Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDC34B24F67811EFABA59596762E951A.roa
File: FDC34B24F67811EFABA59596762E951A.roa (raw, json)
Hash identifier: XttMx5QFcoY8hv/hf492un7PzUGnp942MTfgmcvK6Ys=
Subject key identifier: 5D:93:50:55:33:2D:5B:64:E0:D1:8D:71:0D:9A:B3:EF:D4:00:99:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013FBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDC34B24F67811EFABA59596762E951A.roa
Signing time: Sat 01 Mar 2025 08:41:38 +0000
ROA not before: Sat 01 Mar 2025 08:41:35 +0000
ROA not after: Thu 29 May 2025 08:41:35 +0000
asID: 18186
IP address blocks: 45.194.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81855 (0x13fbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 1 08:41:35 2025 GMT
Not After : May 29 08:41:35 2025 GMT
Subject: CN=67c2c842-14ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:29:f6:04:1d:22:47:30:aa:bf:c4:3a:32:
1c:48:dc:bb:a0:e1:1f:df:94:f4:be:ce:89:52:51:
02:45:f5:5d:28:15:19:1d:bc:e5:cb:4a:0f:22:ce:
1d:6f:69:ad:a7:1d:f3:8c:cb:19:1c:5a:e5:00:9b:
04:4b:a9:6b:ea:0b:79:42:5b:ce:2b:13:ef:4d:dd:
5f:db:91:8e:bd:eb:d8:e6:a7:7f:4c:b8:a9:be:c6:
8b:66:a4:4d:db:42:ea:c8:0e:68:1e:8b:fc:5f:64:
2d:60:af:02:03:fe:82:b1:7b:5e:90:2d:4b:a8:37:
cd:a2:27:d5:f6:9a:44:e8:70:87:15:b5:0b:c6:dc:
cb:e6:09:b1:5d:2b:cc:6a:8b:e9:c9:12:6f:fd:97:
14:a5:8e:7f:28:50:81:ea:18:3c:aa:95:ce:e8:ba:
cc:05:b7:b8:28:94:20:90:96:5e:59:1e:e0:1e:67:
bc:b7:de:a1:d4:b5:cf:95:a8:21:77:8c:11:21:7d:
20:b9:f3:23:08:7f:32:45:58:69:ab:43:94:f8:76:
fd:c2:d9:40:1b:14:88:23:e1:8a:fe:f1:0d:78:8c:
c3:a5:91:f1:2f:65:84:bc:14:73:f4:ba:07:99:59:
2b:d2:44:09:6b:b3:4f:07:09:3a:26:64:cd:34:d6:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:93:50:55:33:2D:5B:64:E0:D1:8D:71:0D:9A:B3:EF:D4:00:99:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDC34B24F67811EFABA59596762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.22.0/24
Signature Algorithm: sha256WithRSAEncryption
54:cc:ec:ef:89:9f:c3:41:3d:7f:41:85:23:54:d6:b3:d1:6c:
1e:55:24:9d:de:ba:8b:ba:7b:3e:23:dd:bd:6e:2d:49:4c:f3:
6e:42:b2:da:74:89:a4:58:b3:c2:c6:fa:df:aa:e5:1f:63:3b:
1f:59:ba:44:73:4a:c0:66:f4:f1:b7:c5:d1:88:0d:f5:90:89:
25:7e:41:b7:a7:a8:2f:f2:98:02:ba:15:bd:d8:ca:4b:dd:ff:
87:bc:cb:16:01:fb:c9:7e:1a:c7:d5:31:92:7c:73:ad:73:65:
61:37:41:3a:2e:a9:a4:b9:1e:c8:68:e6:55:27:f7:a1:2a:36:
12:e5:6d:35:bf:de:08:55:b5:0c:06:7d:93:7f:7e:a5:f7:f0:
ce:8d:bf:5f:31:82:94:92:71:40:05:6d:cc:1f:6a:4f:91:de:
ef:fd:4a:cd:71:3b:ec:54:1c:7e:06:94:f0:6c:ab:bb:2f:fc:
25:c2:41:b5:81:92:d2:b8:20:9d:97:2e:82:29:40:a0:32:a7:
07:1d:12:d4:13:b5:38:60:f0:d4:29:fe:60:d3:65:87:1c:fa:
d6:fc:59:34:a7:cb:d6:b2:98:6c:e4:df:54:a4:d7:0e:f2:62:
f5:d3:f5:a8:03:11:4e:a6:0b:15:39:74:ba:12:e3:7d:63:ff:
b3:0d:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:21:14 2025 by rpki-client