Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D3770FEDAEC11EFB35DE078762E951A.roa
File: 2D3770FEDAEC11EFB35DE078762E951A.roa (raw, json)
Hash identifier: NgSGEUWQNNUjcntkuKUg8NUDVEnR6fjDBERzYKUBeMg=
Subject key identifier: 4B:7C:88:4A:F7:92:F5:E1:C0:D9:6F:B8:08:D6:58:67:5C:D7:97:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01110C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D3770FEDAEC11EFB35DE078762E951A.roa
Signing time: Sat 25 Jan 2025 07:15:38 +0000
ROA not before: Sat 25 Jan 2025 07:15:34 +0000
ROA not after: Sun 23 Feb 2025 07:15:34 +0000
asID: 202656
IP address blocks: 45.195.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69900 (0x1110c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:15:34 2025 GMT
Not After : Feb 23 07:15:34 2025 GMT
Subject: CN=67948f9a-1f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:cb:5e:51:60:23:7b:67:a1:b7:d0:55:76:
c4:e4:29:b4:fd:ed:ca:4e:f2:86:fd:e4:dc:c4:0d:
d4:de:7d:a6:19:f2:4f:f0:9a:5c:fa:f1:b4:0f:3b:
9d:b8:cd:85:d2:d2:a7:55:77:bf:4b:0a:20:f2:36:
e0:8d:2c:1d:c1:92:5c:81:8a:48:8c:8e:c8:fd:5e:
76:e0:83:f4:d1:21:d2:3f:9a:b0:d1:3b:d1:30:59:
27:66:d5:15:47:98:68:1e:88:03:b7:83:fe:fd:f0:
fa:bf:a6:88:1a:cd:b6:de:af:6a:0d:3c:a8:66:c0:
f0:71:c0:36:6b:56:96:00:56:10:b6:1a:bd:a2:7b:
eb:65:d7:fb:52:d8:a9:40:1b:40:41:5d:4b:fa:78:
51:65:98:68:3e:90:de:a8:24:db:54:3d:96:1f:ee:
de:40:70:2e:75:40:09:f5:1b:ce:c9:c6:2d:20:47:
21:25:d5:29:b0:44:40:78:c4:82:fc:d7:58:cb:81:
d0:60:bf:cc:36:78:20:70:e6:17:fa:82:f1:f8:c1:
4d:79:0d:48:c5:8d:99:30:e2:f0:a2:ae:f6:a5:7c:
8e:45:cf:99:8d:17:a2:e8:1c:12:74:65:a4:a3:ea:
49:e2:e2:d2:87:5b:f2:1a:7f:da:24:3a:2e:25:8a:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7C:88:4A:F7:92:F5:E1:C0:D9:6F:B8:08:D6:58:67:5C:D7:97:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D3770FEDAEC11EFB35DE078762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.166.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a8:de:c9:51:bb:39:22:d3:1a:65:b3:0e:f2:ea:3f:0e:8b:
96:00:40:15:05:51:89:b8:b4:d4:65:f6:76:97:2f:c0:1e:15:
af:7e:44:b9:a8:83:48:79:f4:6a:5a:cc:2d:c5:36:be:94:64:
59:fb:56:d7:c8:fe:21:ec:ac:7f:dc:cb:3b:45:74:d7:27:e9:
0c:72:24:32:2f:a7:db:d6:69:50:04:1f:fc:bf:2a:55:89:04:
43:97:7c:cf:eb:37:e3:f1:65:8f:c2:58:82:54:69:99:e2:a3:
00:82:cf:79:d4:16:42:a2:dd:cb:ea:ad:d2:ca:67:54:c7:73:
76:fd:98:8f:ae:2f:ef:20:af:fb:91:c2:5f:85:5e:31:38:4e:
37:e3:58:55:3e:41:a3:6f:a9:a5:70:2f:c4:60:f9:81:b4:5a:
fe:3e:d4:34:36:9a:8b:70:6f:e5:6d:89:2a:9d:b3:b4:63:0b:
bc:8c:7f:f0:70:83:79:53:26:65:63:bb:34:75:90:6b:1f:25:
0a:cc:1a:da:19:d4:08:b8:d6:3d:1b:7c:3a:d6:bc:59:5f:a5:
30:0d:c1:78:ef:85:af:ad:c9:e8:f7:4e:80:7f:76:f9:72:b3:
f4:43:10:b3:95:52:b4:74:ed:91:77:83:f5:6b:46:24:1a:6b:
d6:bc:68:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:49:56 2025 by rpki-client