Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41A6FA56DA4611EF9CA4F591762E951A.roa
File: 41A6FA56DA4611EF9CA4F591762E951A.roa (raw, json)
Hash identifier: N9tR9YKaRbOGKU9P4YQmeFp+pBeiCyBXh9wx4sGLiMA=
Subject key identifier: 48:9B:61:2A:84:A5:44:CC:76:DB:B1:A2:05:4D:53:6A:4E:82:60:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41A6FA56DA4611EF9CA4F591762E951A.roa
Signing time: Fri 24 Jan 2025 11:27:56 +0000
ROA not before: Fri 24 Jan 2025 11:27:52 +0000
ROA not after: Sat 22 Feb 2025 11:27:52 +0000
asID: 202662
IP address blocks: 45.196.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69462 (0x10f56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 11:27:52 2025 GMT
Not After : Feb 22 11:27:52 2025 GMT
Subject: CN=6793793c-36a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:6b:bf:86:e9:88:f0:fd:d0:0c:1c:4f:73:
15:cd:7b:71:3a:16:f1:69:76:5d:fd:10:28:8f:3e:
6a:37:b5:1c:6d:39:a3:a5:38:91:61:3b:56:3c:ae:
56:98:c5:7c:f0:8a:72:5c:af:b8:62:a2:d1:2d:5a:
2d:03:57:3b:e9:63:af:8a:be:cd:7e:48:25:a4:f6:
c0:9f:a6:ba:cb:c3:11:a8:8d:2e:2f:e2:aa:af:47:
54:3c:0d:c7:3a:e1:e1:d3:2a:cf:cc:02:d3:81:82:
65:a5:9c:3c:a7:56:2f:a2:85:2f:7f:25:50:89:79:
1d:3c:9f:45:18:1a:38:be:ec:c3:b0:78:ad:4d:f3:
17:56:91:67:9f:59:5b:f4:d0:91:28:43:66:08:cb:
7e:56:66:59:4b:d8:10:32:cb:be:3b:b6:bb:f4:72:
53:c4:1f:cf:45:26:52:f0:a4:f8:b2:c9:08:33:8f:
6c:e1:6f:cb:d0:fd:fb:03:77:5f:00:51:6d:c2:7e:
28:4b:6f:11:47:5d:e0:98:52:b6:a8:33:10:36:c5:
6b:6b:be:75:d2:39:c0:3e:6f:27:bd:7b:63:c5:d6:
d5:26:08:f6:20:18:03:46:f8:08:82:9d:cd:d4:f1:
0f:1b:71:80:55:77:2e:96:07:a4:fc:73:b3:c1:4d:
b7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9B:61:2A:84:A5:44:CC:76:DB:B1:A2:05:4D:53:6A:4E:82:60:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41A6FA56DA4611EF9CA4F591762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.248.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:e8:18:69:10:15:69:b7:00:02:a1:53:3a:c4:7d:aa:81:c4:
cd:7a:5a:f3:a4:8d:28:f2:f6:ad:4b:31:29:d1:70:60:84:c1:
ad:b8:1f:4b:81:18:6e:5d:e6:4a:1c:63:41:f9:a1:0c:9d:6d:
d3:43:68:09:73:17:ce:41:1e:6d:b7:dc:d9:99:3d:29:30:7f:
07:f1:b3:12:59:b2:2d:a6:ab:98:c9:79:a8:9e:68:43:a3:9b:
51:d8:aa:0e:88:5c:26:69:6f:a5:25:94:a2:72:13:99:5b:2d:
2b:a8:83:4b:98:2d:ff:aa:5a:3a:0b:92:11:d1:c0:d9:2f:c2:
62:dd:d2:a2:34:d0:5d:7a:79:47:a8:07:79:ae:ed:f1:9b:47:
6c:37:e9:ce:fb:81:bc:46:7c:4a:80:d6:c5:b1:ed:b3:4d:85:
83:ed:f3:4c:75:0d:95:88:e9:15:fc:8b:a6:17:d7:6d:52:36:
e1:95:a7:18:78:57:af:91:60:5f:47:3e:94:52:1d:5e:a7:16:
ae:a7:7d:b1:26:62:69:d1:0d:a6:96:24:2f:b8:42:13:81:7c:
9a:04:38:e6:4a:07:82:ba:b9:1c:bc:a1:9c:e6:da:cf:4b:fb:
1d:bd:b4:2a:fd:58:74:3a:b1:52:36:1a:39:01:4b:f5:2c:4d:
b9:61:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:18 2025 by rpki-client