Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/155C526EDC1E11EFBD26617F762E951A.roa
File: 155C526EDC1E11EFBD26617F762E951A.roa (raw, json)
Hash identifier: dj/AgVl8sTzalmt3gvnWU0iO9TVvIdwQ5ynenrI9DcU=
Subject key identifier: F7:DC:F9:FF:DF:02:CE:85:52:75:53:13:0D:20:66:1A:39:F9:31:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01146E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/155C526EDC1E11EFBD26617F762E951A.roa
Signing time: Sun 26 Jan 2025 19:45:24 +0000
ROA not before: Sun 26 Jan 2025 19:45:20 +0000
ROA not after: Sat 08 Feb 2025 19:45:20 +0000
asID: 39600
IP address blocks: 45.194.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70766 (0x1146e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 19:45:20 2025 GMT
Not After : Feb 8 19:45:20 2025 GMT
Subject: CN=679690d4-323a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:1d:f7:ef:02:e2:41:13:07:1d:72:f3:64:
b1:21:b0:c4:cd:3c:bf:c0:1d:27:a6:7b:22:af:fe:
89:77:89:5b:eb:7f:ce:40:d0:d0:c4:4c:51:41:1b:
76:04:60:6a:8f:6a:e2:a2:63:39:5b:1e:c7:cb:a9:
f3:a0:8f:38:6c:ce:f3:23:80:0a:f6:6f:1a:d5:f5:
19:d5:44:67:c8:58:f4:a7:45:ba:19:ea:22:55:a3:
95:86:7e:92:71:80:40:36:84:2d:5a:57:21:08:47:
fd:51:fb:f9:34:50:11:8f:7e:a5:e4:68:04:8b:e5:
2a:58:0f:d4:38:0f:c8:a6:7b:f2:b4:de:05:5d:1f:
15:c8:8e:6f:13:d3:a7:11:9b:a8:7a:c0:0c:f1:66:
1a:bb:70:75:c6:60:5a:ff:12:8b:d4:be:bd:d4:0c:
53:6c:5e:07:31:0e:d3:65:1a:5b:51:bb:67:20:6c:
dd:c3:3e:e2:90:1d:97:18:e2:aa:81:2f:d5:09:c8:
13:48:77:34:2d:27:33:b8:16:45:19:85:c5:0c:39:
e4:90:8e:0b:00:43:f8:69:4a:74:20:d1:da:16:a8:
41:1d:07:45:34:d7:14:30:45:22:70:df:3f:13:d2:
ba:bf:f6:a7:93:07:00:25:a2:c0:b1:f1:5e:d4:6d:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DC:F9:FF:DF:02:CE:85:52:75:53:13:0D:20:66:1A:39:F9:31:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/155C526EDC1E11EFBD26617F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.64.0/22
Signature Algorithm: sha256WithRSAEncryption
02:b3:f0:bb:c1:d9:8e:9e:fb:c4:43:20:86:20:a3:59:44:59:
68:1b:93:05:3c:c3:4b:06:01:ee:57:cc:38:26:e0:17:60:ae:
36:3a:f4:6f:8c:0c:76:3d:87:c7:4d:07:7b:9c:d6:f3:ef:1d:
d8:25:01:8c:93:58:65:2e:c5:be:74:0b:b7:3d:d1:0e:87:84:
5a:55:67:7b:07:e5:ab:d6:ba:fd:f7:7c:a4:e3:c0:4e:07:af:
0c:08:1d:fd:e5:09:f8:48:c6:79:b4:f1:17:76:3f:66:db:2a:
a7:13:6c:8d:c3:bc:2a:90:22:3c:19:9b:fa:71:d3:4c:cd:da:
cf:23:e9:6c:51:31:06:76:15:52:91:07:ed:b8:dc:f8:2f:36:
36:e0:ff:fd:e2:fe:5a:c7:63:29:5a:08:20:0f:e1:b2:59:43:
65:ea:5d:41:bb:78:f5:36:90:8e:d1:16:17:ab:86:97:76:d9:
88:28:62:f8:3d:8e:14:69:5b:75:03:0c:67:84:68:d3:28:0d:
ed:33:78:e9:06:12:22:41:d2:34:63:17:14:a8:e1:3e:2d:07:
c7:8b:01:d3:d8:c3:ed:b0:77:75:b6:08:82:ec:73:7f:75:90:
69:f8:e0:ff:d1:38:11:5b:30:ed:6a:7d:ed:f8:67:6d:b0:ae:
f5:a3:d5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:10:23 2025 by rpki-client