Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEAA7898DFFB11EFA47D4F96762E951A.roa
File: FEAA7898DFFB11EFA47D4F96762E951A.roa (raw, json)
Hash identifier: Rr2mTU1Ss9YQtt1eyF4jNFE5S7b9xEnvXwgrmhvcDcU=
Subject key identifier: F6:21:BB:DA:D3:58:DE:24:12:00:CA:B2:39:83:22:F9:10:D1:52:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEAA7898DFFB11EFA47D4F96762E951A.roa
Signing time: Fri 31 Jan 2025 17:51:27 +0000
ROA not before: Fri 31 Jan 2025 17:51:24 +0000
ROA not after: Mon 03 Mar 2025 17:51:24 +0000
asID: 54600
IP address blocks: 45.196.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71365 (0x116c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 17:51:24 2025 GMT
Not After : Mar 3 17:51:24 2025 GMT
Subject: CN=679d0d9f-45fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b2:ba:24:29:67:e5:3f:52:c8:85:f1:e6:89:
de:e9:cd:a5:62:18:31:4b:8e:f2:06:b5:a6:d7:a4:
ea:76:cd:1b:24:fd:10:01:12:de:d3:6c:0b:47:28:
f6:23:e4:bc:16:d2:fd:9c:c3:f4:3b:3a:46:1c:db:
12:f4:a3:b7:3e:d3:70:08:9f:b5:dc:94:28:3a:81:
f6:91:be:c0:10:64:c8:29:42:35:1d:23:dc:e4:98:
07:af:74:f3:76:7a:28:82:2f:1a:1a:ec:56:fb:aa:
bd:9f:76:2e:ca:f7:ae:6a:45:ed:54:cc:3c:da:28:
fe:f2:a7:7b:6e:12:28:bf:35:28:81:f3:41:8d:96:
fb:74:d9:37:65:1f:27:40:e3:37:f3:48:70:f2:d0:
aa:fc:5f:08:2c:43:a1:ca:14:56:35:14:3a:3b:9c:
94:bc:a1:fc:a7:b6:8a:05:e0:62:cd:74:01:9c:e8:
92:50:57:60:ba:f9:63:01:88:04:23:5b:75:55:66:
08:74:8a:56:d7:d9:7d:a8:20:96:e7:4f:26:83:48:
f7:95:70:65:06:cc:65:f0:ae:44:ae:98:e0:87:b3:
ef:db:2d:91:26:9f:23:ef:08:23:13:0a:d6:b6:12:
ef:bd:88:77:7c:21:bb:e1:ca:c8:3a:2f:2c:f4:2e:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:21:BB:DA:D3:58:DE:24:12:00:CA:B2:39:83:22:F9:10:D1:52:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEAA7898DFFB11EFA47D4F96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.160.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:ae:3d:da:e4:73:e0:4c:9a:f3:3e:4d:f2:d1:76:fe:b9:02:
73:d5:f7:00:4e:2d:54:c5:05:ee:43:40:83:b7:68:44:75:43:
f1:16:d7:92:2a:bd:04:c2:ba:2c:0a:86:af:de:0a:e1:85:14:
d6:11:89:52:f8:28:34:e3:53:d1:24:b4:d1:ec:f0:5d:d3:2e:
b4:05:3e:fa:68:ca:3a:26:9d:a8:53:40:f5:d0:44:70:75:17:
72:e1:5a:bd:97:51:5c:29:2d:55:7e:34:09:a4:7a:dd:0d:0b:
f0:fa:c5:a2:5f:44:4a:a7:b0:c4:30:52:cf:5d:14:6a:05:f3:
c2:5e:81:de:10:61:b4:fe:fb:2b:21:04:c1:dc:35:57:81:79:
b3:24:c1:0c:41:83:5a:62:a3:6c:9a:6b:78:ab:9e:c6:b3:48:
4d:a7:9a:58:b5:4b:38:f3:74:6e:66:72:7f:7a:99:47:60:52:
0e:bb:81:ca:b4:53:0c:3b:75:8a:7d:70:a2:6e:50:d7:0a:3a:
4a:ca:87:7c:e6:c3:c2:16:75:89:21:50:7e:0b:43:8e:92:f8:
81:0f:ac:79:46:75:bd:cf:c5:b7:79:b4:f6:74:48:48:09:71:
2b:c5:5c:ba:c8:bf:5e:a4:c2:95:f9:04:0b:5e:e2:66:0f:29:
f8:ca:30:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:10:12 2025 by rpki-client