Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58590D10DFEC11EF86A145AC762E951A.roa
File: 58590D10DFEC11EF86A145AC762E951A.roa (raw, json)
Hash identifier: tl4lZHqrZqvHP9VeZOFFxoXs4etp70MoZ+QR4o36Bvg=
Subject key identifier: 20:F6:94:AA:3D:54:01:9F:65:D3:D0:82:C6:41:91:EA:A2:59:B7:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011647
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58590D10DFEC11EF86A145AC762E951A.roa
Signing time: Fri 31 Jan 2025 15:59:26 +0000
ROA not before: Fri 31 Jan 2025 15:59:22 +0000
ROA not after: Wed 05 Feb 2025 15:59:22 +0000
asID: 39600
IP address blocks: 45.195.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71239 (0x11647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 15:59:22 2025 GMT
Not After : Feb 5 15:59:22 2025 GMT
Subject: CN=679cf35e-7514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:d4:46:a1:ff:e1:73:3f:e5:37:dd:3b:07:
08:ff:de:ce:d2:5c:aa:1c:1f:11:36:c7:94:11:63:
d1:04:70:4f:eb:04:0b:59:ef:82:2f:1c:19:6a:d9:
9f:19:a7:c6:a3:8f:1f:ba:82:f0:66:51:c7:99:84:
33:98:1f:84:3d:6c:5d:41:61:1a:3a:30:94:31:2f:
f7:94:f0:6c:54:f7:20:d0:13:7c:07:b0:83:31:00:
88:1d:e1:8c:44:a4:67:ff:29:64:51:16:62:5b:2a:
1f:94:9e:9d:4c:49:2a:2c:df:63:11:cd:7a:a0:12:
08:dd:f6:59:7b:03:1a:6e:fd:13:71:a7:4b:ef:79:
29:97:ae:fc:a4:cb:53:93:aa:c0:74:d3:a9:a8:78:
ed:0e:69:dc:14:2b:3b:6b:5c:97:83:88:b3:a5:d2:
f9:5a:59:05:d7:fa:40:e8:c7:ef:83:64:a6:1b:d5:
57:73:e4:d1:8e:9b:52:e5:09:b4:44:ea:6f:8f:18:
0f:c1:81:02:df:c6:47:61:65:9a:80:5e:f8:ca:23:
b9:d0:75:c6:30:af:24:20:a7:68:ef:ea:c7:2c:a3:
5e:53:06:a9:5e:7a:b2:2f:21:59:df:80:3d:b2:ab:
b8:a8:92:f8:53:6f:82:1c:41:95:8a:99:ea:7b:42:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F6:94:AA:3D:54:01:9F:65:D3:D0:82:C6:41:91:EA:A2:59:B7:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58590D10DFEC11EF86A145AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.213.0/24
Signature Algorithm: sha256WithRSAEncryption
44:db:67:27:d0:0a:fb:8e:c1:24:99:cb:f9:47:a4:4b:3c:86:
a9:50:28:d1:b5:65:83:d5:b3:de:e9:22:3d:95:45:a9:ee:8d:
0f:b0:f0:c0:f9:6e:29:38:06:42:bd:5b:e8:ca:36:ac:d8:8f:
eb:ed:79:76:f4:3e:37:8a:f9:7e:a9:a4:de:30:45:68:e1:64:
09:6e:a5:9a:0d:36:b7:83:51:08:13:21:b8:79:d8:21:d3:7c:
f3:45:16:2d:59:44:48:58:d4:9f:67:c4:91:cb:63:6d:68:03:
92:25:fd:df:39:53:c7:5d:f8:9c:13:d6:77:5c:b6:af:93:ad:
91:b9:22:73:3b:3f:7b:20:b6:89:e5:70:e3:b2:a8:be:65:c6:
b3:4f:3d:d8:94:fb:a0:75:e2:79:53:4b:ac:99:62:ef:a7:bb:
93:91:04:26:65:0b:99:1d:13:5c:bc:3c:e3:50:72:b7:0e:2b:
dc:8b:cc:b5:45:2a:1c:ad:8e:7a:a8:4f:59:62:f0:ff:50:35:
48:7e:13:90:b1:48:08:4c:d8:d1:ae:a1:de:15:55:69:d8:72:
aa:98:d0:5e:7c:1d:b3:7c:50:eb:35:5b:6e:37:cf:a2:ea:89:
fe:26:af:36:f6:55:18:b6:d2:14:25:57:8f:6c:46:e8:d3:72:
ec:d0:28:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:44:24 2025 by rpki-client