Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/021C822CD80511EF9FA4A578762E951A.roa
File: 021C822CD80511EF9FA4A578762E951A.roa (raw, json)
Hash identifier: PtAskp9CX3sel85qUOFMLISvE5h32CE8VFwYpr7UFaI=
Subject key identifier: 53:2B:0B:3D:4C:3F:52:4D:8B:43:27:29:D2:7F:03:7A:0F:15:DF:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/021C822CD80511EF9FA4A578762E951A.roa
Signing time: Tue 21 Jan 2025 14:35:49 +0000
ROA not before: Tue 21 Jan 2025 14:35:45 +0000
ROA not after: Sat 01 Feb 2025 14:35:45 +0000
asID: 62240
IP address blocks: 45.192.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69140 (0x10e14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:35:45 2025 GMT
Not After : Feb 1 14:35:45 2025 GMT
Subject: CN=678fb0c5-bcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:e3:66:0f:03:7f:be:f7:d5:59:70:e5:f3:
4f:50:b7:d8:0c:97:5b:13:d7:55:79:0a:0a:71:65:
d3:5f:f8:e9:28:5b:92:d2:f4:b7:a2:6c:d9:68:ea:
6e:d9:74:56:a2:10:c4:29:5a:b7:ff:2a:ce:ea:d4:
10:3f:05:9c:39:7b:2c:2b:2d:51:7e:32:32:ca:a5:
7e:b3:82:4e:e8:eb:16:6a:7b:c4:69:f4:72:97:e0:
60:06:e6:a6:52:d9:5a:1e:d7:ca:fb:ba:2c:04:c7:
68:92:f7:63:72:4e:7d:08:50:4f:61:05:ea:2e:5d:
fa:94:63:ef:97:b6:3e:82:3c:16:1f:a2:f0:2c:f0:
aa:fa:85:37:23:06:31:89:71:1d:cc:3f:54:39:3e:
27:a2:be:69:47:bd:35:e6:1b:f0:a8:de:47:5a:a9:
7a:7b:26:27:09:e8:f5:b8:64:32:69:dd:39:a7:1e:
3d:9d:6c:e2:d8:25:1c:83:50:7e:96:40:46:06:f2:
1b:cb:86:89:bd:48:0d:7a:43:03:35:bd:f7:5c:14:
56:6a:39:2a:e8:03:f2:04:06:ed:21:8e:a7:e9:ec:
98:23:73:09:1b:b1:da:f9:27:49:d1:13:cb:e1:b7:
4a:ff:58:ce:40:ac:63:ca:a0:06:d5:ba:8b:24:cb:
24:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2B:0B:3D:4C:3F:52:4D:8B:43:27:29:D2:7F:03:7A:0F:15:DF:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/021C822CD80511EF9FA4A578762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.45.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a5:61:76:e8:d3:d0:ad:68:63:77:fa:dc:e1:f3:cc:b9:f1:
60:0f:db:fc:52:cf:1b:53:6d:29:aa:28:f5:f4:ab:cf:c8:ba:
a4:2d:63:7c:5d:3f:54:60:d0:c0:57:9a:07:7a:96:9b:f7:3e:
73:a0:99:f8:b2:46:bb:ec:9e:e6:80:8e:b5:94:39:23:e4:93:
a8:a6:2f:18:42:6e:68:fe:f2:f2:22:b5:b1:cd:f3:cb:bf:70:
97:7e:32:93:f1:c0:cc:0e:e5:d4:e2:65:7b:cd:ec:43:2a:f2:
a3:50:ae:ce:b3:a9:77:ba:0a:2b:28:0e:48:6b:17:87:f6:b6:
f5:1d:13:6b:05:93:e0:88:c6:9a:f7:95:74:2a:27:c1:4d:6f:
9e:bc:0c:ef:83:18:18:64:70:1e:9f:c8:c5:9c:3b:14:c9:55:
4b:bc:9c:0e:75:17:d9:74:11:7d:cb:08:c0:ad:1a:09:64:a6:
f5:ac:a0:95:b0:8f:df:fd:4a:f0:84:1d:8a:4e:1d:5e:99:65:
fe:11:fb:4b:34:d7:a9:6e:e8:b6:66:96:ce:cd:e2:3a:4d:fa:
2d:3d:44:39:5a:9f:2b:ac:bc:9b:56:02:79:50:51:eb:65:71:
5b:40:5a:a8:ae:31:1a:a5:2a:6f:6e:43:19:e2:56:eb:6f:3b:
b6:1b:93:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:54:59 2025 by rpki-client