Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AC43D32D58211EFBE5B238E762E951A.roa
File: 5AC43D32D58211EFBE5B238E762E951A.roa (raw, json)
Hash identifier: a1quSzhAGkmOIJvqsXAMzGM+qb3Hyh94Wg3XzxW/VFY=
Subject key identifier: AE:88:F6:04:EF:FB:16:A1:6C:0C:80:C4:6C:52:1D:1E:27:67:A4:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AC43D32D58211EFBE5B238E762E951A.roa
Signing time: Sat 18 Jan 2025 09:55:32 +0000
ROA not before: Sat 18 Jan 2025 09:55:28 +0000
ROA not after: Sun 23 Feb 2025 09:55:28 +0000
asID: 395793
IP address blocks: 45.194.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68451 (0x10b63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 09:55:28 2025 GMT
Not After : Feb 23 09:55:28 2025 GMT
Subject: CN=678b7a94-1803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:c5:21:60:12:03:f1:63:f8:18:e4:5a:31:
df:f8:4d:3f:3d:2d:c3:64:46:fd:f7:a2:cf:22:ab:
60:ec:6f:c5:44:58:00:7d:7b:81:39:9d:e9:5f:75:
c2:e5:6c:6f:78:8a:65:e1:50:bf:8e:b6:d6:38:fc:
23:da:88:23:82:c5:06:27:fe:3b:f8:33:3a:7a:c0:
9d:ff:b3:87:d8:dd:cc:53:62:70:2b:b4:98:02:ba:
f2:cb:8d:76:98:98:bf:bb:b7:33:b2:c3:a8:7d:43:
7f:47:05:dc:b0:61:15:01:ae:7f:4f:af:a2:dd:2d:
89:eb:6b:5f:fe:54:55:d5:39:dc:64:1e:b4:f9:8e:
bb:9f:5f:fc:24:ba:da:bb:c7:45:57:cb:a3:e7:95:
93:8f:53:98:47:2b:25:ed:82:51:4f:58:af:f6:dc:
66:32:c5:d9:eb:1a:ee:6d:1c:a2:ab:2d:c9:79:bc:
51:95:02:b8:fd:21:62:6b:b6:ad:e2:d3:64:98:cb:
00:f7:e9:d8:1b:25:a1:36:06:9b:94:9e:d8:51:00:
b9:94:0c:bd:48:b9:d5:16:5f:b2:f2:b7:9b:97:3e:
27:cd:d8:46:1f:33:80:cc:97:81:e7:f8:75:3d:45:
62:f3:08:e2:ba:4e:35:36:b3:fc:e1:ce:c8:31:7f:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:88:F6:04:EF:FB:16:A1:6C:0C:80:C4:6C:52:1D:1E:27:67:A4:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AC43D32D58211EFBE5B238E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:67:f7:53:cc:5f:b0:70:e6:2c:48:5a:e4:0f:d8:00:76:51:
35:04:d5:21:31:22:c3:90:a0:ac:c4:19:da:46:01:b9:3f:9c:
8f:9b:bc:12:d8:23:15:15:3d:f3:0f:b1:c0:ef:4c:6c:eb:29:
85:27:5c:97:fb:07:a0:c7:8a:8c:5a:d6:8f:d8:a5:26:13:af:
86:3d:d7:d0:f4:06:72:62:84:3a:b3:27:f7:1d:0e:24:9b:dc:
e5:98:51:b2:b6:d3:15:70:89:e2:ab:21:d3:05:a8:1d:a5:b7:
86:b0:5d:fb:20:8c:f1:43:a0:a8:2c:63:c2:2e:20:04:66:38:
4a:4b:d9:a3:6c:38:d6:b3:1b:55:8a:c5:d7:7a:db:b7:8d:44:
cc:eb:f8:31:71:97:8e:38:ee:66:6a:44:e0:99:33:09:f7:5e:
28:30:fc:75:d5:56:c6:05:f7:53:32:e6:e3:a4:56:a9:a6:d6:
c9:90:f5:82:5f:8d:77:88:45:64:34:75:99:2d:e1:2b:75:67:
27:77:9a:87:0d:04:2d:d5:fb:be:ff:82:ae:0c:e6:0c:6c:dc:
09:b9:cc:04:ac:cd:20:0b:2d:f7:51:b3:96:c2:d1:1a:fa:2a:
8b:02:08:d0:bc:73:0c:90:8a:17:d7:f3:52:95:13:2e:05:38:
b6:4d:94:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:37:24 2025 by rpki-client