Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3A21512D57B11EF8119A164762E951A.roa
File: F3A21512D57B11EF8119A164762E951A.roa (raw, json)
Hash identifier: 5GNvP+PMQ2K9C9fcUe5++BZtsfhh4rh0gmC93fOgmP4=
Subject key identifier: 96:11:A9:BD:47:FB:AD:EA:EB:17:4B:C1:F3:B7:EE:08:DE:4D:21:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B3B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3A21512D57B11EF8119A164762E951A.roa
Signing time: Sat 18 Jan 2025 09:09:42 +0000
ROA not before: Sat 18 Jan 2025 09:09:38 +0000
ROA not after: Fri 21 Feb 2025 09:09:38 +0000
asID: 131471
IP address blocks: 45.195.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68411 (0x10b3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 09:09:38 2025 GMT
Not After : Feb 21 09:09:38 2025 GMT
Subject: CN=678b6fd6-d10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:ef:db:8a:7e:ef:88:74:ed:48:65:a6:8b:
b4:02:a2:56:d6:8a:b7:1d:b6:5d:2b:cb:25:55:83:
ea:85:ff:1e:9a:ff:dd:73:43:74:6a:4c:16:01:0c:
00:36:82:36:98:a4:49:06:65:39:a1:58:70:bc:97:
7c:63:ef:43:a7:7a:42:cf:de:f2:51:35:a2:6f:5b:
c4:77:a9:4f:4f:cf:e0:cd:93:f6:e6:7e:bf:48:d0:
5d:c5:e0:d3:f9:c3:7b:aa:5f:46:d3:8f:8e:97:c5:
e1:e6:c5:e2:ac:53:40:e0:a7:3c:17:61:ed:e2:22:
7c:b3:c6:b5:7f:2c:5c:45:33:4c:c9:41:5e:7c:db:
d1:6a:4c:c7:ae:91:ac:74:ef:94:9a:ad:2c:bb:4b:
b3:55:1c:e2:f3:60:14:f4:91:ae:43:65:88:cb:aa:
b3:eb:8a:92:90:c3:76:7f:f1:cd:06:98:e7:83:04:
a4:f4:7c:50:0b:b2:ab:b1:85:1a:d2:70:44:af:29:
55:52:25:83:1a:b8:92:61:38:6a:24:f1:46:16:37:
42:9e:33:ab:5a:a8:e4:7c:0a:22:8a:d4:79:94:40:
0d:8d:96:46:41:8f:4f:5e:24:8f:e6:f1:17:5c:10:
8c:a6:18:55:f8:b7:ab:f2:8d:e3:83:d5:4c:43:fe:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:11:A9:BD:47:FB:AD:EA:EB:17:4B:C1:F3:B7:EE:08:DE:4D:21:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3A21512D57B11EF8119A164762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.210.0/24
Signature Algorithm: sha256WithRSAEncryption
77:1e:a3:8e:d0:49:da:d3:1c:5c:ed:4c:9e:eb:3b:a0:37:54:
8d:f7:45:f8:2f:a5:6e:bd:d2:bd:2e:91:33:3e:48:35:31:c1:
ed:d2:01:89:2e:99:67:10:06:96:27:84:7f:d3:ed:4a:c7:6a:
18:ad:a5:48:38:a3:2a:15:72:ef:d3:0e:46:f0:6a:01:86:d9:
09:6c:9b:f3:20:cc:19:20:34:e1:74:a1:e4:b9:01:47:60:ef:
ab:11:8b:36:16:e8:2f:63:ac:b1:27:d4:60:73:be:20:51:6f:
6a:5c:dd:3e:1b:0f:ed:aa:ab:be:55:c9:79:e8:ec:8b:e1:d9:
16:ad:e5:e9:6a:94:cc:16:46:d9:6a:da:5e:25:0f:78:36:c5:
3e:03:6b:ec:ed:9c:8e:dd:3c:85:f4:f5:51:26:04:a0:60:6d:
70:9c:b7:94:ad:2e:91:58:75:c2:35:46:19:ee:e1:3c:85:42:
0f:1a:ea:36:2e:89:fb:c3:50:2c:33:16:f6:9f:72:d2:c2:af:
51:34:5b:4e:d6:95:78:9d:4d:27:c1:24:1d:68:d2:17:dd:f8:
dc:ad:a4:25:d6:82:e5:b7:4a:27:2c:8e:15:8e:b7:13:96:b9:
1e:ff:16:8e:f4:5b:4f:b7:42:25:1b:5e:da:b9:7f:7f:58:e7:
ca:f1:d7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:00 2025 by rpki-client