Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF3734ED7C611EF80EC3864762E951A.roa
File: ABF3734ED7C611EF80EC3864762E951A.roa (raw, json)
Hash identifier: ocAsWUAdLCPBJ3x2+keTMpdrnes8NVwx49k9HG0XJNQ=
Subject key identifier: 9B:22:89:0E:F8:F9:21:90:DF:FA:1D:0D:FE:1C:CF:9A:D5:86:47:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF3734ED7C611EF80EC3864762E951A.roa
Signing time: Tue 21 Jan 2025 07:09:36 +0000
ROA not before: Tue 21 Jan 2025 07:09:32 +0000
ROA not after: Tue 25 Feb 2025 07:09:32 +0000
asID: 202656
IP address blocks: 45.195.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68788 (0x10cb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:09:32 2025 GMT
Not After : Feb 25 07:09:32 2025 GMT
Subject: CN=678f4830-ba51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:bf:77:a5:04:74:47:67:95:e1:df:f8:6d:
20:ae:15:9b:ef:b8:52:0d:1a:fb:d4:12:d4:38:bf:
d8:39:b4:4d:6e:df:0e:e0:ee:39:03:e6:c0:29:f2:
49:f6:00:28:a7:e3:01:30:c4:ee:e2:1c:6c:dc:1b:
2e:73:e2:7e:23:7f:14:07:1b:5e:ed:c4:c5:80:6b:
d6:07:46:d2:0f:d3:73:33:ce:67:b9:45:73:d1:b7:
aa:3b:bf:c3:a6:f3:67:fa:c2:9c:59:38:c2:d7:f5:
87:1b:3f:3d:05:66:30:ad:bc:b0:e5:c0:14:f6:7e:
83:4a:b6:19:62:e8:a2:98:30:b3:04:dd:64:e4:43:
fb:0a:4b:f8:1b:c3:c3:17:c9:95:41:da:58:e9:e4:
65:c9:8d:b4:23:6c:35:cb:c6:ad:fc:58:ac:e5:12:
b2:c5:32:58:49:49:a9:d4:c3:97:5a:21:70:9a:31:
71:2b:4e:17:20:7a:b8:8b:eb:84:d1:53:1e:e0:d2:
75:f1:6f:b5:ad:f4:11:0a:31:7e:36:b1:a7:01:8c:
8c:f1:d4:2a:df:c2:21:43:ba:64:ad:ab:c3:2b:dc:
5c:83:e9:0e:62:d2:af:5d:98:0c:f1:a5:1d:ad:34:
b4:1f:56:ab:6b:79:c5:02:76:0b:ac:a0:79:2b:c1:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:22:89:0E:F8:F9:21:90:DF:FA:1D:0D:FE:1C:CF:9A:D5:86:47:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF3734ED7C611EF80EC3864762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.208.0/24
Signature Algorithm: sha256WithRSAEncryption
36:01:20:89:2d:bd:62:ff:01:1a:70:39:dc:0b:89:17:99:79:
ee:57:d8:e7:c9:cb:d1:b9:9e:2e:ac:ca:82:1d:45:28:d5:2f:
de:28:52:16:49:3e:58:58:f8:31:61:dd:af:b7:eb:b4:9e:da:
8e:92:e9:98:50:d8:4b:bd:19:e1:29:b0:75:c5:d3:2f:0b:f5:
b9:94:27:d9:5f:c1:90:30:1d:02:cf:6c:36:a9:ba:a7:c3:0a:
69:81:fb:ca:ab:bc:a2:ff:e6:09:13:28:57:b4:e9:5f:b4:df:
6d:8c:e5:5c:48:be:16:20:f7:98:d7:44:19:b6:69:c4:04:af:
e0:53:0e:c5:77:de:7a:ca:e6:6d:43:80:f6:2d:7d:61:48:e6:
80:2a:86:ea:38:fe:ed:80:03:ba:32:ad:ed:d2:3d:95:0a:d7:
0a:f2:3a:bc:65:d2:b1:c3:1e:94:52:2f:86:8d:39:d5:60:91:
a6:36:f7:a8:f8:8c:fb:58:3a:ac:08:f6:ea:c1:72:48:24:2d:
b9:1a:dc:b1:66:0f:f0:4a:30:24:ed:02:c3:b5:1d:6e:f5:fe:
d7:f1:0e:98:38:a5:93:ea:f5:05:35:36:c1:3b:30:4a:d0:d6:
df:fc:37:ba:9b:64:10:d7:be:84:15:1a:83:09:5f:2d:ca:ba:
88:25:58:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:38 2025 by rpki-client