Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C418AF2D7FD11EF9CAAA946762E951A.roa
File: 5C418AF2D7FD11EF9CAAA946762E951A.roa (raw, json)
Hash identifier: X/PN6MWGxNeVZdfvKgjjDEBUSwDuVe4BOhfmQIZEYCg=
Subject key identifier: 4B:1C:8C:10:0C:69:59:26:8C:D5:81:00:3A:DD:8E:AF:A6:33:1C:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C418AF2D7FD11EF9CAAA946762E951A.roa
Signing time: Tue 21 Jan 2025 13:41:05 +0000
ROA not before: Tue 21 Jan 2025 13:41:01 +0000
ROA not after: Sat 01 Feb 2025 13:41:01 +0000
asID: 202656
IP address blocks: 45.192.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69092 (0x10de4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:41:01 2025 GMT
Not After : Feb 1 13:41:01 2025 GMT
Subject: CN=678fa3f0-9f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:c2:c8:11:28:3c:b9:52:61:08:bd:f8:34:
6b:15:c2:c6:38:35:be:43:a3:25:dd:63:f8:c8:34:
ef:26:8e:0b:fc:02:bd:10:9c:b7:53:c0:1b:93:75:
3c:fc:11:a5:04:a1:14:b2:35:f2:65:02:fb:24:16:
cc:31:2c:b8:96:15:76:dd:14:79:2b:55:ab:74:6c:
d4:ae:6f:21:7e:70:5d:1c:57:1f:ad:94:28:6f:f9:
b2:ea:60:e0:52:01:ee:20:31:45:5f:95:87:7c:57:
07:b2:9c:fa:a6:4a:b6:3a:e6:df:5c:e5:59:ed:5b:
1f:c5:b2:0a:ea:69:73:51:05:35:41:29:ea:27:e2:
fc:ca:36:4e:87:f7:cf:9e:63:f0:1f:d6:0c:36:6e:
e3:ab:16:80:c7:1c:b5:e2:83:f1:3d:16:28:06:47:
cb:b4:c9:f1:bd:7a:ce:12:ae:98:a2:8c:18:29:35:
43:3f:07:8b:62:f5:bc:98:61:3d:65:f6:ec:35:79:
fb:19:2d:c0:09:ff:25:1b:16:72:e3:fc:ba:a3:91:
cd:d1:53:9a:5c:57:c3:98:79:b8:d1:14:1e:39:e4:
18:eb:93:2a:80:69:46:3b:d8:29:0b:ab:9d:e8:9f:
7c:07:ef:8d:de:58:49:e5:56:a2:d2:f1:cf:39:8c:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1C:8C:10:0C:69:59:26:8C:D5:81:00:3A:DD:8E:AF:A6:33:1C:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C418AF2D7FD11EF9CAAA946762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.59.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:11:e0:21:d9:5c:d7:9a:f7:bf:24:fd:05:ee:39:4b:48:12:
06:b1:c0:aa:22:3f:38:ba:16:ce:9e:0c:83:a8:86:61:a2:ea:
58:83:6e:29:42:2d:bc:74:ba:b1:36:30:bc:4f:d2:0e:6f:d5:
41:76:da:86:c1:4b:a3:f9:d7:ee:b2:21:1b:ba:3b:46:f9:a3:
8d:2a:df:a2:b3:81:87:59:32:e5:ef:fa:89:e8:da:ae:6b:25:
6d:a3:93:43:2a:01:c7:16:00:7c:42:94:d5:74:cd:3c:3a:43:
39:8f:13:e6:7d:b7:e5:db:a3:8c:04:1a:f8:57:35:44:44:c1:
70:f8:c4:06:00:68:f5:f3:2a:89:e1:8d:b1:56:5a:97:74:42:
93:81:49:f3:74:72:ef:7b:36:a7:3e:16:3a:ad:a9:61:3c:a2:
c8:97:89:9a:a9:e9:7f:41:44:6b:ad:09:47:1c:e1:72:02:cc:
ce:20:6e:c3:33:9f:ea:6a:db:3d:fb:54:1f:16:2c:1c:1f:f7:
3b:0f:60:08:67:c5:3e:21:ae:b0:0a:19:9d:31:00:82:af:c4:
ee:cb:28:d9:60:57:5f:a5:95:8a:79:ac:da:6d:9d:0b:d5:8b:
f3:46:54:dc:ed:85:fe:a9:0e:f1:60:0b:1e:16:40:d0:d8:96:
a5:f6:4d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:41 2025 by rpki-client