Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/958AC228DB1E11EFB5BE394B762E951A.roa
File: 958AC228DB1E11EFB5BE394B762E951A.roa (raw, json)
Hash identifier: aY+xr7rEZ1XNQA8WAp8RAvALPPvXaglNxtvOhWB59U8=
Subject key identifier: E9:EE:D8:98:69:E1:20:A2:08:B1:4F:27:F4:B4:43:F8:86:16:85:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01126F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/958AC228DB1E11EFB5BE394B762E951A.roa
Signing time: Sat 25 Jan 2025 13:16:28 +0000
ROA not before: Sat 25 Jan 2025 13:16:24 +0000
ROA not after: Sat 01 Feb 2025 13:16:24 +0000
asID: 273135
IP address blocks: 45.195.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70255 (0x1126f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 13:16:24 2025 GMT
Not After : Feb 1 13:16:24 2025 GMT
Subject: CN=6794e42b-5f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:ca:ae:3a:12:22:6b:49:7a:73:bd:91:bb:
26:5c:eb:2c:05:04:60:c0:6a:33:d1:ba:3c:0c:c1:
37:d1:18:af:fd:5e:04:89:fe:26:41:1a:06:64:37:
1f:6c:b8:5e:a3:ce:17:1a:cf:e9:3c:8d:a2:27:24:
60:1f:41:99:fb:03:e8:76:37:f9:e0:e6:74:ec:97:
41:e6:62:47:99:b8:9a:90:da:5a:61:21:f7:d8:e6:
2a:5c:51:db:31:42:f6:51:04:11:90:1e:e1:d2:4c:
e2:64:62:5e:8a:ca:9e:4a:02:68:a8:d4:13:aa:a3:
e1:65:5b:69:0c:48:28:16:16:17:fc:3c:93:6c:ab:
9d:c7:b0:08:0f:6e:d7:53:a8:d0:c2:e0:8b:67:87:
ce:03:56:f4:a7:b1:c0:ce:07:bf:50:17:e5:31:73:
9e:9f:e3:87:f2:c7:1e:02:ce:a7:b7:eb:46:01:7f:
48:f0:4f:cb:b9:86:71:33:4c:da:75:a1:0f:90:00:
ad:b1:2b:b8:b0:9b:51:11:d0:c0:9b:2a:53:50:c6:
3c:42:33:c6:aa:c1:01:e4:14:24:43:bb:c6:26:16:
e6:9b:95:70:de:98:0b:af:5a:20:64:9d:d3:c8:a5:
2b:fe:86:9a:a4:40:e2:31:21:ba:01:50:62:b1:8d:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EE:D8:98:69:E1:20:A2:08:B1:4F:27:F4:B4:43:F8:86:16:85:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/958AC228DB1E11EFB5BE394B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.15.0/24
Signature Algorithm: sha256WithRSAEncryption
36:31:9a:21:e9:d1:f4:52:13:dd:23:91:2f:7d:a9:6f:b8:df:
82:df:47:52:96:d6:c6:a1:38:22:75:d7:14:0b:44:59:de:e5:
d9:4b:58:5c:a0:b0:b5:8a:20:6f:6d:78:75:58:bc:82:89:e7:
af:fd:ae:f8:53:a9:bb:1d:f9:94:e0:03:2c:3b:18:5f:a9:1f:
1f:ef:a6:41:2a:45:5c:a7:38:6e:d5:5f:ab:5c:3c:b5:ca:e1:
e1:a8:be:6f:6b:8c:ef:45:06:10:f2:c3:ee:35:c4:a7:3e:78:
cb:8c:c0:aa:80:4b:f6:6c:c1:d0:43:30:f2:d3:56:36:cf:c6:
d7:2e:d8:06:14:05:16:9c:3c:cc:ba:5c:fe:cb:dd:26:c9:f1:
28:ff:7d:0f:fb:a9:76:d4:88:12:80:6a:0b:09:49:70:05:8c:
32:af:2a:2b:e9:5c:e1:be:07:f2:ff:5b:62:51:07:ed:b0:13:
06:53:a3:d6:49:d5:68:c3:86:7c:02:3d:5d:91:17:81:02:2f:
cc:6f:50:79:cc:f5:ad:4f:3b:bc:c3:67:44:6a:93:27:bb:6f:
58:68:d8:dd:d4:a2:73:2d:15:10:63:3e:f9:cd:8c:63:ce:22:
b7:0f:ac:6d:b8:55:46:77:3b:7c:c5:f5:ad:05:3f:49:e2:1f:
6f:7e:62:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:29 2025 by rpki-client