Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E32C165CDBEC11EFB4500FB8762E951A.roa
File: E32C165CDBEC11EFB4500FB8762E951A.roa (raw, json)
Hash identifier: legH+MKoHzpi5EeXc3UTdGqWW9bwf+3p63cUBUd4abc=
Subject key identifier: 25:F8:B0:30:35:F3:09:B5:CB:37:D4:E6:3E:78:B1:66:77:0A:C9:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E32C165CDBEC11EFB4500FB8762E951A.roa
Signing time: Sun 26 Jan 2025 13:53:14 +0000
ROA not before: Sun 26 Jan 2025 13:53:10 +0000
ROA not after: Fri 07 Mar 2025 13:53:10 +0000
asID: 205125
IP address blocks: 45.194.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70592 (0x113c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 13:53:10 2025 GMT
Not After : Mar 7 13:53:10 2025 GMT
Subject: CN=67963e4a-60bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:ac:0d:a9:90:89:f8:96:57:04:80:0f:1a:
b9:fe:1f:86:2f:6c:25:4c:8c:d4:aa:e1:0c:36:cc:
8e:95:e4:8d:fb:5b:12:eb:55:db:7d:e5:65:35:4a:
55:87:cc:59:7e:23:2f:9f:7c:96:0d:f6:27:fd:6f:
7e:fe:6f:55:59:c4:5a:db:c6:ca:41:a0:e2:ff:7d:
fd:2b:92:b8:2c:61:f7:f6:e2:37:a7:f4:d4:f9:c7:
a8:cf:7a:39:67:53:28:17:e6:16:d5:fa:73:cd:33:
bd:55:01:19:d4:a7:f1:82:dc:f3:e6:ee:1f:99:c1:
bf:03:62:d9:1f:8b:e9:49:56:d9:34:51:fc:f0:b9:
5c:c3:4b:cb:b2:c8:5f:4b:40:c4:36:20:53:3d:22:
b3:d8:c8:a0:3a:e4:48:71:c9:1d:0c:65:6e:cc:c0:
81:4c:95:6c:a4:20:fb:a6:1f:c3:3d:b0:64:51:d1:
de:d1:06:7b:bb:86:2a:43:20:2d:8c:88:27:04:23:
ea:60:b4:08:00:09:03:ff:40:60:c8:71:a0:dd:26:
07:c9:d7:6d:3c:a1:fa:04:d4:1f:4b:35:45:8d:bf:
67:98:68:47:0f:cb:b9:a6:01:22:4b:14:84:cb:73:
04:c8:26:bc:f3:15:74:cc:9d:21:9c:0b:24:e5:67:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F8:B0:30:35:F3:09:B5:CB:37:D4:E6:3E:78:B1:66:77:0A:C9:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E32C165CDBEC11EFB4500FB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.3.0/24
Signature Algorithm: sha256WithRSAEncryption
96:28:e8:cc:ef:d3:55:69:6e:79:50:8a:52:bc:5d:1e:1b:a9:
b4:8d:61:0c:30:35:a0:40:63:4c:07:cb:93:ed:c2:0f:bb:9b:
5b:e3:1c:42:4d:f4:57:25:ed:67:e0:65:67:0d:7d:9e:7a:b2:
fe:8c:ec:71:8b:75:73:10:ff:3d:de:b1:83:b0:49:6e:9a:7a:
89:00:1c:ab:65:2f:74:ae:fd:ce:bd:a6:8b:a7:1e:c3:fa:80:
5a:2c:62:7b:05:b6:ac:f1:e8:42:5d:e7:1d:2d:7b:07:15:df:
35:7b:ed:11:6e:5e:05:23:71:c9:39:d9:7d:70:30:a3:c3:b0:
7d:83:35:99:a1:52:cc:2f:79:2c:c9:1a:b7:07:3b:10:12:f1:
6e:7e:87:73:c1:72:3f:19:ab:8c:1d:4f:ba:d7:7f:05:a1:eb:
f4:5b:71:cd:5f:aa:2a:ea:0b:f1:f2:0e:d3:7a:8b:a3:88:7f:
39:ae:54:00:15:74:cf:09:88:13:8f:25:ea:81:37:56:9c:fa:
05:46:d9:83:d8:89:de:04:68:ca:09:d9:e9:11:30:e9:2e:71:
11:fa:39:df:f9:e6:13:a5:a0:36:91:aa:91:ce:a0:fa:9c:15:
0c:94:4c:60:d8:ba:0c:93:cd:43:25:1f:bb:31:d9:1f:db:e8:
86:e5:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:50 2025 by rpki-client