Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28F71ED6DA2411EF9513D6AA762E951A.roa
File: 28F71ED6DA2411EF9513D6AA762E951A.roa (raw, json)
Hash identifier: ddNjqve61utR7t8Ef7KPNSI51T+e9nFJCstGQ3NcmOw=
Subject key identifier: C1:DD:6C:D0:33:17:48:8C:24:C6:B9:53:F8:95:10:26:28:E9:D1:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F2B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28F71ED6DA2411EF9513D6AA762E951A.roa
Signing time: Fri 24 Jan 2025 07:23:51 +0000
ROA not before: Fri 24 Jan 2025 07:23:48 +0000
ROA not after: Tue 25 Feb 2025 07:23:48 +0000
asID: 202656
IP address blocks: 45.192.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69419 (0x10f2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 07:23:48 2025 GMT
Not After : Feb 25 07:23:48 2025 GMT
Subject: CN=67934007-d0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:5c:47:30:7e:a5:f9:1b:3b:5c:d0:97:02:
c3:66:2d:73:53:12:90:0f:7f:7c:6c:af:3f:b5:81:
a5:43:ac:2a:42:30:5a:7d:20:73:a5:46:a4:6c:ec:
20:dc:dd:c7:cd:54:0e:02:fb:66:5c:7a:7b:de:a0:
8a:f5:2f:9d:31:67:fb:ab:35:5a:ec:14:34:45:d8:
ef:cb:bb:5b:4f:27:15:97:e0:0b:12:45:d5:a1:88:
48:68:d1:51:dc:0d:76:66:99:c0:f5:3e:ca:ac:25:
99:1b:92:4d:94:d8:52:5b:9f:cd:dd:e7:f1:3b:e3:
9a:f4:93:90:ec:6f:24:df:c8:0c:1f:15:d0:b4:99:
ea:96:88:31:8f:eb:54:1f:32:85:79:78:30:30:84:
97:2c:d4:8d:8b:ea:45:8a:92:e3:1c:09:1c:c8:55:
fc:b5:f2:4a:8a:6f:15:35:3e:a9:4b:75:6f:6f:58:
a0:4d:d6:ea:57:76:6f:ab:51:eb:bd:0e:6b:1e:58:
84:d0:e7:9b:29:6b:82:e4:ca:bd:be:fb:09:7e:8e:
9f:f8:b8:71:60:14:03:64:46:b9:6e:2d:3e:6f:42:
9b:d3:21:56:e8:ee:28:13:3f:46:e8:5f:b1:bc:e0:
ba:4e:38:3a:5a:6a:6b:cb:88:60:3d:71:bf:a2:fa:
30:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DD:6C:D0:33:17:48:8C:24:C6:B9:53:F8:95:10:26:28:E9:D1:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28F71ED6DA2411EF9513D6AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.54.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:d0:5f:35:1f:e7:64:f1:55:41:a0:ef:b0:52:c6:8b:b5:1e:
21:1b:d6:6a:23:6d:d7:e6:b7:13:b1:fe:fe:36:16:a0:54:b1:
20:bf:f8:6c:88:78:d2:44:f6:06:05:87:ac:00:ea:50:a5:52:
d7:8a:7b:cc:4c:e1:bf:59:1a:47:3a:9d:61:44:06:d3:29:d3:
b8:ab:8b:3a:12:33:a9:a9:2a:c7:53:87:7c:c0:c4:7e:0a:59:
fe:1c:3c:25:f6:fc:ce:48:1e:db:3e:10:29:ab:50:89:c2:41:
cc:21:3e:84:e7:d3:76:22:0b:2c:1c:87:c4:35:36:9a:92:88:
ec:52:75:93:20:2e:30:f4:9b:9c:fd:bc:0c:2e:8a:b9:f1:9f:
07:f9:38:26:dd:ee:b7:8e:c7:e8:46:a3:f5:92:ef:2d:9c:4d:
0a:27:37:1f:1c:5f:cb:16:96:fb:e3:0d:0f:56:ec:29:ee:35:
90:e6:0d:8f:52:52:74:1c:6a:54:eb:75:2a:f1:77:8e:4a:37:
ce:b6:3e:19:9f:c5:d8:24:be:a0:4a:b1:3f:b7:b4:e8:18:3d:
51:4f:0b:c6:63:d2:bb:5f:3e:e1:a7:15:bb:ec:2a:89:98:09:
82:9b:77:93:fe:c6:ef:54:93:b2:db:2d:8d:6d:b4:4d:09:ae:
2c:f7:03:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:43 2025 by rpki-client