Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D39FA83CD57C11EF91758369762E951A.roa
File: D39FA83CD57C11EF91758369762E951A.roa (raw, json)
Hash identifier: 2X7Fnv4DzZzUqoXvrRNetIgJq/31czMHsZ54GsWNrv8=
Subject key identifier: F3:02:74:75:44:68:B7:2B:E3:D3:FC:12:0C:39:34:42:C9:13:FF:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B41
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D39FA83CD57C11EF91758369762E951A.roa
Signing time: Sat 18 Jan 2025 09:15:57 +0000
ROA not before: Sat 18 Jan 2025 09:15:54 +0000
ROA not after: Fri 21 Feb 2025 09:15:54 +0000
asID: 131471
IP address blocks: 45.195.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68417 (0x10b41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 09:15:54 2025 GMT
Not After : Feb 21 09:15:54 2025 GMT
Subject: CN=678b714d-ba37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:ad:b0:49:ca:75:2a:7a:4f:3d:04:e6:9c:
66:11:e2:28:12:28:29:53:0b:ba:2f:a9:a8:72:ca:
00:e3:e4:c9:a4:5c:69:4f:e6:8e:be:5a:b3:3a:a2:
6b:e6:ed:03:b6:d4:a7:95:58:55:8c:4d:e9:0d:49:
d3:a4:10:9f:63:49:9d:3d:17:10:41:e4:6b:f1:89:
04:bb:05:2e:7b:53:76:17:cc:a0:e8:cd:27:fe:8a:
6a:b6:83:f4:a5:4a:11:1b:a2:5a:af:07:7d:af:be:
6b:15:9c:68:dd:57:f1:56:2c:75:cd:4e:c7:fe:c8:
d4:1e:74:ff:3d:11:a2:ed:e2:ca:19:13:e2:7d:60:
95:99:37:b9:02:98:ce:72:04:76:08:49:73:65:2a:
b0:0e:c9:4e:1e:91:8a:18:eb:0c:78:8c:ca:42:e3:
70:cf:89:9d:cb:0d:4a:29:86:7a:5e:0a:13:f5:25:
28:02:7c:cb:4f:63:00:8b:d3:40:c8:df:bd:72:8e:
ad:10:1e:97:3f:fd:45:37:86:2d:5d:29:49:ab:21:
27:6d:35:97:9a:68:ab:9a:2b:bf:9c:5d:ea:14:a0:
bc:7d:cb:b1:bc:b5:70:f9:6e:8f:ca:f6:d8:67:ce:
cb:da:6b:34:dd:87:d8:56:5d:a8:9b:84:6e:26:dc:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:02:74:75:44:68:B7:2B:E3:D3:FC:12:0C:39:34:42:C9:13:FF:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D39FA83CD57C11EF91758369762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.131.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f1:74:38:cf:71:e2:28:58:e7:bd:3a:0b:65:f5:40:da:f5:
54:57:52:0e:e2:ab:56:41:9d:6d:88:66:15:4b:24:da:32:37:
ae:ea:48:fa:cb:4d:e0:c1:f8:4b:c2:13:e8:9d:3d:eb:63:a0:
3c:66:d0:c4:83:d9:d5:80:20:8c:cd:32:48:5a:91:42:5d:da:
44:e9:ff:05:85:4b:af:85:a7:28:5a:5f:d1:21:d9:7e:b0:39:
be:64:7e:b0:12:ab:5e:f2:01:1e:5f:d8:ec:36:f1:e4:89:39:
30:d5:78:35:94:a3:15:19:f5:76:d0:8c:5e:d9:07:17:48:2c:
3e:b0:7d:bd:56:58:33:d4:44:48:ca:9e:3d:85:ef:49:f1:cd:
87:69:6f:82:1a:1f:7b:31:a7:67:25:43:f1:f4:64:83:69:a9:
79:1f:91:a5:39:2a:72:06:93:b5:5f:98:6a:8d:f9:b7:14:b9:
89:66:9a:23:44:c6:27:17:69:27:af:68:0e:e9:76:a6:98:45:
6c:00:cf:eb:97:c6:23:e6:f0:fd:97:a9:06:ef:2a:f8:c0:9c:
48:d0:73:3f:fa:1d:17:24:e5:e1:40:b5:48:60:59:b9:93:92:
6a:79:ef:2a:b7:bc:b9:54:2e:a2:77:53:cd:81:69:e9:7b:8a:
b2:02:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:35 2025 by rpki-client