Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8E8DB0AD50311EFB09D4445762E951A.roa
File: F8E8DB0AD50311EFB09D4445762E951A.roa (raw, json)
Hash identifier: i2ZZtj7z6Jn46X/lAEDYgD0cvJmu/OThwjX/+y1AANk=
Subject key identifier: 70:E2:48:21:FC:16:6B:7A:49:33:D9:38:33:89:79:9E:F6:5F:8A:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A5C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8E8DB0AD50311EFB09D4445762E951A.roa
Signing time: Fri 17 Jan 2025 18:50:51 +0000
ROA not before: Fri 17 Jan 2025 18:50:47 +0000
ROA not after: Fri 31 Jan 2025 18:50:47 +0000
asID: 39600
IP address blocks: 45.196.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68188 (0x10a5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 18:50:47 2025 GMT
Not After : Jan 31 18:50:47 2025 GMT
Subject: CN=678aa68b-b868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:b3:88:98:5d:99:eb:8b:6f:3b:54:84:d8:
36:5f:e1:c1:30:54:b7:7b:70:17:3b:e0:53:f2:6c:
d8:f5:7f:83:86:47:0e:11:15:93:21:91:31:45:1a:
4e:b9:d0:51:84:01:77:92:17:83:c5:7f:46:26:3c:
e3:3f:d9:11:d2:56:bc:a7:85:0d:46:9c:03:09:5b:
6a:d7:d3:8a:84:8e:28:64:16:a2:fa:64:6d:b3:39:
0a:b1:19:2f:b2:5b:3a:d3:40:7c:e7:67:44:23:a9:
29:fb:3a:9e:f1:57:b0:5d:36:98:e2:0e:4c:4c:29:
86:e1:c0:68:b1:1b:de:43:23:69:f4:89:18:80:31:
12:d9:a4:ea:5e:3a:ea:ac:3d:2d:7e:95:af:c0:7a:
48:04:be:f0:40:43:56:e4:4b:3f:ec:7c:84:ca:bc:
75:6c:e6:a1:3d:9c:58:93:08:0b:99:98:18:31:04:
66:14:1b:a2:80:b6:f6:df:20:10:40:cb:4c:28:3d:
ee:67:6b:34:bd:5c:e2:c7:30:4d:67:3c:57:b5:12:
ac:4a:1f:20:55:2c:42:37:47:59:2c:98:a0:84:c3:
66:8d:d8:70:41:fd:d1:aa:8e:99:c3:e3:48:38:fc:
70:d3:ec:f1:a5:82:c5:05:d6:f6:4e:13:e0:f8:49:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E2:48:21:FC:16:6B:7A:49:33:D9:38:33:89:79:9E:F6:5F:8A:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8E8DB0AD50311EFB09D4445762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.141.0/24
Signature Algorithm: sha256WithRSAEncryption
71:84:73:a9:fb:02:43:1d:9b:46:1f:78:b3:67:d9:80:ca:4a:
94:99:0e:1e:dc:1e:b0:55:2d:df:e3:c6:9a:d3:a6:b5:37:1e:
a0:08:c3:9c:2d:81:74:b2:55:2b:a7:3f:b1:1f:1b:e7:05:b5:
a7:27:41:a1:e2:c5:2d:c1:c7:7b:61:fb:c3:e9:70:51:af:9b:
31:d4:c5:82:1c:57:16:c1:7b:d2:20:39:e8:db:c2:51:c3:b5:
70:f6:c0:9f:a3:4e:d7:29:07:ce:eb:41:a0:f8:53:35:6b:f6:
d4:4e:44:61:0f:ec:c7:57:73:e5:f5:83:75:81:19:6c:53:f7:
84:21:85:df:ed:ae:09:51:23:b2:c6:0f:63:30:97:f4:00:9f:
f0:30:4f:ca:0b:6b:89:1f:59:a9:e7:c4:73:34:d0:24:55:07:
03:4c:37:e2:44:e2:51:64:9a:1a:5c:ff:6d:00:f5:74:2e:d2:
ef:6f:48:73:6c:c0:99:61:28:e4:17:c3:bc:d7:aa:73:7c:a6:
c6:7d:84:47:76:00:42:5a:8e:ba:b2:fc:e2:14:95:ca:cf:f8:
f3:4f:dd:66:2b:9e:28:be:98:d0:19:07:2c:60:aa:80:08:a5:
1c:5b:a7:c4:7a:0e:66:a8:b2:7c:32:62:f6:10:89:1e:39:2a:
e8:69:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:46:00 2025 by rpki-client