Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51FA0D58DAF011EF9D8B6394762E951A.roa
File: 51FA0D58DAF011EF9D8B6394762E951A.roa (raw, json)
Hash identifier: nJxvQwXIMiaS79v2s2c1fUGntrv9sRNzKYRnHESlY9s=
Subject key identifier: EB:79:5B:AC:BE:76:B9:04:A8:BE:89:A7:F7:32:FA:C7:37:B5:35:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01113F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51FA0D58DAF011EF9D8B6394762E951A.roa
Signing time: Sat 25 Jan 2025 07:45:17 +0000
ROA not before: Sat 25 Jan 2025 07:45:14 +0000
ROA not after: Sun 23 Feb 2025 07:45:14 +0000
asID: 202656
IP address blocks: 45.195.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69951 (0x1113f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:45:14 2025 GMT
Not After : Feb 23 07:45:14 2025 GMT
Subject: CN=6794968d-c55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:6b:1d:34:4a:2d:3d:1d:72:87:8e:72:64:
91:27:b6:8c:e2:86:df:26:f9:b5:18:11:1c:a3:1c:
68:37:ef:e6:e7:7f:37:77:c4:12:ce:f3:af:a4:19:
0d:10:f7:a0:d8:3c:bd:73:2d:98:17:8f:81:90:79:
6d:74:a6:33:39:e4:23:bc:e7:2c:22:60:f6:0e:1e:
ed:bb:ef:9f:72:bf:91:1f:92:d8:37:63:d2:59:a5:
c2:22:38:0a:a6:d3:d5:23:2d:9c:9a:85:80:22:e8:
a7:9b:3d:a7:a9:6e:8f:4a:03:06:6d:20:63:8d:95:
95:d5:c1:37:8e:78:f4:a8:14:8a:66:de:38:6e:3b:
15:18:82:74:24:c7:ce:45:bc:03:d2:42:e8:0c:b1:
0e:46:61:4a:9a:c3:06:f1:1c:32:91:93:66:32:6d:
cf:31:de:24:d4:20:2b:ee:17:83:73:f3:21:4f:80:
1b:4f:45:13:b1:b1:67:e5:a7:e6:ef:95:01:80:e2:
3a:6f:ae:cc:4e:02:4c:89:9e:8d:d4:8c:b1:80:57:
e2:70:71:fb:93:6b:d7:37:5b:20:db:98:d4:f7:5d:
e5:aa:bf:34:88:e2:35:a9:bf:c5:2d:04:c6:29:53:
b5:d8:b0:df:86:1e:d9:1d:b5:7c:fc:2b:54:64:b6:
6d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:79:5B:AC:BE:76:B9:04:A8:BE:89:A7:F7:32:FA:C7:37:B5:35:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51FA0D58DAF011EF9D8B6394762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.181.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:43:9d:31:a9:74:ca:5b:aa:93:51:70:be:f4:80:44:37:bf:
78:5e:7a:55:aa:02:8e:1c:b4:4f:06:42:90:7c:25:56:e1:66:
07:72:d1:07:cd:f8:62:6a:4b:ed:e5:eb:b3:e1:c2:2b:be:83:
cc:24:45:fc:11:1f:85:c1:e4:d7:48:5f:17:eb:22:13:9d:a0:
a6:8d:06:2c:a4:74:44:58:62:d5:68:c7:fe:03:93:93:aa:57:
a0:ae:6b:0f:18:25:8c:67:a8:52:3c:2b:2d:3c:75:0c:6d:6a:
fd:f6:8b:ff:3b:70:e3:40:60:83:1a:15:f1:15:d7:ef:a5:9b:
ce:b8:37:11:d0:1f:67:96:29:f9:b1:c2:73:c5:cc:a5:14:20:
b3:a0:b1:58:c9:04:86:ad:bc:33:2b:60:60:de:7c:73:3d:92:
c5:0e:90:88:53:3d:87:7d:42:e4:b6:19:00:f6:d7:03:23:56:
cd:b1:80:c3:18:61:ec:88:6f:6e:25:94:1c:56:5f:f6:9e:21:
78:5e:24:0d:8f:97:f6:d8:f2:ed:31:c5:2c:2f:c9:6a:23:41:
ea:a1:4f:26:8a:a3:4d:ee:78:37:2c:3e:50:38:32:90:da:4f:
8c:36:9b:c3:0d:e8:c9:98:ce:d3:f2:9c:a4:35:4f:16:54:aa:
d9:28:8e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:22:23 2025 by rpki-client