Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14C942B2DFD911EF828BE7AB762E951A.roa
File: 14C942B2DFD911EF828BE7AB762E951A.roa (raw, json)
Hash identifier: 3I+7rsaB6VIupP/XiOloax3UvNZh97RxU6ya0MF2I8k=
Subject key identifier: A4:CB:B1:B9:1C:1A:E6:AD:DF:01:D4:EC:F8:AB:07:09:B3:E7:20:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14C942B2DFD911EF828BE7AB762E951A.roa
Signing time: Fri 31 Jan 2025 13:41:32 +0000
ROA not before: Fri 31 Jan 2025 13:41:28 +0000
ROA not after: Thu 06 Mar 2025 13:41:28 +0000
asID: 214049
IP address blocks: 45.194.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71138 (0x115e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 13:41:28 2025 GMT
Not After : Mar 6 13:41:28 2025 GMT
Subject: CN=679cd30c-9c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:54:c1:b1:1a:fe:30:62:82:30:81:6d:39:ab:
80:cc:e8:d0:4c:d4:95:6c:10:0f:dd:04:1a:51:dd:
c1:7e:d5:93:46:3a:bf:d7:65:d7:74:6a:ed:eb:3a:
f8:5e:79:3a:7c:a2:f4:b9:37:5a:4e:00:7a:e3:88:
c1:e6:1d:71:36:fc:a2:7e:0b:00:f8:21:73:3e:bb:
fd:5e:c6:79:a4:c3:a0:8c:d1:92:cf:85:b5:b6:59:
d2:ce:b4:9c:43:5f:24:66:3d:13:52:17:5a:4c:7a:
b2:bf:03:02:89:bc:24:2d:3f:d7:da:29:da:e4:fe:
01:5e:dc:e8:12:74:79:e1:41:a9:15:66:89:fa:df:
fe:be:ef:ec:1f:34:36:2a:0e:ab:04:f5:da:54:36:
32:49:ed:3d:ef:f2:55:04:81:36:eb:f1:05:ce:08:
64:6b:e7:b8:08:ad:eb:88:bc:36:6d:3a:c4:36:bf:
7f:71:e3:31:d9:5d:8a:8b:7d:83:4e:b0:a1:b1:3f:
b4:cd:1c:8d:ab:35:9b:15:79:e7:12:15:7d:f7:4d:
c6:c9:41:82:ff:29:8d:39:d4:f2:d4:ee:4e:0f:04:
5e:41:f4:6f:a0:05:9d:d4:61:76:4c:dd:54:a3:a4:
83:a4:20:d9:9b:6c:97:f5:86:da:13:c2:34:d7:f2:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CB:B1:B9:1C:1A:E6:AD:DF:01:D4:EC:F8:AB:07:09:B3:E7:20:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14C942B2DFD911EF828BE7AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.6.0/24
Signature Algorithm: sha256WithRSAEncryption
73:02:d0:b0:71:2c:2e:e8:aa:4a:ff:16:62:bc:af:ce:f1:f3:
fc:69:20:7a:05:08:6d:83:7e:f6:36:b6:22:fd:1a:ea:24:8d:
39:76:a1:73:8c:44:1f:79:d1:63:84:7c:02:8a:6c:2d:ed:64:
97:b5:4f:f4:e0:d8:71:db:a1:c2:a9:ee:43:52:59:26:e9:a9:
85:c6:d5:53:0c:48:4d:d6:b3:7a:f2:8e:69:52:3a:e8:28:e0:
bf:4e:ea:76:9e:cd:80:bd:7a:30:35:c6:da:ff:44:c1:4a:6d:
41:b3:8c:e1:29:a6:23:2d:6a:40:3b:79:12:9f:f4:7c:20:2d:
54:d7:80:83:f8:86:b3:1a:52:bd:d0:f1:0e:4d:36:74:aa:24:
0b:07:f8:e3:56:0a:39:d4:01:b3:bf:fa:15:a3:a5:9a:fa:ba:
a4:b8:28:25:b8:7f:4e:f7:0c:ab:35:58:69:b7:e5:e2:f7:dd:
27:ae:42:e6:0a:4a:5c:bc:f3:e4:6a:9d:f4:2d:c6:67:f2:7e:
91:f1:96:8c:83:76:ea:43:82:33:c3:29:ac:be:e1:d8:0f:11:
c9:bc:d6:39:00:5c:93:d4:c5:f6:74:87:ce:f1:2a:37:52:6f:
9a:aa:75:05:e6:69:20:3b:89:b2:2d:e7:26:ba:86:98:62:9c:
fb:19:0d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:08:17 2025 by rpki-client