Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A401478D57B11EF84D35A5E762E951A.roa
File: 0A401478D57B11EF84D35A5E762E951A.roa (raw, json)
Hash identifier: lWlVPB8VQUbeE8EbRYidikXXISQ0vpRrOLgTg4sfCI4=
Subject key identifier: 00:A9:C2:EE:C7:9A:87:6F:C5:32:07:0C:31:C9:CE:1B:74:5E:7F:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B35
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A401478D57B11EF84D35A5E762E951A.roa
Signing time: Sat 18 Jan 2025 09:03:10 +0000
ROA not before: Sat 18 Jan 2025 09:03:07 +0000
ROA not after: Fri 21 Feb 2025 09:03:07 +0000
asID: 138910
IP address blocks: 45.195.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68405 (0x10b35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 09:03:07 2025 GMT
Not After : Feb 21 09:03:07 2025 GMT
Subject: CN=678b6e4e-2570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:b6:22:6d:5c:0e:41:80:c2:28:68:cc:c0:
70:50:75:99:34:d9:16:ab:03:ad:6b:a2:12:57:ed:
3d:88:46:7b:d5:cf:eb:4d:3c:79:36:c7:f8:5f:98:
95:a0:d5:3a:5f:ff:8d:fc:7a:8b:e7:11:16:eb:29:
93:28:be:ae:d5:fa:36:d1:d7:f4:a0:98:ef:8b:d6:
6b:9e:2f:4a:89:60:85:d7:cf:36:43:84:86:9d:70:
ea:cf:72:24:1a:05:8f:48:6e:fd:f0:32:1b:75:1f:
e1:7e:e4:47:84:bd:20:66:6b:c0:aa:ad:1c:8c:50:
b5:2e:b6:0f:ae:61:c0:36:23:eb:a6:04:d2:a1:0e:
ca:c6:f1:09:2d:52:e9:c7:d4:eb:2b:e5:a5:29:51:
0c:96:fa:4e:7b:0f:b4:ae:a0:f8:90:ab:b9:a8:90:
94:1d:c4:68:cc:b9:42:cf:ff:46:7c:41:fa:6e:6b:
91:cb:cd:af:39:83:0a:1f:8a:3d:d5:3a:4b:d0:a7:
11:c1:e5:87:4f:51:8b:7c:70:8f:e3:3a:a7:03:05:
31:a1:06:28:4b:77:ec:e6:28:dd:6e:66:a8:74:ec:
2a:a5:a9:ae:82:c1:d6:ed:80:83:5f:71:44:09:83:
3d:22:2f:4d:8f:69:fb:35:e2:06:36:84:da:76:e5:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A9:C2:EE:C7:9A:87:6F:C5:32:07:0C:31:C9:CE:1B:74:5E:7F:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A401478D57B11EF84D35A5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.241.0/24
Signature Algorithm: sha256WithRSAEncryption
95:17:50:b8:0e:2b:d9:4e:d5:51:47:07:8b:b6:ed:40:70:e1:
cf:a5:7a:27:c1:18:17:56:2d:d3:03:f5:ca:00:c2:e1:93:66:
c2:3f:bf:a9:56:db:d0:18:bd:58:fd:91:6e:c8:e5:6f:8f:ed:
2c:8c:14:5a:ce:e2:d3:08:27:a0:12:3f:03:c4:fc:bb:b1:a6:
94:e3:ae:99:98:f1:4f:ce:29:e8:72:55:8b:68:ed:8b:ab:c5:
68:8d:51:d6:7f:ec:0a:5d:bb:73:29:af:1c:c9:c9:94:e8:e2:
18:2f:dc:a1:e4:e9:00:7a:0f:ff:9f:df:74:b5:e7:80:d2:cd:
ae:ad:1c:92:5e:dd:24:f1:30:73:af:a1:97:89:a9:c5:3b:98:
bc:9b:cc:7a:05:89:ce:b4:47:be:ec:7d:45:92:31:45:f7:0e:
4d:0f:da:9f:d7:32:1f:fe:48:01:85:2f:f6:54:c9:ee:fc:65:
3a:cc:db:99:2f:19:f5:f3:17:92:59:72:72:d5:99:1a:ad:35:
cc:0f:a3:63:3d:f4:0d:1b:d6:cc:ae:68:3e:bf:32:7f:e6:37:
28:a8:a9:84:2c:2d:ba:61:90:75:2b:5b:ae:03:47:ee:77:50:
5f:ed:a0:e8:b3:72:18:2c:34:e3:f4:52:ed:a8:a9:16:dd:71:
9a:5c:24:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:56 2025 by rpki-client