Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A12BE482DAF011EF91991798762E951A.roa
File: A12BE482DAF011EF91991798762E951A.roa (raw, json)
Hash identifier: 8Uh9Gtgh0DfKNqnlrSekZEJJT4C7sTfy3uzs1o9b2rg=
Subject key identifier: 29:15:95:90:C3:B8:5D:DD:3C:AC:AF:C6:C5:2E:AF:60:DD:6F:61:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011141
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A12BE482DAF011EF91991798762E951A.roa
Signing time: Sat 25 Jan 2025 07:47:30 +0000
ROA not before: Sat 25 Jan 2025 07:47:27 +0000
ROA not after: Sun 23 Feb 2025 07:47:27 +0000
asID: 202656
IP address blocks: 45.195.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69953 (0x11141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:47:27 2025 GMT
Not After : Feb 23 07:47:27 2025 GMT
Subject: CN=67949712-e2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:a7:53:90:c4:b1:25:65:43:bd:7a:17:9b:
3b:01:d3:46:5e:23:01:7d:e9:13:32:dc:f1:e8:a4:
4c:72:9e:bb:c2:97:ab:bb:a7:f9:de:b8:f7:a0:7f:
86:80:bb:c6:e9:d0:61:11:a5:33:15:82:76:48:7a:
e3:9e:a3:1e:18:9e:28:2c:03:08:cd:ae:06:cb:18:
1f:3f:df:b0:fe:45:1e:54:29:17:3e:12:72:69:85:
47:43:11:3f:74:b5:01:3e:7f:17:98:2c:0a:18:9c:
c6:b4:b7:e7:fd:af:91:8d:16:2d:74:95:91:e7:75:
65:cf:73:fa:d7:b8:f8:8b:e4:b6:9e:6e:56:bd:37:
b4:14:54:9e:41:00:1e:04:ca:fd:85:2a:96:b5:9f:
57:eb:ef:09:d8:e8:66:a7:bb:75:58:56:46:1b:3e:
0a:5d:32:0d:5b:89:72:6c:6b:65:d7:8f:b3:3d:0f:
6d:61:b5:b6:d3:04:1a:71:92:3a:84:20:cf:51:2a:
fb:32:b8:8a:b0:a4:a3:b2:cc:11:8e:8a:8d:11:5e:
8c:8f:41:4e:70:fb:4a:03:dc:c3:60:bd:da:c2:ef:
de:2b:6d:10:93:46:87:70:73:21:bd:9a:67:51:de:
c6:e2:d2:2d:ca:aa:d3:d1:5f:c5:a9:4f:92:14:c2:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:15:95:90:C3:B8:5D:DD:3C:AC:AF:C6:C5:2E:AF:60:DD:6F:61:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A12BE482DAF011EF91991798762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.182.0/24
Signature Algorithm: sha256WithRSAEncryption
01:68:6e:96:98:26:c1:05:46:d4:7f:7d:34:d5:0c:b3:94:b7:
5d:64:27:f6:87:e2:e7:85:29:1e:80:83:05:77:8f:22:7b:8e:
58:4c:b7:50:ed:6a:b3:6b:62:64:4e:eb:21:54:0c:20:39:f6:
1b:33:5c:26:bf:cb:f4:fb:6b:5e:bd:c5:34:e8:92:c2:f6:96:
d5:00:7b:05:64:07:c0:97:39:4c:5f:3f:84:25:ca:32:87:00:
3c:0b:5c:20:f3:64:4f:07:b4:8e:55:72:7b:58:dd:1a:14:ac:
5c:be:40:1b:30:87:2d:7b:12:2f:1f:da:ba:11:87:80:cb:8f:
49:ba:09:0e:a2:ec:c4:d3:18:b1:42:e2:37:7e:78:4b:46:59:
7f:98:ba:db:71:bf:09:40:7e:a2:30:08:01:50:7c:b7:8f:0f:
b7:e6:48:41:ce:94:ea:5a:6d:93:78:c4:f7:c9:0b:11:d1:9c:
b3:5d:cf:09:61:92:76:63:8e:fb:df:85:3e:16:a4:52:e9:49:
4d:25:6c:e7:5e:41:b7:42:e7:65:ab:a2:6f:0c:c2:50:cc:82:
15:a9:2e:8f:ff:1e:c6:e8:0e:cb:b8:69:92:41:de:61:c2:ce:
e5:d2:28:f0:47:fa:9c:cb:5a:03:d3:9f:0c:d7:b0:0b:fa:a4:
54:e6:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:37:55 2025 by rpki-client