Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BF1505EDD6111EF98C7648A762E951A.roa
File: 1BF1505EDD6111EF98C7648A762E951A.roa (raw, json)
Hash identifier: YArjeF3yNapElg2iMprwXjuxHQS0A5D9aWIGR/mhbz0=
Subject key identifier: BF:82:20:F0:C1:BB:BB:8C:A0:F6:0B:4A:86:92:FD:38:42:AF:94:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01157A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BF1505EDD6111EF98C7648A762E951A.roa
Signing time: Tue 28 Jan 2025 10:17:42 +0000
ROA not before: Tue 28 Jan 2025 10:17:38 +0000
ROA not after: Sun 09 Feb 2025 10:17:38 +0000
asID: 39600
IP address blocks: 45.195.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71034 (0x1157a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 10:17:38 2025 GMT
Not After : Feb 9 10:17:38 2025 GMT
Subject: CN=6798aec6-068c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:e9:22:3d:f2:e6:3e:5d:3d:83:72:64:9d:
eb:7a:a1:0c:88:55:6b:90:77:80:53:59:d4:9f:9a:
01:db:b5:96:73:a6:80:c1:bf:a6:49:1a:6e:53:e2:
af:11:1c:26:c7:fc:71:14:15:94:a8:5f:23:a1:3a:
92:bc:1c:a9:18:92:a6:70:68:64:e2:08:3b:03:ab:
c4:4f:44:67:ab:32:49:b1:65:0a:af:8f:13:6a:35:
82:40:75:dc:6c:dc:80:32:4c:0a:86:d3:d5:c3:e5:
c5:2c:6b:8e:73:a3:c9:ed:45:08:67:4d:d3:33:a2:
37:d1:e6:5a:4b:be:5b:d9:08:22:ce:fc:20:4d:e4:
ff:51:b9:9d:a9:90:60:40:96:64:cc:6d:e2:0c:22:
99:2b:3c:88:fd:76:e0:b8:d2:8c:bb:c0:b2:30:e9:
9d:67:55:bb:21:76:24:50:f0:a9:d5:0c:f1:f9:5e:
8b:6e:b4:5e:05:89:f5:1e:df:44:9b:bb:5e:39:8b:
5d:15:a9:49:b3:b2:c0:01:05:9e:04:67:d7:fb:7f:
d3:da:22:22:08:a4:e6:aa:95:59:53:1f:97:f9:0b:
68:33:3d:d4:cb:43:be:47:31:b3:ed:c5:dd:74:06:
4a:ab:a4:c2:15:46:27:87:9a:57:ff:ae:28:96:66:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:82:20:F0:C1:BB:BB:8C:A0:F6:0B:4A:86:92:FD:38:42:AF:94:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BF1505EDD6111EF98C7648A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.152.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:52:ea:3f:bd:8d:93:d9:4a:be:e3:f1:65:5b:9f:0c:01:66:
4c:8e:4f:41:4f:87:8c:5f:96:b9:18:05:26:06:04:87:b3:cf:
13:bf:ad:22:29:18:61:cf:1c:35:82:f7:f6:c2:a8:ae:fc:f2:
b8:fb:16:09:05:27:ac:9d:9c:26:c5:f1:22:5a:10:2f:8b:a2:
49:ed:0b:cf:18:9e:2e:f5:59:84:98:f2:60:98:38:69:32:4f:
52:13:24:98:c8:db:60:28:ce:3e:54:68:5b:41:9a:2b:93:4f:
29:f7:2e:1c:88:a3:fa:77:24:b0:28:e1:56:c7:0e:9a:a0:85:
66:82:d0:b5:4c:47:8a:cf:8b:dd:f5:7b:d8:e1:5c:20:c6:4c:
4e:24:ba:41:77:08:0e:2c:64:10:3a:73:53:6e:d5:b5:61:b0:
f9:89:c0:e8:8b:6c:72:ed:40:15:4a:92:8c:d7:b4:93:fb:b2:
21:3b:7d:e0:ee:0f:d7:30:08:55:24:24:a4:aa:4d:5a:0e:39:
63:77:25:0e:4a:af:90:a8:20:57:02:8b:70:c3:6b:7f:96:21:
ca:74:59:7f:e5:bb:41:2c:d6:6c:79:63:8b:6f:06:85:25:9d:
2a:37:0b:ff:43:fd:63:e8:3d:1b:20:36:51:8a:0c:fe:69:08:
a6:f9:e3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:14:39 2025 by rpki-client