Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/493091E2DEEC11EFACB35F89762E951A.roa
File: 493091E2DEEC11EFACB35F89762E951A.roa (raw, json)
Hash identifier: 8nzL3cmXFLnMEYPFfVqZcBZyi32xAsTm3gpkkZGbFUA=
Subject key identifier: D6:51:1D:E5:B1:79:EB:DC:0D:14:A1:98:F4:46:82:83:6A:36:04:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/493091E2DEEC11EFACB35F89762E951A.roa
Signing time: Thu 30 Jan 2025 09:26:29 +0000
ROA not before: Thu 30 Jan 2025 09:26:25 +0000
ROA not after: Tue 04 Mar 2025 09:26:25 +0000
asID: 214967
IP address blocks: 45.197.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71109 (0x115c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 30 09:26:25 2025 GMT
Not After : Mar 4 09:26:25 2025 GMT
Subject: CN=679b45c5-15aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:ee:87:cd:6c:63:33:88:f3:bb:8a:d2:95:
b8:2c:26:ad:f3:60:db:03:dd:25:e2:7c:8c:58:16:
1b:ce:7c:fe:62:4e:7a:f4:7e:d3:25:9e:e7:80:b4:
05:fd:7a:0e:91:69:06:ac:43:d9:a3:0c:54:2a:de:
92:31:9f:9d:81:18:98:b6:9f:3d:29:70:81:1d:a0:
80:74:e3:31:f1:27:66:74:b6:9e:fd:b4:c8:4a:f5:
82:64:46:36:ca:f7:73:97:b4:5d:84:00:f9:48:dc:
1d:7b:34:73:04:73:82:8c:a7:66:25:fe:67:f0:44:
d6:3b:36:60:e2:f7:da:1a:f7:1c:f5:36:19:c8:d0:
26:9b:92:44:e5:56:95:fb:07:88:f9:ca:08:52:07:
7f:6e:18:f2:35:f7:88:b8:57:f9:41:cd:79:7d:f3:
43:10:74:6e:4a:c0:8d:1b:3e:a6:6d:b1:56:c4:3e:
21:b0:44:5a:e9:63:65:0a:8a:b2:27:a1:b6:1d:53:
4c:1f:44:3b:a7:ce:ca:8f:32:e6:ae:a9:d7:1e:ac:
cc:f7:70:f3:04:ef:6b:9a:14:88:93:c5:c4:d5:b9:
d2:c6:a5:d9:10:1c:28:b5:22:b6:80:91:97:26:fe:
e4:6d:24:04:a0:61:b9:a4:66:fd:ba:36:8e:48:10:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:51:1D:E5:B1:79:EB:DC:0D:14:A1:98:F4:46:82:83:6A:36:04:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/493091E2DEEC11EFACB35F89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.25.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3a:20:c7:b2:c1:88:00:11:c5:ba:af:c3:b5:e5:e3:ef:65:
e8:53:e4:99:46:c1:ef:bc:61:1f:fc:d4:14:df:d0:d0:17:b3:
c5:51:8a:14:41:5e:da:02:23:f1:e6:c9:3e:38:06:0d:10:84:
02:7b:4a:06:a1:ed:10:dd:9d:59:40:1c:f8:fe:c3:c0:e4:77:
e6:98:85:32:79:a5:82:08:52:e2:29:69:22:07:54:f6:29:ab:
cd:77:7e:58:ee:97:9f:eb:91:0a:82:ef:4f:42:d9:ae:76:db:
00:b6:54:82:b8:5b:f4:86:38:74:a3:b7:b3:85:b4:ed:f8:db:
ba:1f:5d:db:16:b4:57:76:cd:cb:e2:f8:d1:88:03:65:57:ef:
31:9e:d4:3f:c5:03:c8:3b:60:05:a8:0b:13:60:e3:0d:0f:1c:
45:11:4c:04:cd:77:f6:04:ed:e9:5c:b1:99:c9:98:24:3e:d7:
5e:9c:89:7c:a3:6a:fe:76:ee:21:29:b3:98:7d:ae:0c:90:41:
ce:33:98:80:71:dd:c9:89:f4:d3:3d:8d:4e:3f:30:8d:f8:d9:
dd:d2:a6:65:ba:56:94:60:37:6b:c0:a4:ca:db:37:99:ef:e7:
7b:47:78:6f:44:2e:40:db:1a:8a:de:43:69:af:4d:95:a5:43:
e5:3f:b4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:59:10 2025 by rpki-client