Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52F39B28F5A011EF9CCBD449762E951A.roa
File: 52F39B28F5A011EF9CCBD449762E951A.roa (raw, json)
Hash identifier: p0Z5rpZl4VOHW78JJDh6X3WM/ZC7CEebgqvGbYOFQII=
Subject key identifier: 57:2D:57:ED:E6:5D:8D:CC:A0:95:E1:B9:D8:C6:FB:E8:34:68:22:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013BFA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52F39B28F5A011EF9CCBD449762E951A.roa
Signing time: Fri 28 Feb 2025 06:50:41 +0000
ROA not before: Fri 28 Feb 2025 06:50:37 +0000
ROA not after: Sat 05 Apr 2025 06:50:37 +0000
asID: 142002
IP address blocks: 45.195.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80890 (0x13bfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 06:50:37 2025 GMT
Not After : Apr 5 06:50:37 2025 GMT
Subject: CN=67c15cc1-cef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:d3:3f:78:39:8f:d5:d2:34:ab:c5:d2:f1:
bb:1e:3b:f1:66:9a:42:21:0a:be:f9:fe:02:87:4d:
0c:03:08:03:9c:9c:8e:62:07:88:f5:16:30:3c:19:
40:69:bc:a5:86:a0:05:29:37:7c:0e:6e:96:ca:a3:
9f:df:34:bb:8a:2d:ca:b0:1f:46:89:92:0b:51:f4:
43:33:8b:c1:a4:d9:0b:08:f5:89:5f:c3:f0:1a:a4:
79:14:97:e5:85:6b:9f:4c:ec:bf:67:fc:50:0d:b1:
72:ca:e6:d2:c5:55:af:4d:81:db:e9:7f:e5:a4:56:
d2:85:5b:55:b8:22:c7:bb:b9:3f:8d:7f:26:94:be:
77:82:c1:20:16:b9:8a:b2:33:9a:bf:1d:2c:d7:ed:
64:60:a5:f4:14:30:7f:11:63:d2:f3:e4:9f:ed:7d:
ad:af:d7:b7:55:48:70:87:57:15:74:6e:fd:9f:62:
9f:1c:b0:6e:e4:1f:5d:e7:3f:1f:7c:7c:43:83:b6:
c4:3e:d6:0b:81:17:f3:bf:bb:e0:19:00:71:43:b3:
5a:ac:cf:27:e3:d0:5e:a4:8c:0e:0b:1a:d3:a1:4e:
82:84:68:e5:31:99:23:c4:f7:69:f3:a7:e3:f8:20:
cd:ef:17:12:3a:84:ae:a4:c8:59:72:d1:c8:c3:4d:
b8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2D:57:ED:E6:5D:8D:CC:A0:95:E1:B9:D8:C6:FB:E8:34:68:22:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52F39B28F5A011EF9CCBD449762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:84:69:10:b1:fd:c1:48:ca:d7:1e:4e:2f:a2:c8:3e:02:63:
9d:b4:0b:56:02:c6:00:73:15:b5:01:8e:dd:e2:13:a6:df:e4:
52:99:db:9b:2d:94:b8:71:f5:82:14:ec:fb:46:fb:29:27:a5:
02:d1:02:21:cc:6c:8a:28:fb:16:86:99:38:0a:35:80:30:dd:
32:c0:42:f2:16:94:5c:da:42:81:20:a0:c8:87:76:b2:bf:e8:
3f:a0:04:83:94:6c:af:54:55:64:e1:1f:7b:c5:96:4f:1f:0b:
ab:74:10:84:7d:61:9e:f6:e4:96:02:ab:67:2b:ec:ee:57:eb:
36:3d:d5:0f:e0:04:45:01:fb:15:73:6f:62:56:ef:fc:19:60:
4e:9c:6c:b9:87:94:e2:a8:58:17:a8:af:4d:4f:69:44:22:fb:
2e:1a:53:cb:bf:97:ce:ce:66:71:e7:ea:ff:20:84:7f:8a:fd:
4a:ae:3e:4b:2e:bf:33:63:c3:ce:7d:67:6a:34:4d:3b:b1:b0:
f2:54:a5:53:c8:db:d7:ad:cf:34:c8:03:24:72:d8:2a:66:0c:
44:29:ae:18:22:c2:68:1a:62:b5:5b:95:97:95:86:5e:08:99:
7c:4f:8c:d4:45:97:a7:8e:83:bd:a8:91:b3:38:4a:a3:d9:bd:
fa:2d:78:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:21 2025 by rpki-client