Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12E2B18ADAEE11EFB7311486762E951A.roa
File: 12E2B18ADAEE11EFB7311486762E951A.roa (raw, json)
Hash identifier: 5drtqWOEHBHxsIihqc0nc3jtP0vwtMG88qlVabMdbuE=
Subject key identifier: 96:9F:5F:52:ED:83:1E:2B:7B:F1:6B:2D:3B:50:F5:8A:15:A4:C1:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011125
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12E2B18ADAEE11EFB7311486762E951A.roa
Signing time: Sat 25 Jan 2025 07:29:13 +0000
ROA not before: Sat 25 Jan 2025 07:29:09 +0000
ROA not after: Sun 23 Feb 2025 07:29:09 +0000
asID: 202656
IP address blocks: 45.195.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69925 (0x11125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:29:09 2025 GMT
Not After : Feb 23 07:29:09 2025 GMT
Subject: CN=679492c8-1987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:a1:49:d1:48:6e:c7:d9:12:27:d0:a5:9d:
ea:0a:93:37:c4:0e:cb:f1:3c:a6:08:4f:de:ba:94:
39:65:ff:fb:fd:f6:52:b6:77:d2:25:88:45:10:72:
58:4b:9b:1a:0e:1e:fb:da:21:28:f8:44:46:bc:07:
48:8e:39:e7:3e:36:26:0b:9c:4d:d6:5c:bd:8a:59:
6b:d3:97:55:ce:39:08:4f:2e:b8:13:be:7a:62:6e:
59:b7:c5:8e:92:b6:03:b1:20:e1:bf:a0:2d:cb:84:
d6:59:26:23:a4:93:44:c7:c8:0b:a7:1c:f4:e4:af:
e4:62:79:53:98:22:96:52:35:fb:16:bd:21:70:4c:
eb:01:8a:01:43:63:5a:0f:9d:13:63:73:fe:7f:96:
e9:a7:e4:cb:9f:4d:00:cc:74:1f:38:b6:3f:a4:63:
84:7d:68:ea:ed:3f:a3:7a:e7:cd:28:13:82:9e:a4:
fe:52:84:75:c4:91:3d:aa:10:9a:b8:19:c5:79:f9:
60:ec:53:e2:88:f3:ca:cd:f9:04:36:cc:8d:a3:4d:
5f:33:5f:d0:54:69:41:0d:a7:41:d6:66:50:ef:c0:
da:c3:f2:61:01:13:f4:7a:24:d5:e3:2a:18:c3:e6:
c0:14:97:c5:1c:b5:13:45:43:6c:6c:6d:51:25:db:
8f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9F:5F:52:ED:83:1E:2B:7B:F1:6B:2D:3B:50:F5:8A:15:A4:C1:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12E2B18ADAEE11EFB7311486762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.173.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:44:86:be:1b:5d:71:7c:a2:70:2c:39:54:61:d7:4b:86:c8:
1e:b8:c1:46:c6:c5:17:7b:87:89:cd:4d:35:fc:90:f4:ba:73:
68:12:28:55:8d:3c:f0:7d:ee:01:c0:4c:e0:aa:b3:90:cd:5b:
43:46:a8:e9:0f:1e:c3:f7:eb:28:26:f5:11:4f:f8:81:35:0e:
d5:c7:d7:1a:91:95:13:c8:d0:37:3d:62:c6:40:71:3c:d3:07:
f9:67:c8:32:ff:3b:4e:42:74:c6:5c:32:6e:c9:71:a2:22:84:
b8:c0:06:73:8f:55:33:27:0a:13:00:46:55:4b:65:c1:26:5c:
8c:ff:2d:6d:ec:22:70:aa:8b:2d:0d:fc:53:b8:8e:54:9a:d4:
00:94:ec:70:74:08:56:6a:2e:f6:67:af:d3:43:25:41:69:b7:
fd:82:ee:a3:40:42:df:0d:ef:89:4b:80:a9:b6:74:b5:45:4d:
4d:99:98:75:b0:3f:52:31:9d:e0:c8:d3:35:a7:26:86:69:1f:
6b:66:fa:eb:71:2b:6b:eb:06:f3:71:50:f4:fd:97:5b:4f:10:
bd:cf:55:c1:af:05:cd:ed:2b:1c:b4:af:fc:0d:22:2d:6e:a0:
92:d1:0f:9b:68:35:41:ba:a0:ae:51:24:9c:9c:e3:b8:f9:7c:
c3:49:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:08 2025 by rpki-client