Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4696CB64CBDB11EFB6E00066762E951A.roa
File: 4696CB64CBDB11EFB6E00066762E951A.roa (raw, json)
Hash identifier: R/cJRxAwUeINjcDBVsP/cZocAYy5rVn6uNefziAOeuQ=
Subject key identifier: 32:69:21:8E:83:87:F1:C7:B4:A8:A6:80:5B:E8:25:5E:3D:80:B6:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F7EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4696CB64CBDB11EFB6E00066762E951A.roa
Signing time: Mon 06 Jan 2025 03:06:52 +0000
ROA not before: Mon 06 Jan 2025 03:06:48 +0000
ROA not after: Thu 08 Jan 2026 03:06:48 +0000
asID: 136744
IP address blocks: 45.194.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63468 (0xf7ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 6 03:06:48 2025 GMT
Not After : Jan 8 03:06:48 2026 GMT
Subject: CN=677b48cb-a42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:50:58:f6:26:4c:2e:4e:83:c5:f1:52:ad:
b0:bc:9c:eb:d3:be:bc:b8:78:2d:cb:a4:d9:4b:84:
1b:1a:90:aa:09:63:d6:fb:2e:1f:47:4e:7f:4b:5b:
2d:d5:ee:b8:b0:05:b0:77:f1:9d:4e:53:e5:2b:00:
46:7b:8e:4d:de:93:73:fb:fd:ce:a8:7a:e0:7d:a1:
d3:01:09:f4:a9:3b:56:85:98:e9:9b:73:4c:c7:45:
c4:e7:1f:14:b8:18:61:e2:ff:41:e5:22:cc:22:2f:
85:ec:1c:22:6e:22:ca:b8:c2:28:61:a1:ef:48:cb:
fc:cf:a3:a3:b9:84:8b:33:61:93:1f:48:11:b6:5f:
4d:e8:54:81:b3:57:d1:8d:d4:e7:1e:97:6d:6d:00:
ca:7d:5f:60:51:ac:6f:62:68:0f:00:17:89:07:72:
9d:fa:9d:e8:8e:40:b0:88:62:04:25:38:c2:2d:6e:
54:0a:bc:2b:3c:81:66:35:d0:0c:90:6a:8a:a8:6c:
81:fa:fb:01:4a:49:6f:09:fa:09:f0:14:a6:fd:62:
09:24:a9:54:60:0c:84:a1:e0:e5:ef:53:c6:b2:a3:
78:54:47:69:d9:05:30:b7:bc:47:7f:8e:6e:76:3f:
00:5a:86:8b:b4:2a:7d:23:ad:4c:f3:f1:17:f0:bf:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:69:21:8E:83:87:F1:C7:B4:A8:A6:80:5B:E8:25:5E:3D:80:B6:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4696CB64CBDB11EFB6E00066762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.122.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b3:27:dc:fa:ae:ce:2f:c4:c4:5b:dc:47:d2:f0:3e:b1:64:
dc:1c:7c:38:58:b2:4f:e8:b9:48:62:7e:40:3a:a1:43:fb:45:
1a:13:c6:fe:a7:ee:7e:12:7a:d4:e7:e8:59:3a:ef:e5:db:ba:
3e:0b:e5:55:5e:7b:de:ee:58:57:ff:6c:bf:de:b8:05:6c:21:
82:45:f6:de:a3:59:49:af:60:d0:f7:91:72:1d:aa:03:bc:6b:
a4:65:37:41:f8:23:72:b9:1a:17:7c:72:64:79:cf:3b:df:0c:
c7:ba:b4:b2:e2:41:f5:92:e4:da:3e:bb:2e:cc:f1:4e:30:89:
d3:bf:83:d1:6b:8a:f9:b1:57:0d:72:d6:1f:b6:18:36:7f:9b:
16:b9:7a:2e:de:b1:3c:f0:2f:cd:c8:71:f3:d7:c2:b3:78:17:
72:d5:38:31:a6:06:c2:55:95:c0:95:4e:e4:68:e1:fc:56:0d:
96:b8:51:6c:bf:86:a1:e7:d1:d1:21:e5:a3:6c:87:a9:c5:f0:
5b:d4:f5:5b:ef:4c:bc:f7:2b:f9:1b:bb:eb:04:90:f0:b6:43:
40:a1:9f:1a:84:91:a3:af:a5:a4:67:3c:e2:e4:a9:82:14:e3:
87:3c:c7:64:30:69:c7:9a:63:3b:8b:e6:56:35:3d:86:b1:54:
29:57:b6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:12:46 2025 by rpki-client