Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5D4EA0CBDC111EFA1601F7C762E951A.roa
File: F5D4EA0CBDC111EFA1601F7C762E951A.roa (raw, json)
Hash identifier: FEZsxjE0ixtI/4SZS6vqr0FLa7tM8FsDrLs1RqguyUE=
Subject key identifier: 10:21:62:ED:0B:1A:BB:34:02:2B:A6:72:0F:0D:8F:42:80:A4:95:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E579
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5D4EA0CBDC111EFA1601F7C762E951A.roa
Signing time: Thu 19 Dec 2024 04:30:22 +0000
ROA not before: Thu 19 Dec 2024 04:30:19 +0000
ROA not after: Wed 10 Dec 2025 04:30:19 +0000
asID: 984
IP address blocks: 45.206.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58745 (0xe579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 19 04:30:19 2024 GMT
Not After : Dec 10 04:30:19 2025 GMT
Subject: CN=6763a15e-1a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:9f:b8:bb:a7:04:eb:b7:25:8b:a5:01:22:
a1:05:ed:77:9f:aa:a1:37:21:c2:7b:84:b1:85:78:
64:25:f7:ee:75:3b:5b:03:19:71:6a:0c:6c:ce:3d:
d5:be:82:1b:47:e4:35:08:12:35:4f:f0:36:b9:bc:
e2:a1:42:4e:35:21:56:34:6d:dd:67:49:ad:42:36:
95:c2:9d:2b:4f:51:6d:92:ac:ec:df:e5:e7:e6:0d:
9a:e2:a3:bd:83:d5:3b:6b:00:7b:b5:c2:96:24:b4:
c2:95:be:e6:8d:4e:57:4c:71:20:2f:f3:a1:48:81:
29:75:96:cc:a3:b6:be:a0:6e:c9:fe:b5:0f:67:4e:
6d:61:d6:bc:28:f6:c5:a4:7b:ee:1d:c2:6b:77:92:
4c:36:cf:dd:17:d4:bf:b6:f9:89:35:1c:e1:a3:0b:
8d:09:c4:ce:4c:e7:44:bb:15:b7:de:8e:ce:b1:54:
1e:01:9c:18:2d:0c:b3:34:69:b1:d2:56:dd:c8:2f:
68:a3:72:95:ef:2c:b9:6b:cd:c1:5e:9b:e9:e7:82:
24:94:f8:79:72:72:ee:db:16:85:f1:cc:e9:c1:b0:
4a:d0:3e:ec:1f:5d:72:cc:73:7f:6c:2f:bd:a9:0e:
d6:9b:69:eb:65:26:ac:90:4d:a4:6e:7b:2f:70:e3:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:21:62:ED:0B:1A:BB:34:02:2B:A6:72:0F:0D:8F:42:80:A4:95:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5D4EA0CBDC111EFA1601F7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.95.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c3:8a:56:a9:dd:1d:be:fc:b5:89:b5:aa:f5:61:07:f2:0f:
ee:6f:49:05:f6:22:fd:07:c0:82:03:0a:02:12:5f:40:1c:98:
30:47:75:c0:26:93:df:ed:a3:fb:d7:fb:ea:c4:b8:d7:6e:71:
86:e3:74:41:fe:e0:3c:88:d8:f4:2f:29:a6:da:09:c2:e2:f6:
6c:4b:ed:12:d4:28:41:cd:f8:39:3a:88:e2:cb:cd:94:03:ab:
c0:c2:2d:8c:a3:ca:bb:47:17:71:0c:f3:b7:81:17:ff:ff:5e:
86:ef:c2:89:dc:2b:9f:13:0d:69:73:40:06:0a:fd:59:e8:cf:
df:fb:3b:09:a4:18:3f:ba:5b:be:05:48:14:8d:3d:97:c5:80:
6c:d1:3c:36:8a:40:d1:65:f3:04:c9:8b:8d:7c:45:9f:0f:5a:
0e:e1:20:f8:1e:29:a2:b4:1a:28:45:19:c8:4e:f9:e6:96:b4:
bc:a5:23:1f:21:15:f0:29:bf:f2:f7:37:77:50:72:7e:63:21:
8f:9e:8c:f2:e4:b0:61:14:94:ab:c6:11:7a:19:7e:85:ab:31:
e6:fc:40:52:e7:3f:70:e2:8a:fc:7c:b4:c9:df:a2:4a:54:10:
fa:26:a8:11:fa:5f:a5:74:a0:9b:1d:10:bd:e2:95:4f:d1:90:
f5:2a:a9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:31:04 2025 by rpki-client