Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C2565E4C38C11EF9386A994762E951A.roa
File: 7C2565E4C38C11EF9386A994762E951A.roa (raw, json)
Hash identifier: VO6h2eSczEZ+4JFM973IuB0O3DqeINs15V7tLb5thvo=
Subject key identifier: 3E:92:DC:55:1A:15:D4:CC:DE:F5:48:5D:81:C7:DF:A8:BA:B7:00:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ECB9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C2565E4C38C11EF9386A994762E951A.roa
Signing time: Thu 26 Dec 2024 13:22:42 +0000
ROA not before: Thu 26 Dec 2024 13:22:38 +0000
ROA not after: Sun 12 Dec 2027 13:22:38 +0000
asID: 17561
IP address blocks: 45.196.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60601 (0xecb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 13:22:38 2024 GMT
Not After : Dec 12 13:22:38 2027 GMT
Subject: CN=676d58a2-c082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:a2:bf:9a:32:33:05:43:d2:49:58:05:17:
61:ea:26:97:2e:3d:56:36:9f:43:e8:aa:50:6a:fa:
7f:b4:c4:8d:f7:1e:d6:bf:dc:6f:f4:c5:91:4b:20:
4b:7d:59:e3:71:ed:06:27:bd:a5:e6:2f:cc:0c:f5:
be:8f:ae:c3:6e:22:c4:d6:aa:05:09:c4:7d:0d:e2:
8c:d4:f9:62:5c:41:a8:89:73:c2:61:a6:b1:83:2d:
58:f2:85:d7:b1:2b:a0:56:93:e7:2b:83:a6:5c:3e:
09:de:e0:11:0c:ed:1d:e1:17:2f:46:14:3b:ea:3c:
88:fc:41:9a:f6:eb:29:4f:4f:78:e8:b5:84:1b:4f:
e9:94:b1:ba:60:62:a4:35:9c:81:59:06:12:51:8a:
f8:92:e0:2c:9c:db:53:59:f2:6b:d5:6e:1e:6e:10:
75:b2:a4:cb:66:e0:9c:5d:91:d7:f0:e8:58:ba:61:
80:f4:27:d0:9d:8b:e7:3e:70:f3:1c:f3:ea:1d:ee:
ba:6f:53:ea:c6:f3:d5:e8:ea:6a:02:d9:33:5f:35:
f9:61:48:a2:24:3d:0d:85:d4:32:82:80:17:d8:b9:
6d:49:f8:f2:98:3a:97:57:ca:9f:2b:f9:77:d0:e8:
cb:05:b0:b1:7f:bf:d8:2b:38:a6:0d:cd:09:db:fb:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:92:DC:55:1A:15:D4:CC:DE:F5:48:5D:81:C7:DF:A8:BA:B7:00:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C2565E4C38C11EF9386A994762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.206.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5f:9d:6c:24:72:35:d1:46:7a:1d:70:7d:91:62:e4:b2:32:
f6:41:dd:d6:fd:1a:a5:b5:dc:73:2c:e3:f3:87:b9:94:4f:9b:
64:db:13:2d:8d:25:df:f1:22:5f:62:64:c4:67:52:d4:49:ab:
0b:47:ae:86:28:dd:ea:23:93:29:c8:cd:d4:70:13:38:92:19:
7e:90:81:c3:99:30:09:cc:c1:12:68:df:cd:53:0d:90:ab:71:
37:65:05:77:be:b2:f6:ff:b5:4c:51:e7:b7:03:b6:be:53:bf:
74:7b:00:14:3c:db:9b:40:17:27:d7:d5:f7:ea:fd:84:d5:c1:
c4:26:4b:df:cd:98:41:01:5e:0e:60:fb:47:e9:5b:35:1a:8f:
48:3d:30:1d:d1:bd:bf:61:8c:f5:68:80:3c:c1:2d:7d:5d:1a:
ca:02:a5:aa:31:7d:d7:3c:75:72:af:22:3a:cb:a5:d9:11:da:
ab:c8:80:bb:4f:f7:0c:88:7b:33:fd:1b:d8:53:03:5a:0e:a6:
0d:39:14:fa:ba:88:9c:ed:b9:a7:57:33:7d:52:d5:09:e6:6b:
a4:d0:3a:1a:fd:97:d7:8c:bb:6f:c8:95:17:45:43:26:91:58:
ae:ca:93:bf:56:06:c3:7a:a3:3c:4d:e8:d8:4f:58:3e:c3:a6:
79:17:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:24:22 2025 by rpki-client