Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50D0845ADA8E11EF8E6F9B76762E951A.roa
File: 50D0845ADA8E11EF8E6F9B76762E951A.roa (raw, json)
Hash identifier: 48xNghzo1v7J4bNLqDTGU2Em6cCqCxSSML2WK2YkfU8=
Subject key identifier: 67:2C:6F:48:74:C2:DA:3B:4C:26:4C:75:05:A9:3E:12:15:07:DB:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011066
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50D0845ADA8E11EF8E6F9B76762E951A.roa
Signing time: Fri 24 Jan 2025 20:03:45 +0000
ROA not before: Fri 24 Jan 2025 20:03:41 +0000
ROA not after: Tue 25 Feb 2025 20:03:41 +0000
asID: 202656
IP address blocks: 45.200.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69734 (0x11066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:03:41 2025 GMT
Not After : Feb 25 20:03:41 2025 GMT
Subject: CN=6793f221-e9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d2:9c:46:5c:ed:79:a8:77:8c:c4:90:f1:f1:
8a:9a:b5:4a:d7:dd:d3:f5:db:cc:fa:6e:f9:81:bf:
51:d6:7f:5d:1f:70:49:63:5d:f3:db:cf:02:8b:4d:
3a:6f:96:ff:21:98:d2:3f:d6:2b:73:32:4b:82:ca:
53:e4:eb:ef:22:74:07:c9:04:2c:d1:58:5a:66:66:
34:78:e5:e5:f0:50:a6:ef:11:bb:7d:d3:ff:db:75:
e6:02:5b:bb:ca:cb:bf:25:27:7a:7e:1e:14:b7:b8:
95:28:f3:47:1b:a3:de:5c:85:70:b4:07:be:5b:0c:
45:23:11:4f:e6:36:be:ce:36:94:71:fb:2a:f9:fd:
68:a1:96:9b:03:24:d6:64:75:67:7b:1b:16:03:ff:
7a:52:0d:49:45:ba:96:0c:9c:0f:41:49:9b:ce:11:
d0:b0:80:cd:96:c9:32:6f:c1:1d:d6:c0:a2:86:38:
3c:df:ae:29:a4:05:97:56:b6:69:d7:68:5d:de:c5:
4b:c5:66:28:c6:39:8e:62:97:9f:c6:03:65:bd:b0:
48:5e:00:e4:5e:3b:10:41:89:7f:05:73:c4:31:83:
38:6d:0c:81:9b:08:1b:5c:56:da:67:ad:88:0a:46:
93:ca:7d:26:d0:f2:ad:e4:a5:3c:b4:16:71:7e:4c:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2C:6F:48:74:C2:DA:3B:4C:26:4C:75:05:A9:3E:12:15:07:DB:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50D0845ADA8E11EF8E6F9B76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.165.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:49:fb:b9:c4:f3:49:bc:f4:5f:21:30:ed:7c:57:a8:c4:22:
f6:55:51:22:0c:4f:c6:e4:d1:69:5a:e9:6f:ae:59:94:f9:d2:
c3:4a:71:5e:4b:09:a3:92:39:bf:15:ff:b7:70:2a:92:b4:97:
f7:29:d6:53:b1:bc:b5:d6:f7:7e:f3:b0:ed:f4:af:ff:ab:b6:
80:81:b2:09:7e:a5:67:53:62:62:1b:c7:19:d9:ce:9a:62:33:
4c:c7:49:8e:e5:a5:68:a8:6c:8f:63:ba:d8:cd:0e:c7:10:b1:
74:9c:94:c4:b4:67:ba:f8:eb:8b:7a:ba:7b:f2:0a:d7:c8:a6:
13:f3:19:0b:4c:7a:27:49:ec:af:d7:61:8f:65:a2:7c:f2:ce:
36:52:82:52:47:9b:8d:06:1e:03:bb:9a:af:72:e0:5a:f0:51:
89:99:af:11:40:20:c9:98:6a:77:2d:3c:c2:21:68:12:eb:b1:
25:cb:70:ab:38:ea:35:5d:5d:36:81:4d:39:6a:8d:ae:97:30:
2c:cb:f2:d0:65:65:9f:c4:cc:9f:25:33:26:52:a8:ae:5d:41:
a5:83:58:80:5c:45:0c:31:c0:87:cb:0a:6e:0f:6d:14:3d:78:
9f:49:67:82:cc:0f:ea:f4:24:ae:2e:46:76:af:ef:96:88:b0:
7b:9f:4a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:54:51 2025 by rpki-client