Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D57D9D6DB0011EFA4F5D480762E951A.roa
File: 5D57D9D6DB0011EFA4F5D480762E951A.roa (raw, json)
Hash identifier: zX2mogyKH5nP5KSPQSj5cq7rsG8/aJo7+59JnW+Bmig=
Subject key identifier: 24:C1:18:D0:E4:D3:58:CF:16:A2:80:1C:73:61:A6:50:72:5F:69:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D57D9D6DB0011EFA4F5D480762E951A.roa
Signing time: Sat 25 Jan 2025 09:40:08 +0000
ROA not before: Sat 25 Jan 2025 09:40:05 +0000
ROA not after: Sun 23 Feb 2025 09:40:05 +0000
asID: 202656
IP address blocks: 45.192.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70081 (0x111c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:40:05 2025 GMT
Not After : Feb 23 09:40:05 2025 GMT
Subject: CN=6794b178-f9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:23:9b:22:a8:2b:15:75:26:1f:be:97:70:
0b:4e:dc:19:89:8f:70:10:a0:81:6d:e4:fb:48:19:
d6:a7:a9:f0:2d:13:ee:a7:1b:2e:7f:31:6d:f6:a0:
b8:9a:31:29:8b:41:3d:5f:dd:70:8a:a2:6f:51:ce:
62:4b:db:1f:95:08:66:6a:e3:ee:1f:66:62:3b:b2:
3a:f0:88:fc:30:42:2e:ac:0f:84:70:e8:b5:3c:72:
12:c1:f9:bc:37:fc:1e:05:17:ae:9e:e1:86:47:b3:
78:a0:2a:e2:5a:54:8f:4c:5e:19:ee:38:88:9a:91:
e5:55:d1:7c:1a:a8:3a:ee:5e:1a:d1:f2:e0:12:c3:
90:79:34:d4:58:c4:f7:67:0d:d8:d7:82:02:7a:29:
11:90:d8:9d:95:9b:e2:43:6a:f0:af:d4:c3:d0:bc:
63:23:5c:33:b8:00:36:b6:04:7b:87:b7:53:5a:10:
4d:c0:4a:b1:5d:c4:8d:cc:ea:5f:d4:a4:ac:ce:86:
2b:e3:52:22:e6:c7:69:32:25:e3:2a:91:3b:34:4e:
14:d0:91:8e:06:31:d9:18:75:98:e8:55:41:23:bb:
af:e2:73:6f:e9:69:22:b8:4d:9b:f9:8a:bb:e5:bb:
cf:39:69:0a:f5:79:0a:97:f3:32:2d:f5:74:c0:20:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C1:18:D0:E4:D3:58:CF:16:A2:80:1C:73:61:A6:50:72:5F:69:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D57D9D6DB0011EFA4F5D480762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.59.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5f:19:8c:33:87:4f:1f:f8:c1:8a:92:e5:25:34:08:d7:fb:
c9:08:5e:d1:bc:e9:a3:9e:8c:b4:b8:52:84:ea:c6:29:4a:18:
e2:da:9c:ab:c7:c5:e5:df:99:88:ab:ac:da:7e:32:ca:94:39:
f3:c6:63:72:f6:ba:bb:46:c9:f1:18:42:20:ab:4b:f8:af:db:
ae:af:7a:53:48:2c:8c:30:0a:c8:1d:c7:b5:66:51:00:d7:0f:
c0:06:19:1b:77:19:4a:db:cf:9b:3c:ed:58:05:9e:86:59:cf:
c6:fd:df:77:57:95:25:63:20:8b:c6:b6:38:ca:07:7f:f2:fd:
86:36:e0:a0:23:a7:25:a9:f5:8f:c9:a5:ea:63:52:59:0b:f9:
46:c5:84:ae:0a:e8:7f:10:96:de:3f:ba:54:49:a4:20:6b:94:
94:4a:bb:d2:f5:c0:dc:82:5e:44:b4:c9:d0:f9:69:3d:f1:e8:
7b:b7:69:ed:9e:da:9a:89:ca:cf:e6:9c:f1:96:13:66:50:d0:
3a:08:c0:13:24:90:5f:42:21:ac:07:db:b1:d1:a0:68:bb:05:
fe:03:45:e2:97:9e:1b:a0:13:1a:2b:99:db:07:ad:06:b1:f1:
3e:79:69:04:c8:4d:f3:13:47:d1:0f:82:0e:25:a7:a9:ed:e7:
1e:d7:b2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:37:43 2025 by rpki-client