Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D4E771CDC1611EF926E834B762E951A.roa
File: 0D4E771CDC1611EF926E834B762E951A.roa (raw, json)
Hash identifier: 5CyW7QLrH2J7ZIhLjRtWW+xWqVfA0bn/eH2HNLln5hY=
Subject key identifier: E3:CF:A5:88:16:40:60:4C:34:33:93:CE:07:B5:E4:B1:53:EB:3F:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01143A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D4E771CDC1611EF926E834B762E951A.roa
Signing time: Sun 26 Jan 2025 18:47:54 +0000
ROA not before: Sun 26 Jan 2025 18:47:50 +0000
ROA not after: Fri 07 Feb 2025 18:47:50 +0000
asID: 151800
IP address blocks: 45.197.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70714 (0x1143a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 18:47:50 2025 GMT
Not After : Feb 7 18:47:50 2025 GMT
Subject: CN=6796835a-9a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3d:b3:1d:fe:bc:fc:4e:89:ae:8c:f1:f7:41:
95:50:a7:46:c4:36:5c:8d:dc:4c:fb:a1:25:7d:9d:
b3:8c:a1:78:5d:68:9b:e9:6b:f1:d3:2f:b5:0a:85:
e5:f1:e9:b7:56:8a:36:91:f5:57:03:1a:b2:c1:0c:
90:80:65:4f:74:ce:ff:48:3c:70:e7:bd:a8:0a:8f:
9a:c7:da:39:da:e4:8a:ac:e9:bf:e6:84:4f:5e:3f:
ef:57:d9:f5:06:be:b0:12:66:72:e5:ab:60:9c:47:
45:65:dc:0d:38:b8:f4:97:0d:a3:f1:82:73:f4:ba:
16:2c:c1:82:91:3f:c9:b0:12:6f:d2:a0:59:46:b7:
d2:f4:b1:e9:c1:ce:04:83:99:cc:43:ea:0f:0e:e2:
1a:91:aa:e8:60:6a:ff:ed:95:7d:c0:a5:73:96:5d:
fe:d1:5b:bc:f2:03:10:a2:40:96:2c:e7:26:13:19:
51:90:b5:2b:c6:cd:51:a7:de:24:85:eb:7f:87:a2:
63:57:27:77:f4:8e:b7:cd:bc:21:70:e5:5b:7e:93:
8e:f2:db:a5:85:30:b6:92:56:df:60:35:63:85:0d:
49:0a:95:ac:fc:a4:fa:90:a4:6f:29:2e:2c:0e:ca:
20:be:fa:56:64:0d:da:cb:53:b8:5a:94:49:38:2e:
81:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CF:A5:88:16:40:60:4C:34:33:93:CE:07:B5:E4:B1:53:EB:3F:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D4E771CDC1611EF926E834B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.32.0/19
Signature Algorithm: sha256WithRSAEncryption
62:d1:67:7b:80:4a:52:ea:03:d4:6d:6d:61:e8:52:71:5b:5f:
fe:c2:c0:5f:ac:56:e7:e4:61:96:ef:ad:34:84:e5:ee:10:4b:
78:cb:2e:a0:2f:ac:d4:5c:1a:8d:11:ee:40:18:8e:8d:3d:70:
cd:63:8c:3a:eb:a8:92:85:c2:3d:9c:61:28:27:6f:f9:b6:f3:
b6:88:aa:3c:41:81:76:00:fa:72:17:19:26:91:d7:6e:c9:f3:
ad:a5:c1:f8:dd:ea:c0:d3:3a:cd:bd:ae:ba:18:a4:08:6c:ed:
4d:43:68:3b:3a:ab:b9:b2:51:bc:18:28:3b:fc:8c:66:84:56:
a8:08:57:48:84:bb:6d:52:da:ac:c4:ee:17:c1:30:ad:47:0f:
dd:36:8c:de:6d:be:c6:2e:aa:fa:a3:ab:9b:11:d1:aa:d7:7a:
7d:13:09:aa:6f:0e:97:d0:0d:f1:3e:42:bc:94:3b:13:60:45:
26:4f:ef:da:4b:4d:8c:54:e2:e5:7d:97:65:d8:a8:53:40:5b:
16:91:9e:58:a7:4e:67:bf:dc:19:cd:54:67:ce:3d:82:22:d7:
34:e3:36:24:e1:53:66:11:66:a4:31:0a:b4:46:84:d9:7d:e6:
d1:d5:83:5b:42:90:19:d6:8f:b6:69:0a:d9:e5:c0:db:ef:6e:
fe:29:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:41 2025 by rpki-client