Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02F13ACEDAF011EF893B8E93762E951A.roa
File: 02F13ACEDAF011EF893B8E93762E951A.roa (raw, json)
Hash identifier: 4VyvIu50jOb8nFjW+vcYyu8PpoPMm2WTNz2IFqJP1Pw=
Subject key identifier: 56:EF:E2:A7:6E:0B:5A:7E:69:7C:1A:9A:BF:08:58:E6:FB:25:6B:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01113D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02F13ACEDAF011EF893B8E93762E951A.roa
Signing time: Sat 25 Jan 2025 07:43:05 +0000
ROA not before: Sat 25 Jan 2025 07:43:01 +0000
ROA not after: Sun 23 Feb 2025 07:43:01 +0000
asID: 202656
IP address blocks: 45.195.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69949 (0x1113d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:43:01 2025 GMT
Not After : Feb 23 07:43:01 2025 GMT
Subject: CN=67949609-4621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:dd:9f:f4:56:d1:58:34:48:e1:fb:c5:46:
07:fa:cf:35:5c:8c:80:f3:6c:4b:ef:4a:ac:99:8c:
8c:84:53:e3:5f:58:cb:a4:60:68:e6:a6:09:b9:f9:
4c:08:18:d5:93:b3:32:ac:0b:a3:bb:56:fc:6c:23:
e6:75:4a:bf:ba:dd:29:5c:07:f3:b2:98:fc:f5:75:
17:c2:ef:ed:d1:9b:2f:60:18:a5:44:44:59:5f:e0:
3f:cc:8f:5d:ef:aa:5b:cb:fb:e1:f1:dd:ba:7b:f9:
ca:4c:b2:fa:1b:a3:47:6a:a0:74:2c:b2:7e:fe:83:
e4:7f:2e:39:da:35:6f:ac:b8:b9:90:94:49:4a:c0:
07:d6:a6:26:eb:1f:9a:46:c6:92:34:80:56:56:6b:
97:86:bf:e4:f7:fb:a9:7c:e9:a9:bd:2e:a5:27:cb:
2f:30:df:ce:81:2e:1b:63:4a:33:d1:10:c8:f1:a1:
b2:42:b0:07:d0:b6:71:39:7e:ea:72:42:83:84:9a:
e5:a1:a7:67:99:ba:9e:38:4c:a8:86:73:8a:76:65:
96:65:25:7c:c7:c8:e9:ba:ff:ef:2f:64:2f:38:6d:
18:36:72:06:45:ea:88:d9:a7:42:f9:ef:9e:6e:48:
79:94:81:06:fa:f4:ff:ab:dc:1d:1c:1f:b4:8b:50:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EF:E2:A7:6E:0B:5A:7E:69:7C:1A:9A:BF:08:58:E6:FB:25:6B:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02F13ACEDAF011EF893B8E93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.180.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b3:35:c9:1e:16:1a:9b:5c:74:cb:fa:ba:d3:98:14:2f:cf:
ee:b6:eb:39:03:7f:62:6d:e0:43:23:34:1e:10:f1:b3:58:06:
86:4b:a0:35:be:32:dd:b9:73:b9:02:0d:c2:f6:ad:8a:39:73:
97:02:6e:89:99:20:29:6d:f4:44:4b:d2:75:42:7c:90:13:52:
ad:12:06:8a:cf:8f:b3:94:93:1c:60:2e:af:99:c1:33:81:87:
4c:0d:9f:7f:2b:a7:56:08:21:03:35:df:e0:22:e0:75:68:89:
3f:b7:01:93:8a:5c:4a:19:2d:1c:34:e8:2c:25:37:a0:4f:2c:
3d:14:08:a3:96:6c:a7:e8:ee:b7:98:a3:2a:97:26:eb:f0:03:
6a:56:b0:5d:c1:7a:0d:9a:a5:9b:3a:85:ee:ed:95:b5:87:3b:
80:a6:45:f2:37:8a:f4:c3:73:e8:c4:65:63:c8:02:90:73:57:
a9:a8:ed:f0:7e:8e:ef:15:8d:d1:9f:3c:c4:1d:29:8d:71:a9:
8b:c7:53:a3:45:51:fd:43:ee:c3:b3:35:4b:25:66:fc:e2:a3:
2d:c3:3d:ec:af:b4:c7:f2:93:53:1a:bc:b0:55:58:74:4f:45:
2b:88:b9:c3:10:53:49:cb:22:d8:d4:3b:c4:8f:1c:48:7d:6e:
74:6d:4b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:57:42 2025 by rpki-client