Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C56F0808DAEE11EFAF41A48A762E951A.roa
File: C56F0808DAEE11EFAF41A48A762E951A.roa (raw, json)
Hash identifier: LurPQLZCEVpMiuCJXNOYqxKj1VEjzS+5Qf3ESY+fLr4=
Subject key identifier: 87:5B:29:12:DD:AA:82:09:80:55:4D:EF:C9:C1:E5:89:60:BD:83:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011131
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C56F0808DAEE11EFAF41A48A762E951A.roa
Signing time: Sat 25 Jan 2025 07:34:12 +0000
ROA not before: Sat 25 Jan 2025 07:34:08 +0000
ROA not after: Sun 23 Feb 2025 07:34:08 +0000
asID: 202656
IP address blocks: 45.195.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69937 (0x11131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:34:08 2025 GMT
Not After : Feb 23 07:34:08 2025 GMT
Subject: CN=679493f4-5c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ef:d7:f3:10:85:e5:a9:56:17:80:9e:b1:7a:
91:45:00:ec:5f:83:ec:ca:38:b1:18:36:51:3c:ab:
03:94:24:fc:b5:96:26:df:77:2a:5e:68:f7:24:33:
4c:3e:48:29:52:0a:db:86:14:ae:0f:35:35:cf:38:
a6:17:d7:85:2f:ef:67:f3:9e:92:cd:9e:df:61:ab:
72:a2:44:4f:ee:08:4d:e4:11:7a:bb:f6:7e:10:86:
7d:6f:e0:c1:c8:c7:ca:34:db:0e:81:4b:bb:19:55:
44:c6:c9:8b:f5:31:66:bd:a4:00:d9:d9:bd:00:5a:
9f:20:f5:9c:40:a8:5d:8f:6d:08:1d:d6:ef:a5:34:
4e:c4:c2:64:43:ee:ff:fd:ef:12:9e:bc:ea:86:dc:
db:86:48:86:2a:0d:c4:8e:40:da:03:e6:b4:84:77:
23:7c:9f:53:e9:08:00:f6:df:7f:66:04:b1:d2:d1:
64:62:2e:38:db:73:c2:ee:19:d5:13:c0:d3:cd:4f:
e4:f3:7c:20:6d:bf:99:c6:a3:bf:46:aa:7a:1c:54:
40:80:31:95:2c:8d:58:83:9b:0a:c7:13:db:a8:00:
6d:5e:dc:f1:e7:db:da:c3:4c:8e:de:11:45:9e:30:
17:ac:eb:ff:c6:f2:50:6c:77:61:7f:0a:2b:4b:8a:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5B:29:12:DD:AA:82:09:80:55:4D:EF:C9:C1:E5:89:60:BD:83:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C56F0808DAEE11EFAF41A48A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.176.0/24
Signature Algorithm: sha256WithRSAEncryption
64:26:ea:ed:ab:08:d0:b1:82:28:9c:ae:81:79:37:8b:e6:b2:
13:43:3f:55:42:13:8f:14:76:76:74:00:5f:86:5b:0f:b3:be:
e3:c2:ca:97:4d:a6:d7:74:67:a2:b3:26:58:c9:44:ad:43:86:
51:71:1e:4e:2c:72:ea:c5:2c:00:6e:60:45:55:94:dd:0c:74:
d2:0e:f5:14:49:24:fe:d7:f7:d0:5f:45:cd:a6:55:ee:61:06:
c8:63:88:72:59:82:81:29:4f:65:3e:dc:b0:17:65:e0:01:2c:
e4:b2:92:a7:01:34:71:c4:4a:b4:07:ee:cb:7d:e8:a4:28:c3:
a5:e1:c1:5d:a4:65:b2:1b:a1:c8:fc:91:ef:9e:8c:61:32:d7:
90:81:49:c9:24:f1:e6:41:4d:17:42:e4:75:4e:8d:97:01:7b:
d8:e1:da:f0:b1:cc:9e:03:45:b8:f5:0c:c9:75:42:66:01:45:
26:50:dd:dc:8a:d2:87:ce:9d:f6:88:a6:3e:e7:21:db:09:8f:
eb:fb:28:56:a6:83:63:c3:5d:16:f9:ba:77:f0:93:f5:fb:e6:
f7:10:41:b5:93:fe:0c:85:e2:3c:29:fd:6f:e6:fc:fb:b4:39:
ca:88:31:11:69:1e:35:95:1b:d2:1b:1c:77:a3:f4:b9:bd:d3:
e7:05:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:33:04 2025 by rpki-client