Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54F1896ED80211EFBF3FAC67762E951A.roa
File: 54F1896ED80211EFBF3FAC67762E951A.roa (raw, json)
Hash identifier: n9CeNEQeDyjOyBWHNUy2PBV6XJzi0E5Sl7ydKuim0kY=
Subject key identifier: 51:1D:74:46:1F:78:7B:E5:D2:BA:9F:87:53:B8:10:ED:21:4F:CB:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E02
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54F1896ED80211EFBF3FAC67762E951A.roa
Signing time: Tue 21 Jan 2025 14:16:40 +0000
ROA not before: Tue 21 Jan 2025 14:16:36 +0000
ROA not after: Sat 01 Feb 2025 14:16:36 +0000
asID: 62240
IP address blocks: 45.192.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69122 (0x10e02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:16:36 2025 GMT
Not After : Feb 1 14:16:36 2025 GMT
Subject: CN=678fac48-6ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:64:2e:cf:d8:3e:5a:04:a6:74:44:45:7d:
58:95:c0:57:db:b6:d3:31:ac:b2:3b:34:b2:fb:91:
72:21:71:a2:7d:e4:39:9c:b4:d5:dd:4c:89:c9:c6:
bd:42:2c:01:f7:80:90:28:33:7f:94:12:a4:bb:e7:
14:d9:6a:e7:ca:ed:e6:b2:ee:43:02:f7:ef:f4:77:
3d:f9:18:17:77:b3:be:da:46:59:35:41:f2:2d:35:
5a:f1:0d:33:9d:f6:c9:e5:8e:1a:ef:3e:25:53:0a:
fe:ca:d4:9d:cf:88:cf:6b:c6:fa:49:2a:26:d4:e2:
a2:d3:fd:02:92:98:1d:8a:7c:00:14:a5:9e:b1:5d:
09:4e:98:e2:a0:3e:69:ba:0b:73:e2:12:2f:4f:1b:
1d:6f:46:70:62:67:7e:96:24:20:d7:59:59:7a:09:
4d:f3:de:89:d2:78:51:88:b1:00:8c:bb:4b:97:f7:
56:31:56:d1:e0:c1:47:98:88:bb:fc:c9:23:e0:d4:
94:71:aa:2c:9f:1f:54:21:4b:2e:c7:16:fc:d0:e1:
1b:b2:6a:3b:5b:0b:38:1a:bc:3b:e1:e4:e7:7b:2f:
0f:d0:2a:ef:67:b9:fb:18:47:5c:68:bd:8c:b6:cc:
8a:cf:63:64:ef:30:cb:2d:81:8c:ae:93:35:55:6f:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1D:74:46:1F:78:7B:E5:D2:BA:9F:87:53:B8:10:ED:21:4F:CB:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54F1896ED80211EFBF3FAC67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.36.0/24
Signature Algorithm: sha256WithRSAEncryption
33:89:1c:87:8b:b3:68:32:0a:f9:c9:64:cd:aa:29:3b:b0:52:
ce:09:44:6d:1b:eb:97:a2:b8:d3:bd:0c:5a:cf:76:98:5b:6a:
db:a0:b8:8a:ee:04:b7:32:e8:55:b0:cb:4b:aa:52:e4:a7:b0:
6a:22:44:20:ac:07:67:6a:f9:3c:0d:39:24:4b:bb:db:75:2c:
a8:cb:96:4b:22:c3:74:d6:78:e8:e0:1d:bf:0d:4b:2c:d2:a0:
ad:22:42:63:bb:22:68:a4:ef:c7:e0:3b:c0:4d:6a:07:5e:cb:
bd:b9:a6:a4:3c:a1:76:95:6c:f1:2b:2d:ef:91:e8:59:f2:5b:
db:87:f4:0a:4a:8a:f5:1f:41:43:e7:c6:70:23:b5:41:06:8b:
44:5f:cd:35:3b:68:9f:80:bd:ce:1e:80:d8:4a:ef:d0:c5:f9:
1a:01:ed:4a:88:7e:0d:af:64:54:e8:48:b8:3d:04:bb:86:4f:
90:c7:20:98:0a:a4:b3:f0:e8:38:e5:73:c9:b1:e9:f1:72:a5:
78:63:0c:48:e7:06:4c:a8:e0:ba:c1:6d:b7:d0:a2:1b:1d:01:
27:0e:c4:24:2d:30:29:fd:65:0f:dd:78:37:0f:6e:9f:94:89:
fa:5d:69:e1:7d:a0:95:26:dc:04:88:8f:e9:d8:ce:d5:ac:0b:
07:2d:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:10:43 2025 by rpki-client