Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/459784C2D70911EF8BFB808A762E951A.roa
File: 459784C2D70911EF8BFB808A762E951A.roa (raw, json)
Hash identifier: Zf6kW+iQkfjVO+DraIc4Sx9fsuto7K6aeKEuzE5RrWI=
Subject key identifier: 11:A0:E3:6A:A2:BA:27:91:A3:0F:8D:C9:79:EB:90:C6:75:23:AC:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/459784C2D70911EF8BFB808A762E951A.roa
Signing time: Mon 20 Jan 2025 08:33:49 +0000
ROA not before: Mon 20 Jan 2025 08:33:46 +0000
ROA not after: Sat 01 Feb 2025 08:33:46 +0000
asID: 202656
IP address blocks: 45.192.48.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68603 (0x10bfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 08:33:46 2025 GMT
Not After : Feb 1 08:33:46 2025 GMT
Subject: CN=678e0a6d-16fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:e7:62:eb:c7:24:ea:7f:e2:14:93:6f:82:
f9:cc:87:d2:e4:cf:89:98:46:55:87:1e:e4:13:95:
80:d5:26:80:3b:fb:c0:61:99:0d:d0:3d:08:61:a9:
a1:00:96:b8:ec:15:88:72:f4:ca:a8:0d:a3:dd:f6:
74:8b:66:1c:73:be:32:a0:50:4e:f7:7b:4f:41:13:
5c:09:51:3b:0b:e6:02:6f:49:ac:4a:c9:4c:ba:ef:
3e:72:a5:66:45:21:54:4e:de:ae:e1:3e:34:38:54:
40:37:fa:31:d7:85:f9:29:f5:e7:2b:34:65:cd:57:
3d:a7:20:6b:3b:9a:d5:52:b0:8e:f1:41:7b:8b:c0:
e4:34:cb:ea:dd:02:90:b6:c5:18:5c:b3:d4:43:06:
03:cb:fb:ce:82:30:24:80:19:86:d0:34:ed:05:76:
f4:b6:d1:d8:40:e0:77:52:21:2e:42:d6:d3:c0:22:
3d:2e:4b:d0:cf:27:28:d6:fa:60:cc:b2:1d:40:da:
59:e2:5e:69:65:51:3e:86:c3:95:34:7c:b7:04:83:
22:9a:bc:18:3c:71:1a:f1:de:27:09:cc:5f:47:6c:
6f:42:e2:ed:a7:ff:73:7c:ae:ac:df:37:27:5b:da:
ea:bf:53:49:54:43:8f:8d:72:44:41:23:e1:ee:c7:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A0:E3:6A:A2:BA:27:91:A3:0F:8D:C9:79:EB:90:C6:75:23:AC:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/459784C2D70911EF8BFB808A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.48.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:b8:10:4d:b9:d2:6f:8c:64:13:9e:db:01:19:3a:1f:2b:50:
ae:8b:b7:0f:f0:8a:7b:5d:45:34:1d:fd:a4:d6:f6:78:bb:6c:
4e:eb:7d:fc:82:b9:36:01:f6:4f:b9:33:0c:a6:1e:7f:0a:50:
88:f3:1e:01:1b:85:3f:88:89:df:91:dd:8f:f6:02:70:a0:7c:
c2:05:6f:4d:81:60:4f:b1:e4:8e:81:18:1b:29:95:aa:34:f5:
77:b4:64:08:bb:ad:4b:27:96:ad:66:aa:09:5d:a3:37:46:7c:
81:46:fe:7d:40:e3:60:78:e6:88:06:2f:b8:38:c2:e6:14:de:
2f:98:15:f1:f7:c8:ed:30:c4:b3:f9:99:5e:1a:34:5e:f7:2d:
c9:32:c5:c1:dd:73:62:6e:fb:2d:33:b6:62:d6:5b:53:8a:86:
ab:b1:2a:b3:0f:7e:fc:94:9d:a3:b0:9e:09:9e:09:9a:b3:40:
fa:f2:d7:02:7d:9b:ff:d4:dc:96:94:ef:87:11:49:06:cb:88:
bd:f2:c8:40:09:91:81:11:f8:e8:73:f7:e0:62:fe:2f:20:f0:
15:5d:0a:15:77:41:3d:1d:d7:56:c5:16:70:05:52:eb:2c:72:
33:09:71:86:32:bd:1b:88:e2:73:b1:ea:d9:32:12:f7:1e:e0:
0c:1a:6f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:45 2025 by rpki-client