Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16455308D4A611EFA0A53764762E951A.roa
File: 16455308D4A611EFA0A53764762E951A.roa (raw, json)
Hash identifier: 2qfXJcM+JlypNxo3vLYR4LPHd2pOf+IcIsXMGW4iO2c=
Subject key identifier: 32:25:BE:19:41:62:B6:67:97:DE:77:A6:39:18:1E:ED:34:D5:14:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01091D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16455308D4A611EFA0A53764762E951A.roa
Signing time: Fri 17 Jan 2025 07:38:47 +0000
ROA not before: Fri 17 Jan 2025 07:38:44 +0000
ROA not after: Sat 15 Feb 2025 07:38:44 +0000
asID: 9304
IP address blocks: 45.196.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67869 (0x1091d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 07:38:44 2025 GMT
Not After : Feb 15 07:38:44 2025 GMT
Subject: CN=678a0907-c8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:a5:cd:5c:40:cb:5e:f9:b9:14:fb:84:8f:
02:83:da:2a:01:f6:01:69:b3:08:98:b0:16:7e:5e:
c8:92:5c:15:21:92:dd:32:e9:06:2f:c5:0e:35:9a:
76:86:55:de:83:0c:6d:19:2a:9f:bb:4b:2a:9e:ef:
0a:04:c4:2d:9c:13:62:0a:3e:d8:43:3a:60:1f:30:
7c:c4:e1:5f:9d:ba:92:26:17:e0:5e:6b:e6:36:e6:
99:7d:1a:7c:d1:09:87:f9:0d:f6:22:2d:9a:50:ea:
1d:43:5f:98:2d:14:64:6e:fb:57:f5:59:5a:02:95:
39:2b:0d:f9:66:be:e5:2f:c7:f4:45:a7:6e:9e:60:
f6:33:1b:35:73:ab:86:b3:df:ad:c5:cf:28:f9:10:
80:e4:30:36:67:2a:aa:fd:59:a1:66:6d:84:44:bb:
e3:bf:4e:d1:05:d8:de:dc:f3:61:86:04:c1:d7:10:
dd:1b:6d:e1:cf:6d:40:e6:5a:67:98:78:41:be:4a:
69:e0:bb:7e:4a:2b:bc:4a:2d:a5:25:c6:7a:23:54:
78:95:93:6e:e7:b6:0a:8b:bb:cf:a7:25:70:d4:49:
a2:f2:78:12:19:6b:be:77:51:b3:53:2c:66:0f:9c:
e5:3c:b5:87:02:2e:12:92:08:38:1f:eb:c1:69:a9:
c9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:25:BE:19:41:62:B6:67:97:DE:77:A6:39:18:1E:ED:34:D5:14:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16455308D4A611EFA0A53764762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.225.0/24
Signature Algorithm: sha256WithRSAEncryption
79:8a:1c:13:d6:c3:55:26:1f:88:0e:d5:94:28:78:c5:13:b3:
60:b8:f4:0f:f7:5a:ec:19:d8:39:3d:04:e0:e2:31:df:aa:40:
d9:b9:02:92:3e:a6:41:e2:55:f2:b1:29:4b:7d:9f:0f:94:3f:
2c:74:3b:64:d7:c9:b3:b1:f4:74:2b:4d:66:50:11:4c:bb:53:
43:43:87:f9:53:10:eb:b2:c6:dd:d8:be:14:52:2d:5a:62:55:
1e:23:a1:b5:23:d5:99:39:08:da:23:58:d6:e6:7c:84:99:44:
30:53:49:5f:33:d0:eb:73:86:bb:2d:d9:67:24:29:67:1c:9a:
2d:81:ec:12:79:95:8d:90:0d:bc:5c:66:75:86:d0:9f:c0:23:
ef:61:da:f7:c3:5e:c4:74:c4:68:b3:eb:83:4c:fb:ba:a7:b4:
0c:ef:e5:74:15:93:41:3b:bf:44:1a:56:ce:50:a0:de:a7:60:
87:a8:70:6d:df:fc:f2:3b:19:ba:80:db:a0:a6:59:20:56:3d:
90:21:1f:68:95:d2:fa:83:1b:33:44:24:c2:54:02:49:56:0b:
9c:52:dd:5c:48:87:01:9e:5a:cf:6b:4e:ed:31:4d:08:1a:49:
df:a8:88:be:94:81:09:fb:d1:f2:4a:73:e7:e2:87:02:85:e0:
a8:19:0e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:39:23 2025 by rpki-client