Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D632CB50D57D11EF9B8B1470762E951A.roa
File: D632CB50D57D11EF9B8B1470762E951A.roa (raw, json)
Hash identifier: Y7Jywv8GCd4euaNzyM8SxK7nVVrXhruseyYwxq0ijBI=
Subject key identifier: 05:76:A7:E4:85:8A:41:57:C7:2A:61:1E:31:0B:C9:42:8E:54:16:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D632CB50D57D11EF9B8B1470762E951A.roa
Signing time: Sat 18 Jan 2025 09:23:11 +0000
ROA not before: Sat 18 Jan 2025 09:23:08 +0000
ROA not after: Thu 08 Jan 2026 09:23:08 +0000
asID: 136744
IP address blocks: 45.195.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68425 (0x10b49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 18 09:23:08 2025 GMT
Not After : Jan 8 09:23:08 2026 GMT
Subject: CN=678b72ff-6e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:dc:29:34:1e:ea:18:55:e9:fd:29:fd:c7:
53:f6:9c:7e:55:a0:7b:34:da:2d:e9:aa:e8:d4:8c:
b1:83:fb:80:cb:4b:b3:b4:71:df:3e:93:08:ed:23:
94:33:00:55:6a:9b:ba:7a:9e:3c:6e:f9:53:88:76:
cc:66:4c:86:a0:b0:35:6c:99:26:ef:32:e0:d2:91:
86:09:7f:c9:55:06:68:6b:71:16:4a:3c:ba:ad:b7:
43:6d:8c:e0:be:ec:11:f4:0c:85:fb:f5:fa:ba:60:
e0:93:70:09:c4:22:7f:6e:a0:26:10:94:b2:55:70:
82:d6:37:e2:77:65:7b:5b:67:3b:29:d7:af:ec:c9:
43:cc:f4:01:a2:5e:8c:7c:59:0f:f2:54:4a:46:21:
18:5b:a0:44:80:a9:f2:fb:92:b5:b7:cf:31:0d:09:
08:57:5b:66:15:11:e7:52:a8:a8:01:a6:d1:82:5f:
d8:7b:16:a1:b9:5f:f6:b3:f3:9f:c8:ad:19:eb:cc:
52:ba:d0:a5:b8:46:19:c3:50:05:99:84:a5:d4:32:
d6:1e:66:f5:c7:57:ae:22:9e:7d:e5:48:09:91:11:
e5:02:ea:d9:d6:74:66:ef:79:8a:29:90:e6:83:b2:
9d:3b:43:69:7d:a0:07:94:35:62:3b:3e:24:61:81:
b8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:76:A7:E4:85:8A:41:57:C7:2A:61:1E:31:0B:C9:42:8E:54:16:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D632CB50D57D11EF9B8B1470762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.193.0/24
Signature Algorithm: sha256WithRSAEncryption
07:45:e9:70:8b:cf:c4:9f:98:38:9f:b1:82:32:54:4a:0b:85:
00:11:07:4b:ab:ce:6e:cb:8c:96:85:af:73:a7:6e:97:50:70:
e6:85:60:2a:d6:cb:21:9b:fd:6a:e9:f8:e5:2d:6f:79:76:f4:
1a:36:07:39:82:e6:35:f8:2f:28:9d:f5:8e:be:47:28:26:ce:
d9:70:92:ca:67:94:dc:32:a4:60:c7:a8:9e:31:91:08:f1:d6:
ee:f1:5a:d0:a2:c2:bf:91:56:59:dd:4c:64:74:0a:12:8a:f4:
ac:09:0a:87:74:11:22:b6:76:21:c2:1f:a4:d5:2b:e2:2f:70:
fa:3a:37:6e:8c:b0:45:bd:d2:0b:91:f8:5d:5b:98:8f:1d:7d:
57:1f:cc:d1:9c:ed:b1:3f:b8:ed:4f:4f:a0:bc:42:79:87:ad:
7a:fb:66:39:fd:a2:df:26:1b:b5:22:78:bf:f5:3b:51:20:6a:
a0:bd:3d:77:ac:b4:a0:89:7e:01:79:89:2f:5b:fc:b3:de:b8:
94:b1:2f:8c:3b:f7:ed:bf:5e:d3:29:c6:10:2b:76:e9:84:1d:
cb:93:52:00:d9:3d:c5:cc:7c:cb:09:60:f9:9a:04:a3:e4:60:
35:9d:08:01:47:e5:bd:bb:d6:92:77:99:b2:a0:6d:eb:12:86:
2f:65:59:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:25 2025 by rpki-client