Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4148DAB0DAF111EF92A7E29A762E951A.roa
File: 4148DAB0DAF111EF92A7E29A762E951A.roa (raw, json)
Hash identifier: LHHxRLUADdm00hmKc7Ya8/OUn83picZSnWpllG0zHfI=
Subject key identifier: 15:B9:6E:CA:13:30:65:07:51:BF:78:AD:00:4B:E9:78:28:75:55:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011149
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4148DAB0DAF111EF92A7E29A762E951A.roa
Signing time: Sat 25 Jan 2025 07:51:59 +0000
ROA not before: Sat 25 Jan 2025 07:51:55 +0000
ROA not after: Sun 23 Feb 2025 07:51:55 +0000
asID: 202656
IP address blocks: 45.195.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69961 (0x11149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:51:55 2025 GMT
Not After : Feb 23 07:51:55 2025 GMT
Subject: CN=6794981f-5078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:ad:55:64:f1:d9:cc:d6:07:15:d0:96:70:
44:23:0d:1b:ba:28:b6:81:b5:87:fc:7b:f7:44:e2:
79:18:10:92:c4:9f:0b:4a:a3:d3:4c:cd:87:b5:93:
25:87:97:f9:24:72:4f:41:f9:bc:1f:98:e5:5d:a4:
ee:2b:2b:a1:20:3a:ba:e0:3a:91:37:14:a7:52:45:
10:39:8e:83:e6:ca:2b:c3:8f:db:87:86:c1:a3:0e:
f2:28:9a:b0:13:3b:2f:61:70:06:b4:ea:b0:3a:f6:
f1:a5:f3:6f:0f:f3:d5:cf:28:0a:5f:f5:b6:56:6d:
51:ec:42:11:f0:8a:70:ce:39:12:2f:39:d9:49:59:
35:90:f0:da:c5:98:cb:8b:6f:15:89:12:21:8e:bd:
92:1c:e8:29:7d:40:81:be:d3:f5:93:7b:b9:52:46:
12:d2:a8:d2:19:4d:a8:75:f2:98:49:b9:cc:60:2c:
81:01:b2:d7:5e:74:77:df:0b:0e:95:6c:58:f4:41:
db:fc:e6:00:6c:de:57:54:d3:10:28:32:04:dc:9c:
61:d2:d1:c6:21:86:53:78:4e:ef:6b:6b:5a:70:38:
5d:b3:54:be:a5:1d:59:ea:ae:54:95:a8:12:c9:6c:
5e:1b:25:d7:fd:87:5b:ae:b6:d9:16:25:4c:40:7a:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:6E:CA:13:30:65:07:51:BF:78:AD:00:4B:E9:78:28:75:55:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4148DAB0DAF111EF92A7E29A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.184.0/24
Signature Algorithm: sha256WithRSAEncryption
34:34:98:5d:80:20:6c:30:41:7c:8e:48:73:53:e5:3f:a8:0c:
07:2e:7f:3e:9f:1d:72:1b:60:cf:ff:82:f0:53:96:f6:bd:36:
6b:00:46:98:64:1f:de:f1:da:95:8d:e7:6f:45:84:5c:e9:74:
91:69:e6:97:24:00:a6:e3:ac:63:d9:f7:cb:06:41:1d:d0:dc:
64:5b:cd:6b:9d:4b:84:50:5b:79:d2:02:01:0b:97:34:3b:8e:
1f:31:9c:23:69:bb:11:d1:37:38:95:81:75:b3:25:66:1f:69:
62:93:c8:dd:06:66:9d:74:8e:a0:05:5f:f4:d5:8c:21:16:17:
2b:4d:8c:4e:71:1a:3d:93:09:b6:a8:1b:33:32:f1:a6:cb:03:
1f:90:08:e5:fa:d6:d6:d3:a4:06:f9:44:77:20:86:10:21:7d:
cc:61:d3:a4:a4:ba:dc:f4:e2:1e:cb:6b:1b:f6:8f:26:3e:10:
96:45:ae:21:2b:34:8a:14:0b:8d:7f:1a:7b:6d:f1:66:ca:e9:
15:ed:b0:9b:f3:0a:e8:ce:e2:8b:13:d9:1c:bb:9a:44:36:75:
84:01:9f:8a:fa:1d:e8:e5:76:ab:2d:c4:ed:5c:c4:41:dd:13:
78:e7:2f:86:07:19:d8:2a:f8:ca:23:e8:66:98:dd:ad:9d:e6:
9c:f8:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:55:07 2025 by rpki-client