Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB66432CDEEA11EF97806D80762E951A.roa
File: FB66432CDEEA11EF97806D80762E951A.roa (raw, json)
Hash identifier: 8Gt2SKdh6BHilpaiQ1JRUuFLPY2FdNlDcp5CY150t3g=
Subject key identifier: 59:38:C2:EF:16:7A:FB:C3:D6:E6:34:24:CE:D4:F4:AE:98:81:57:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB66432CDEEA11EF97806D80762E951A.roa
Signing time: Thu 30 Jan 2025 09:17:09 +0000
ROA not before: Thu 30 Jan 2025 09:17:05 +0000
ROA not after: Mon 03 Mar 2025 09:17:05 +0000
asID: 9304
IP address blocks: 45.196.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71103 (0x115bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 30 09:17:05 2025 GMT
Not After : Mar 3 09:17:05 2025 GMT
Subject: CN=679b4395-437a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:29:2f:57:b7:7f:84:f4:2c:f3:c4:55:f5:
a4:ac:8a:7c:81:6e:ab:d6:90:43:a1:43:b0:5b:33:
ab:ae:b4:c4:67:e7:95:4f:ea:a0:c2:bd:d3:93:72:
a2:cf:87:07:61:fa:2b:43:1e:17:c4:73:d0:26:4c:
d8:62:2a:8c:73:57:35:37:0c:4c:33:46:48:98:3a:
77:20:dc:6e:08:fc:90:2d:38:41:66:87:d0:99:c5:
c9:c2:b4:11:06:47:8b:42:af:10:b8:91:e8:96:02:
58:9b:18:7d:b3:55:7c:32:16:88:f3:12:ca:7a:25:
e3:5b:19:3c:c1:1e:a9:df:e3:ff:bf:86:63:b3:33:
5b:d5:81:85:81:3f:3a:88:0a:2a:a1:20:6e:c3:9e:
4b:c7:5d:8f:d8:c2:64:78:26:84:3c:ab:e1:49:ae:
b2:32:43:c4:a3:87:1c:6c:6c:23:71:92:8d:60:19:
e6:83:f5:e0:ef:8c:cb:97:1a:69:67:30:d7:f8:92:
0c:ef:e6:a8:c7:49:59:db:00:84:55:24:ce:a3:42:
36:52:62:f2:2c:d3:2f:6a:4f:e7:cb:7b:6a:6e:1a:
48:aa:89:7d:e6:ff:47:ad:b7:1f:4b:d4:b3:98:0c:
d7:07:8e:63:7a:30:fc:e8:36:9c:9c:42:4c:ae:d0:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:38:C2:EF:16:7A:FB:C3:D6:E6:34:24:CE:D4:F4:AE:98:81:57:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB66432CDEEA11EF97806D80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f9:ce:d7:ca:cd:92:c4:7c:e0:85:50:79:95:4b:96:a6:e2:
46:11:da:46:5b:32:df:26:16:81:46:96:80:63:b6:fb:1e:e6:
5a:5a:ab:7f:82:0d:e9:bc:1d:fa:2d:e2:86:50:dc:c7:59:66:
42:33:91:e0:3a:e7:37:be:2a:9f:17:f4:e1:67:bc:66:84:a5:
6a:bc:16:5f:74:b7:8b:a3:92:ad:98:88:21:e8:1a:5c:76:ae:
09:88:1a:7d:c9:8b:bb:83:07:97:ae:8d:4b:c6:65:01:98:76:
9b:e0:1c:94:8f:61:81:bc:53:b9:af:47:49:14:92:0b:09:fe:
9c:e1:fc:8b:fc:f5:d0:6d:19:8e:58:9e:b5:fe:81:55:45:bb:
78:d9:f9:ba:25:b4:0b:4e:0d:ec:31:9d:41:52:80:ba:fc:4e:
1a:f3:ce:14:f3:85:0c:55:93:c4:74:6a:9d:79:5a:9f:85:cb:
e3:56:b8:50:eb:7c:a2:36:a5:68:4f:69:07:09:c4:6d:2c:d8:
49:20:ac:ab:a6:b7:59:6d:38:54:ef:e7:ee:a5:3f:44:1d:7e:
3a:ee:26:81:c9:b1:df:1c:7b:d7:dd:9a:45:7d:e4:6f:ac:fd:
17:56:8e:b0:6a:d9:93:18:8c:67:67:42:58:3d:01:a3:19:e4:
d5:7f:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:15:13 2025 by rpki-client