:c5:3b:
32:44:e9:a4:f7:3c:a0:56:7c:14:2b:f9:66:cc:54:6c:1d:9c:
14:46:f9:45:56:38:07:48:2c:51:04:48:9b:dd:59:d4:ce:3b:
aa:e2:24:55:4a:c2:57:bc:76:c4:77:14:f5:23:34:74:d3:8b:
a0:eb:6f:15:1f:d2:35:a8:de:ed:2f:b9:2d:52:74:fc:c6:78:
0e:1b:e6:e9:6b:c7:6b:cc:df:fb:75:dd:14:05:0b:36:da:85:
98:84:ed:f5:3d:6c:57:bf:8f:3d:42:f3:97:20:c0:be:d8:34:
5a:29:15:8f:9d:ff:60:9c:52:8b:dc:93:94:86:e4:ef:80:fd:
8e:2a:f2:64:c1:91:a5:39:46:f6:e6:e0:d7:4f:5a:0f:e2:88:
cf:00:bb:9e:d5:6e:a0:da:c5:e3:1a:8d:3e:73:a4:c9:97:5a:
52:c1:3a:12:c4:33:17:eb:9b:08:7a:35:7d:a2:ba:3b:46:87:
ca:d7:3c:db:21:de:8b:28:66:ac:62:4e:a2:b5:70:ca:8b:dc:
c5:04:cc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:31 2025 by rpki-client