Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/445068A4DC8611EFA32C2945762E951A.roa
File: 445068A4DC8611EFA32C2945762E951A.roa (raw, json)
Hash identifier: DSSwnIQukaQ8Gd0xEmZEVCBjKK4fRuWAqmsdjvepbrI=
Subject key identifier: 2E:C3:52:30:08:92:37:C8:82:DD:D0:8D:55:2A:96:A0:B3:94:3C:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01149B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/445068A4DC8611EFA32C2945762E951A.roa
Signing time: Mon 27 Jan 2025 08:11:10 +0000
ROA not before: Mon 27 Jan 2025 08:11:06 +0000
ROA not after: Tue 04 Mar 2025 08:11:06 +0000
asID: 138995
IP address blocks: 45.192.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70811 (0x1149b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 08:11:06 2025 GMT
Not After : Mar 4 08:11:06 2025 GMT
Subject: CN=67973f9e-044d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:2f:8d:4e:e1:b8:ab:72:93:80:6c:a5:90:
2d:eb:4c:cf:6a:c5:da:65:a6:08:19:4b:00:b9:81:
c1:9e:15:4c:d7:6a:20:12:7d:37:77:73:78:8a:ee:
0a:4e:47:ad:60:a6:8e:c6:42:de:5a:97:4a:11:08:
e0:f9:a4:ec:76:58:68:64:fd:3a:4a:5c:4a:47:87:
c8:42:67:96:bb:09:16:98:0f:00:70:ce:16:f9:97:
b4:4e:2b:2a:8c:d3:c8:f0:dd:c3:3d:5c:d1:d0:4e:
31:65:cf:6b:3c:bf:31:d6:a8:6b:44:63:a3:df:1a:
e6:d7:80:08:8f:3a:10:4b:8c:82:5c:0a:d9:48:69:
c8:b3:56:fb:81:3e:77:dc:05:28:13:31:41:a3:01:
67:9c:41:bc:22:38:71:80:7b:fa:57:2d:ce:a5:ca:
0d:0c:4f:8d:59:33:ea:8a:3d:53:ea:33:ef:d1:cf:
45:3c:53:af:df:37:19:49:a6:ea:32:8f:74:74:31:
ac:62:fb:70:92:80:68:76:be:24:e6:8f:5e:6d:7b:
d6:b5:64:7c:a1:1e:fc:9e:5e:94:48:08:c1:65:54:
26:86:46:e2:65:21:f3:98:a9:4c:5f:68:a4:5b:1c:
61:7c:b3:1c:f9:97:2e:62:33:c6:e1:ef:19:09:ec:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:52:30:08:92:37:C8:82:DD:D0:8D:55:2A:96:A0:B3:94:3C:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/445068A4DC8611EFA32C2945762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.221.0/24
Signature Algorithm: sha256WithRSAEncryption
24:29:d1:84:19:c4:6c:4c:75:f9:1b:43:d1:e6:8a:8d:be:5f:
4c:f4:cc:6c:56:90:20:89:12:6f:d9:d9:2a:60:c3:43:58:a1:
a0:e2:30:4a:4e:01:f8:ce:c9:16:a5:4c:93:45:83:c8:05:d7:
03:d8:9d:d2:00:48:61:df:ef:85:8b:f6:71:9e:df:fb:fb:1e:
7b:3c:b3:32:9a:58:ab:8b:6b:0e:64:bd:50:ec:cc:f8:aa:a4:
f4:87:f0:89:44:55:dd:45:6d:8f:c4:87:43:b7:6d:72:3a:5a:
cd:d7:ae:34:60:b7:93:0c:b2:cb:04:f3:20:ef:22:d2:8b:06:
87:c3:13:92:3d:3c:6b:b8:64:b4:4f:3c:35:bb:1e:2c:48:33:
63:83:b0:73:93:85:bb:c0:bc:17:ad:15:37:cc:61:58:ab:06:
e6:97:38:c9:85:ec:f0:7c:f6:d4:1f:a7:25:8b:fc:d3:ba:c3:
88:b5:cd:4b:86:e4:3c:67:d8:d8:b5:0f:65:7d:b8:e9:ec:84:
7b:bb:7b:83:46:ce:ce:da:d9:b4:b6:7c:9f:0f:58:d6:6d:8e:
ee:fc:b7:3f:60:98:73:8b:d1:19:e0:d5:7a:6e:95:c6:4c:4b:
5e:4e:4b:d9:03:6e:a7:d7:dd:62:68:0c:63:70:b6:71:c2:67:
f6:20:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:23:56 2025 by rpki-client