Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B76AB6ED57911EFB2ADD452762E951A.roa
File: 1B76AB6ED57911EFB2ADD452762E951A.roa (raw, json)
Hash identifier: 8l3EjfWRWxbUXSWnkGg1tj2z7YWv6PSFtyOKuAqvtig=
Subject key identifier: 51:44:F8:E9:5E:14:10:54:BC:7E:21:2C:F4:7B:1D:26:38:A8:81:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B27
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B76AB6ED57911EFB2ADD452762E951A.roa
Signing time: Sat 18 Jan 2025 08:49:20 +0000
ROA not before: Sat 18 Jan 2025 08:49:16 +0000
ROA not after: Tue 18 Feb 2025 08:49:16 +0000
asID: 151407
IP address blocks: 45.196.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68391 (0x10b27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 08:49:16 2025 GMT
Not After : Feb 18 08:49:16 2025 GMT
Subject: CN=678b6b10-300c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:17:5d:a0:c7:b2:85:86:1d:1d:d8:b9:eb:e9:
51:ed:98:b8:56:cd:40:fd:59:5d:77:6d:6c:52:1b:
fb:8c:72:30:eb:fb:e9:ae:fd:cd:fc:db:b7:bb:98:
2e:04:ca:35:2b:03:41:25:45:c1:81:c2:72:66:da:
e2:89:72:b7:88:52:dd:b8:d7:94:a4:95:00:1e:e0:
55:ef:54:b4:6b:35:1c:1e:46:15:8f:52:49:04:4a:
0a:6d:73:9b:23:d5:0c:5a:6e:12:99:98:7a:bd:3d:
84:78:38:57:8a:4c:66:c3:e3:b8:1c:b9:7f:0c:9c:
cf:59:92:7b:07:1b:bd:70:40:98:f0:a8:7d:0d:c2:
9f:44:b8:33:0a:d9:e5:64:f2:1a:a5:f8:0f:7a:27:
be:de:cd:99:dd:51:07:95:81:f7:7f:a5:81:b1:df:
fb:90:d9:3f:93:74:a9:60:80:03:cf:ba:cf:e7:81:
fe:fc:01:08:86:f4:48:c6:fe:b5:b6:ae:02:a5:ac:
f3:42:98:92:f9:73:3d:52:24:1e:91:36:db:11:88:
bf:f0:05:99:72:e5:2e:5a:16:b8:17:9d:27:0a:1f:
ac:98:2d:f3:97:3e:59:09:ca:3b:93:18:c5:4d:b0:
be:47:27:60:fd:85:c0:e3:6f:de:15:2f:92:61:2d:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:44:F8:E9:5E:14:10:54:BC:7E:21:2C:F4:7B:1D:26:38:A8:81:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B76AB6ED57911EFB2ADD452762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.237.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:9e:71:0f:ca:f8:b4:88:4f:42:df:08:96:32:19:25:cd:26:
9a:c1:43:29:50:14:c3:78:de:52:24:f9:50:d0:ad:2a:fd:44:
7b:10:5d:3a:f9:3d:40:61:c5:83:db:05:d1:20:64:cd:5c:20:
58:b8:de:61:31:34:7e:ba:a9:04:f0:b1:58:e8:d9:22:6c:3b:
b8:26:c6:25:43:66:bf:d4:53:97:23:7c:ec:a8:70:16:f9:59:
23:a1:03:08:f0:8a:20:19:85:64:a8:3b:cb:6f:20:0a:21:a3:
b0:b1:85:27:76:74:2c:a5:9b:cc:d4:65:19:3a:c4:c3:15:03:
8c:2e:c0:f5:ed:d0:84:4a:b0:7c:42:ad:3c:ab:90:6e:46:6c:
bd:e9:6d:6e:18:55:02:6a:07:eb:43:85:57:a4:88:e2:14:7b:
dd:93:e2:d3:fb:5a:a7:91:81:cc:7a:f2:a3:f6:9d:25:c9:4a:
62:cf:42:28:7c:3a:5a:44:0f:51:88:8f:57:e7:ff:1f:82:a9:
63:3d:19:05:24:f8:7e:69:32:8c:a6:73:fd:10:ba:bd:7f:ff:
b1:91:87:c9:2c:2a:0d:68:4c:e5:04:75:3c:e2:0e:d3:27:e7:
a0:6d:ce:d4:ff:a1:0c:99:ad:ac:fa:93:ce:1a:5a:e7:c0:4e:
ac:db:d3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:41 2025 by rpki-client