Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2655C34E55711EFA8F185BB762E951A.roa
File: C2655C34E55711EFA8F185BB762E951A.roa (raw, json)
Hash identifier: MH5znvlFO2I50dr65MRUpbinfOxwEoBghTmWePJ61KE=
Subject key identifier: BB:21:44:90:17:66:4D:30:35:3F:67:AB:49:53:32:46:15:07:B3:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2655C34E55711EFA8F185BB762E951A.roa
Signing time: Fri 07 Feb 2025 13:30:56 +0000
ROA not before: Fri 07 Feb 2025 13:30:52 +0000
ROA not after: Fri 21 Jan 2028 13:30:52 +0000
asID: 17561
IP address blocks: 45.196.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73150 (0x11dbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 13:30:52 2025 GMT
Not After : Jan 21 13:30:52 2028 GMT
Subject: CN=67a60b10-fd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:f4:25:f9:d5:6b:db:34:51:16:20:0c:95:
a6:b1:ce:d7:0c:ef:cb:0e:e9:87:3d:90:2d:2a:bf:
7a:a8:67:c9:50:67:e9:53:bb:e7:0b:af:9b:a1:00:
c6:ff:c1:88:55:ae:1a:26:cf:80:c6:4f:4e:dd:f0:
73:52:92:77:c0:d3:d3:3f:3f:ab:02:33:9c:78:db:
2d:59:49:a6:0c:44:1e:3e:62:f3:df:a6:9e:8f:e0:
f9:c2:34:21:69:62:0d:0b:e3:44:ae:25:8e:dc:6b:
97:b4:8c:f3:35:ec:f7:25:1c:16:ee:c3:e9:7a:f6:
55:68:87:fb:a5:18:19:52:6a:12:4c:51:1e:3a:f9:
bc:06:59:22:ba:1f:8a:36:f4:ca:20:66:40:3e:8f:
50:92:99:30:ef:92:ba:84:16:ca:0e:d2:38:b6:b0:
9f:99:11:9f:b7:ee:e6:e7:b7:ea:aa:10:eb:18:19:
11:6a:77:83:53:7d:fe:22:58:03:37:b5:d7:ea:0e:
aa:c5:a2:60:e0:ac:6c:2e:bd:d9:20:12:2f:72:19:
ed:46:ec:09:c0:f5:ab:ee:3c:b9:3c:5b:82:eb:5f:
b5:bf:04:2a:5d:1f:aa:03:fc:d2:79:c7:34:41:0c:
75:52:f6:66:58:19:f5:74:19:4d:84:7f:4c:f6:30:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:21:44:90:17:66:4D:30:35:3F:67:AB:49:53:32:46:15:07:B3:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2655C34E55711EFA8F185BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.66.0/24
Signature Algorithm: sha256WithRSAEncryption
43:02:49:88:c1:1e:6d:a9:29:75:0f:81:36:45:85:d3:74:e4:
ba:d9:2a:ff:00:eb:41:8a:74:fc:2b:3a:b1:de:05:20:f7:87:
ce:7a:53:c9:4c:a5:6a:25:b7:09:e1:7a:a0:ed:89:cb:22:f8:
92:ea:75:de:9e:ef:14:5d:b5:39:2e:03:15:25:5f:1a:ea:ad:
48:71:e1:9d:97:21:0b:2f:03:da:cc:ab:9c:ca:94:ea:e3:10:
ca:e5:4f:69:9c:34:3d:90:6d:87:3f:73:8d:42:c9:3f:2a:7a:
eb:f9:23:10:08:2b:10:5b:79:5a:92:89:5d:13:3a:8c:98:33:
26:46:bd:19:98:ba:7e:f2:86:90:8a:9f:da:ed:ca:a0:53:cb:
f6:46:f9:8d:d5:56:c5:ab:a2:6a:e0:ec:9a:c4:1c:ad:59:a4:
20:72:cd:02:7a:d6:a6:1d:9f:3f:20:1d:62:b1:01:4f:f1:1d:
46:f4:7a:a7:64:5e:d1:e6:e6:6e:08:4d:d2:ee:26:50:f5:c5:
b0:f4:90:be:83:6a:d1:84:7a:70:cb:5d:73:3f:38:f5:fa:77:
2e:cf:0f:22:f3:56:be:31:72:34:94:00:9d:46:9c:5d:5b:81:
94:d9:30:9e:e3:d4:d1:48:5d:74:b1:4f:cb:d6:ba:fe:16:f3:
60:42:e9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:10 2025 by rpki-client