Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0544606AD57A11EF8EC6B857762E951A.roa
File: 0544606AD57A11EF8EC6B857762E951A.roa (raw, json)
Hash identifier: RfRNVRSoWNrO/j0xrqLQAiq73jW/snFnWRQ2kF23cvc=
Subject key identifier: EE:8A:06:9B:4E:CC:F3:F0:F5:1D:BD:E6:AB:D8:9F:2D:50:4A:A9:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0544606AD57A11EF8EC6B857762E951A.roa
Signing time: Sat 18 Jan 2025 08:55:52 +0000
ROA not before: Sat 18 Jan 2025 08:55:49 +0000
ROA not after: Tue 18 Feb 2025 08:55:49 +0000
asID: 61112
IP address blocks: 45.196.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68397 (0x10b2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 08:55:49 2025 GMT
Not After : Feb 18 08:55:49 2025 GMT
Subject: CN=678b6c98-eb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:80:21:ba:fb:58:07:2a:2f:6a:14:17:9a:
5f:a2:ed:27:a0:fd:3a:ed:29:eb:96:b6:18:99:4b:
4f:ab:fa:27:ae:de:d5:a3:cf:29:35:ba:34:7f:13:
67:ca:76:1d:af:b1:4e:61:25:eb:84:f6:92:c7:5d:
55:c1:98:36:23:72:81:f2:86:b3:72:0c:3c:1c:68:
b0:af:cd:01:bf:bb:cd:35:be:92:ee:22:39:8b:9b:
68:a4:9c:bf:fb:35:9a:49:66:88:ee:a9:34:1b:95:
13:6a:67:13:d4:bc:e3:b0:d3:d8:5e:2f:84:2a:1d:
8b:80:68:4b:b7:a0:44:db:74:a4:c3:ad:c1:0a:1f:
71:7d:2b:e9:20:c2:16:4d:e7:dd:4d:41:05:a7:6c:
61:03:11:cb:5c:0b:4c:d6:fd:34:db:ac:ef:2c:91:
9c:77:d7:26:1b:41:ea:0e:04:f8:51:3b:10:4f:90:
9d:a9:38:1a:9c:d9:22:69:95:be:2f:c2:21:21:5e:
47:77:e6:c3:34:7f:c1:96:48:d8:32:40:95:88:d9:
7f:bc:36:63:23:8b:31:64:0a:b1:dd:19:2d:46:fe:
49:75:b8:43:e5:bb:ea:b8:93:27:9a:0c:23:8c:60:
0f:b3:86:bb:6d:8d:05:c8:af:55:8c:b3:a0:45:4d:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:06:9B:4E:CC:F3:F0:F5:1D:BD:E6:AB:D8:9F:2D:50:4A:A9:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0544606AD57A11EF8EC6B857762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.235.0/24
Signature Algorithm: sha256WithRSAEncryption
69:61:94:3b:7a:9c:2e:99:d9:5b:de:47:3b:a7:9e:88:5d:41:
90:41:4f:62:18:1f:7e:68:d4:bf:33:a7:1f:ab:8d:ca:16:60:
a6:6c:d4:fe:a1:eb:41:48:d6:1f:3d:32:0f:cd:c1:fb:d9:73:
7b:4b:5f:06:71:3a:64:a0:71:e6:73:02:97:29:25:87:c0:6a:
13:e5:3c:ed:d1:e5:0d:ce:da:4f:c1:3f:29:b9:60:87:b6:f1:
fc:6b:66:6f:eb:e7:29:1a:ed:45:30:ab:ca:82:a0:cf:1f:b6:
45:8a:4c:21:9a:67:c7:35:6f:a8:57:1b:62:b4:df:f8:16:2f:
09:26:1d:95:8c:03:9f:bd:49:85:86:26:7a:5b:1a:bf:12:5d:
4d:02:52:50:d3:25:02:13:b7:22:12:40:c0:1b:40:bd:d2:7d:
90:78:47:4e:b8:95:48:21:ae:5e:48:67:5e:59:c3:80:67:b8:
3e:09:6f:f3:2e:1c:fb:30:c7:47:f7:db:9d:e7:6e:46:65:82:
8c:11:2e:16:2b:d1:b6:13:38:96:6c:d6:9a:2e:ca:73:88:53:
01:3a:b3:76:88:4b:6d:cb:ac:f2:82:94:80:1a:ec:fb:f4:0c:
03:4b:44:a8:77:61:18:e5:ea:1a:34:3d:a7:07:1f:88:68:e7:
e9:d9:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:18 2025 by rpki-client