Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E2BD43ADEEA11EFBF4BC37A762E951A.roa
File: 2E2BD43ADEEA11EFBF4BC37A762E951A.roa (raw, json)
Hash identifier: nnaBRd2BhFkSB+FROurXnwKig3+uONAc53WlG1HdF2o=
Subject key identifier: 4D:15:68:C8:AF:93:39:52:32:AA:F0:26:47:3D:4D:6E:D8:6D:E8:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E2BD43ADEEA11EFBF4BC37A762E951A.roa
Signing time: Thu 30 Jan 2025 09:11:25 +0000
ROA not before: Thu 30 Jan 2025 09:11:21 +0000
ROA not after: Mon 03 Mar 2025 09:11:21 +0000
asID: 9304
IP address blocks: 45.196.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71099 (0x115bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 30 09:11:21 2025 GMT
Not After : Mar 3 09:11:21 2025 GMT
Subject: CN=679b423d-96e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cd:3f:2c:8e:09:b0:83:7f:bc:ff:d9:b1:d6:
7d:30:1e:44:45:aa:d7:e3:0a:fc:5d:ce:05:d7:4d:
43:09:05:9e:2e:f8:1f:c8:24:8f:2d:91:61:9b:bb:
ff:e1:06:17:5c:f8:f8:13:a6:ce:62:06:10:dd:3d:
fa:95:06:e0:bb:c5:ac:06:7c:85:cc:a8:60:b7:b1:
a8:ec:58:56:f7:83:27:30:9a:3f:98:08:e3:19:d5:
a5:9a:35:58:af:1b:25:e8:2c:62:a6:1c:78:d9:6f:
d6:b1:ff:40:59:9a:eb:bf:5e:10:c3:8a:c9:b6:20:
9d:be:79:56:17:84:f9:de:df:8f:56:53:11:f8:d8:
97:fd:ea:4e:bb:23:d3:b7:b2:56:08:0a:42:ff:15:
07:bc:a3:51:7d:bc:c4:fb:c3:6d:48:c7:7d:75:4a:
5d:e8:78:07:b4:73:a1:54:15:ea:df:7b:bb:90:32:
b2:c3:c1:a8:5a:6c:17:6f:c5:86:4d:f7:e0:59:1f:
66:15:7b:6c:90:0f:9f:6f:44:0e:f8:eb:67:dc:64:
f1:95:15:33:c6:6f:73:70:ec:20:ef:3b:54:f1:e5:
2b:14:94:40:f9:2d:87:ad:3f:4d:0d:9a:6b:77:16:
26:d1:dd:81:1a:df:2d:46:f9:ea:20:9e:6d:da:79:
4f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:15:68:C8:AF:93:39:52:32:AA:F0:26:47:3D:4D:6E:D8:6D:E8:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E2BD43ADEEA11EFBF4BC37A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fa:cd:ae:c0:00:a3:a7:bd:b1:b7:75:9d:ce:7a:bc:1b:a2:
97:a8:d9:12:1d:05:a1:24:54:94:e2:9e:30:65:b7:ff:6b:91:
48:61:8d:c9:72:37:72:22:a9:16:44:72:d2:04:8f:7c:0c:4b:
3b:a3:ac:a3:8a:5f:41:cc:a4:4f:06:9b:39:74:ea:52:c8:4a:
5c:79:28:4d:0b:72:b9:0f:59:22:cc:ea:1d:a7:de:dc:e2:a5:
8f:8f:80:de:e7:b1:24:a0:1b:02:bc:74:c7:38:1c:6d:3f:1d:
a6:cf:ef:0c:8d:c2:74:70:be:55:55:0f:9c:d1:d6:0f:13:97:
c9:9b:30:5c:80:67:3c:66:ff:4b:b3:95:36:4a:36:45:2d:47:
3a:15:62:1b:ef:fb:b9:69:bb:a1:48:31:cc:59:10:40:2e:12:
74:8f:e4:f5:8a:42:17:5f:0e:83:97:c5:70:c7:f8:6c:51:1c:
1f:6c:6b:3b:fa:47:0e:27:2e:20:1d:6f:dd:1f:85:8d:b5:ee:
6d:64:fe:f0:80:38:5e:58:ac:55:d1:da:42:6e:35:ad:a9:ee:
45:23:65:c8:67:55:3e:f5:84:47:22:2c:c6:24:85:b7:68:ea:
fa:18:af:db:0c:16:a3:d4:85:d8:ec:2a:35:cf:f3:5c:4d:e2:
08:a6:d2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:47:26 2025 by rpki-client