Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23D06A38DAED11EF9A332481762E951A.roa
File: 23D06A38DAED11EF9A332481762E951A.roa (raw, json)
Hash identifier: miHPucMmzVcWwMFFqHkH716fYpg8D7nSG2un8v1HLiU=
Subject key identifier: 62:0E:89:51:22:0D:4E:92:74:18:96:78:A5:BE:80:B2:99:5B:E9:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011119
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23D06A38DAED11EF9A332481762E951A.roa
Signing time: Sat 25 Jan 2025 07:22:31 +0000
ROA not before: Sat 25 Jan 2025 07:22:28 +0000
ROA not after: Sun 23 Feb 2025 07:22:28 +0000
asID: 202656
IP address blocks: 45.195.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69913 (0x11119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:22:28 2025 GMT
Not After : Feb 23 07:22:28 2025 GMT
Subject: CN=67949137-170f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:88:eb:c5:ab:f4:75:cd:df:28:b1:e2:df:
27:c0:13:b7:d5:6f:ea:1c:32:59:61:b9:50:5f:76:
76:79:62:c1:80:1c:51:13:28:0f:eb:43:0f:6e:19:
83:88:38:40:e1:e7:53:56:21:39:0e:6c:95:c3:78:
3f:36:1a:f2:dc:35:71:64:7b:35:1c:1d:82:0b:1d:
66:dd:76:43:c1:2b:b2:c4:50:30:47:a2:66:a1:48:
d0:22:12:99:48:8b:23:98:e9:3e:67:88:12:02:8a:
75:b5:c1:27:3c:58:c3:a8:a2:55:8f:2a:13:75:1b:
d8:65:d3:8c:90:2a:6e:87:b2:47:46:18:29:9b:d2:
a2:7e:53:02:f2:88:28:25:c5:fc:93:61:17:61:c2:
df:8d:a1:7c:86:84:dd:9b:a7:9d:9c:15:6b:9c:ff:
6c:c7:73:11:65:81:a1:dc:61:6a:f9:06:27:71:31:
e4:7e:29:2f:53:5b:a0:36:03:8b:c1:71:89:ca:3a:
8e:9b:e3:37:1f:88:c9:ca:f7:a6:ff:ce:5c:96:57:
f3:a6:9c:4d:63:fa:46:ae:5f:73:50:90:42:7e:d6:
73:6d:0f:a2:30:75:16:4e:96:dc:bd:da:c9:13:aa:
63:d9:b9:5c:46:56:50:02:df:29:3b:78:6a:48:46:
38:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0E:89:51:22:0D:4E:92:74:18:96:78:A5:BE:80:B2:99:5B:E9:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23D06A38DAED11EF9A332481762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.170.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b2:bf:93:1a:a2:cd:55:3e:25:da:64:3c:8a:ce:ee:4c:99:
11:f6:79:f8:e4:65:97:cc:98:66:73:23:6d:f2:4e:cb:2e:0c:
2b:c6:7e:47:08:1b:3e:ce:7f:34:8d:55:58:48:73:ef:09:0e:
a7:94:cf:dd:d6:5d:e6:d5:8b:22:b8:9a:39:a3:e6:4e:98:f4:
d2:b2:fb:ac:bd:37:a6:c7:22:99:d9:ab:3d:f0:9c:51:59:44:
dd:4e:32:71:df:71:86:9b:57:88:9b:61:f6:84:ab:0f:55:32:
ff:8c:ff:0e:e5:54:3a:c7:9b:16:f7:a2:94:38:a2:42:3b:90:
fe:b8:8e:c5:8e:2f:8f:07:a7:57:2c:68:36:8d:88:86:49:e4:
3d:31:1a:cd:b5:07:bd:dd:23:c3:32:78:ac:2b:d7:42:04:c2:
66:42:54:0c:5f:82:f7:7c:0f:1a:d7:52:09:4d:35:2c:1f:73:
e4:8f:95:be:c6:8e:8e:ba:2a:e3:24:a7:08:6e:1a:0f:ff:a7:
7d:78:f4:e1:6c:28:b6:6b:e1:96:ab:e8:03:28:c9:aa:af:6d:
e7:2a:0b:f5:64:fc:ef:32:64:8b:b6:c4:61:e7:b9:fa:60:51:
25:8b:5b:59:f5:5e:1c:20:2e:57:7f:e9:19:79:b3:5b:20:b7:
c3:73:ce:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:57:50 2025 by rpki-client