Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A59CE58DAEB11EFA1D12F76762E951A.roa
File: 9A59CE58DAEB11EFA1D12F76762E951A.roa (raw, json)
Hash identifier: HOP2r/4f9qPUDI6yZpkwMDjsv4PjgyI9SuynW1lyW18=
Subject key identifier: 49:BF:0B:31:7A:CC:77:FA:07:06:A8:02:9F:1A:D0:44:5F:B3:C2:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011104
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A59CE58DAEB11EFA1D12F76762E951A.roa
Signing time: Sat 25 Jan 2025 07:11:31 +0000
ROA not before: Sat 25 Jan 2025 07:11:28 +0000
ROA not after: Sun 23 Feb 2025 07:11:28 +0000
asID: 202656
IP address blocks: 45.195.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69892 (0x11104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:11:28 2025 GMT
Not After : Feb 23 07:11:28 2025 GMT
Subject: CN=67948ea3-51d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:f3:6f:2b:3b:95:a9:aa:06:fa:99:b0:0f:
59:1d:d1:e3:5c:95:76:44:ef:33:48:68:7f:f8:46:
43:6e:88:59:8c:7d:75:a8:d5:67:f0:90:48:35:bd:
ee:70:31:cc:d3:5f:27:57:bd:e6:2e:72:ef:15:34:
b1:f0:ee:e4:f2:3e:c5:7f:f5:e2:0d:e8:9a:6e:e2:
ab:04:d9:54:c0:87:ba:ec:80:e9:9e:7c:59:a7:4d:
2f:a8:c5:b4:01:4c:7f:df:29:19:0a:a8:44:87:2f:
3d:e3:3a:47:41:fe:b0:d0:d6:7a:e6:fb:6c:22:be:
f7:06:a1:f9:4f:31:44:52:08:6b:49:12:55:91:75:
fb:c3:89:d8:d8:f7:21:14:40:be:06:6c:dd:d0:7c:
0e:29:bc:12:3c:a0:d4:af:07:1d:24:c3:9e:1c:7c:
07:89:6f:1f:e4:81:93:0b:4d:76:46:64:6a:a7:39:
07:35:21:01:5e:8e:a7:52:12:fa:a6:0d:df:77:33:
24:1d:71:2f:7f:f2:2d:0d:4f:6c:dc:71:b1:fa:4b:
59:00:b2:f0:fa:1a:b2:4e:91:6a:c5:ef:59:69:a0:
18:57:b2:17:8e:dd:8c:e9:a2:1b:ec:fb:d0:d8:64:
86:eb:94:a0:04:9c:48:49:46:07:04:cb:2a:ac:37:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BF:0B:31:7A:CC:77:FA:07:06:A8:02:9F:1A:D0:44:5F:B3:C2:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A59CE58DAEB11EFA1D12F76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.164.0/24
Signature Algorithm: sha256WithRSAEncryption
69:bd:f8:31:80:e0:f2:81:6d:f7:07:18:e4:eb:d2:64:0c:0c:
0c:f6:bc:ad:84:af:40:0f:23:b8:be:d4:20:31:60:30:17:ae:
69:ec:a3:2f:58:21:c1:05:c0:21:1a:ba:a9:36:bb:45:d5:a8:
39:75:ce:91:d7:27:35:55:ef:bd:9f:f2:87:bc:05:6c:4d:41:
60:47:5e:01:a6:7e:51:be:90:44:09:df:13:91:3b:12:da:ff:
26:48:2f:b6:7a:4d:1b:05:23:b8:15:64:8e:71:33:a3:20:3c:
f7:cd:c7:b5:70:83:18:50:c4:2f:96:e7:aa:64:00:b4:a8:e2:
ca:af:e1:09:73:30:6e:16:6f:39:62:14:6a:de:d1:c2:7b:83:
f3:20:a3:36:aa:c2:f2:1c:29:89:03:f9:38:2a:16:36:39:13:
2e:94:a7:17:e9:0f:26:03:6f:16:99:7a:94:7a:e2:a4:68:ed:
75:4f:14:8a:db:ee:a8:0a:75:a6:85:e4:d0:ab:f4:ad:70:55:
32:c4:8c:74:78:5a:a5:03:eb:ae:fb:f3:47:9a:ed:7c:e8:ff:
2a:fd:9c:69:37:ee:b6:ed:75:08:be:07:0a:68:ee:4c:d6:94:
68:18:c6:ac:46:1e:af:32:d8:ec:94:95:1a:5b:64:b5:c0:2f:
dc:15:70:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:30 2025 by rpki-client