Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E6EE2FED3F511EFBBA39A5C762E951A.roa
File: 0E6EE2FED3F511EFBBA39A5C762E951A.roa (raw, json)
Hash identifier: SIISh+R3CzZZlZuc6vcf41Bhxen3B6asovo+O5+pA4w=
Subject key identifier: 26:14:D3:84:D3:19:C7:F6:A9:58:1E:28:54:8E:F3:92:08:99:46:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010904
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E6EE2FED3F511EFBBA39A5C762E951A.roa
Signing time: Thu 16 Jan 2025 10:31:33 +0000
ROA not before: Thu 16 Jan 2025 10:31:30 +0000
ROA not after: Sun 16 Mar 2025 10:31:30 +0000
asID: 17561
IP address blocks: 45.195.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67844 (0x10904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 10:31:30 2025 GMT
Not After : Mar 16 10:31:30 2025 GMT
Subject: CN=6788e005-9e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:12:11:16:39:64:51:69:91:2c:2f:f3:69:
78:c4:d7:43:84:92:25:a1:42:7f:b5:8c:57:c8:e5:
72:47:0e:6c:bd:b2:b9:0a:26:b8:76:67:b5:8a:a5:
2d:e2:38:8c:fd:3d:53:e2:11:3b:70:ba:9e:3a:83:
9e:8c:47:58:89:63:29:1b:6a:69:9d:99:4e:b5:d3:
57:da:25:b6:33:68:9e:ef:a0:d7:f3:74:58:c4:27:
3a:31:c9:53:4c:08:8c:23:c5:a9:55:9a:94:7a:e5:
2d:16:21:e0:22:df:b3:cc:ed:56:5c:d4:4b:7e:46:
f5:e6:78:91:a8:47:97:e4:15:f7:1b:c0:7d:18:b8:
d4:e6:06:b9:32:ce:f2:9a:c3:59:f1:03:76:77:31:
15:92:8f:eb:98:a0:ed:a4:29:45:da:bb:c1:66:7e:
8f:f9:6e:7b:5c:6f:dd:ab:21:03:65:c4:9c:5d:b4:
d6:45:da:7e:cb:25:cc:cd:50:52:c2:56:c8:70:a2:
22:88:59:48:72:6e:b1:84:3e:89:58:ca:2d:c5:05:
4e:9f:9a:15:18:43:35:25:3b:16:93:61:ff:93:a9:
1e:9b:7d:0b:72:8f:64:9a:2a:f8:0b:2e:04:4f:bc:
c8:87:a7:84:72:be:7f:ec:0f:8d:e9:46:04:5c:71:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:14:D3:84:D3:19:C7:F6:A9:58:1E:28:54:8E:F3:92:08:99:46:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E6EE2FED3F511EFBBA39A5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.148.0/24
Signature Algorithm: sha256WithRSAEncryption
65:06:dc:4f:fe:f0:7a:be:2d:a1:33:6d:b5:5a:4a:0a:93:94:
30:2c:3a:25:44:32:39:24:76:6d:6f:13:f5:73:69:9e:2a:a3:
84:9f:16:3b:3b:cf:bb:45:a6:b5:30:47:46:fe:7c:bd:37:5d:
e8:57:c2:3e:eb:60:ba:7e:36:a3:bb:17:8d:bf:72:2c:ca:eb:
ec:e8:63:52:67:45:21:95:2a:fc:dd:80:82:3a:83:be:e8:a5:
63:d4:4e:19:8c:19:71:61:84:39:13:17:b1:d6:fa:1e:d3:3f:
ee:28:fc:37:52:5a:00:d4:a3:a2:ad:a0:c9:f2:de:2a:dc:16:
60:5a:9e:4b:40:1c:d7:fd:bd:9c:6c:58:c8:08:2c:2f:c6:d7:
b6:af:27:b0:7f:c7:0b:6f:91:63:68:4a:b1:9a:56:9d:5d:5c:
8c:c7:c1:aa:21:0c:d1:28:3e:f6:25:c9:4d:06:da:26:aa:3d:
0d:48:4e:ab:5d:81:a3:59:0b:fa:fb:d9:60:f2:45:32:db:c1:
82:63:e2:b0:bb:a4:1c:f3:64:f1:7c:c4:a7:3b:e0:c6:19:00:
36:1c:79:e1:c6:80:b2:71:19:cf:bd:d9:5c:a4:d5:90:eb:33:
e2:12:a7:46:fa:64:82:86:d6:ac:ee:5c:fd:e6:a7:d8:5a:a7:
53:0e:64:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:10 2025 by rpki-client