Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/633FB4BCDEE911EF91CC7974762E951A.roa
File: 633FB4BCDEE911EF91CC7974762E951A.roa (raw, json)
Hash identifier: SxLXK2w/KRRhVMVJKDsFQ2Ws/GCemJXdFKcQrI7gB2w=
Subject key identifier: 13:B7:BF:4A:C0:89:BC:5F:DD:0B:A3:8C:C3:BB:59:E8:06:16:6F:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/633FB4BCDEE911EF91CC7974762E951A.roa
Signing time: Thu 30 Jan 2025 09:05:45 +0000
ROA not before: Thu 30 Jan 2025 09:05:41 +0000
ROA not after: Fri 07 Feb 2025 09:05:41 +0000
asID: 63199
IP address blocks: 45.195.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71095 (0x115b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 30 09:05:41 2025 GMT
Not After : Feb 7 09:05:41 2025 GMT
Subject: CN=679b40e8-8136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:e3:00:59:0e:fe:2d:eb:8d:ce:35:3a:7a:
d2:24:9c:ed:2c:79:c6:1b:f0:a5:59:11:d4:ed:ec:
0a:83:dd:72:50:c6:f1:15:27:20:8b:0c:51:de:5a:
83:44:60:42:79:cf:65:76:15:f0:14:df:74:1d:2e:
47:6b:fb:db:36:74:f5:d3:1f:80:b5:08:e2:2d:15:
f1:cb:bb:97:17:bf:c4:89:6a:d0:fb:f1:3f:9f:35:
5c:6e:63:e1:71:40:4c:79:de:4a:c0:60:33:6e:57:
a7:27:ce:59:76:8f:fa:50:96:1d:d3:93:98:52:ff:
69:62:c8:68:ae:0b:1e:4f:66:3d:f6:89:b7:39:63:
b1:62:83:0a:23:53:db:0c:70:f9:a1:65:7f:7d:3d:
d3:83:51:ff:f4:ed:9c:c8:d8:19:9f:77:f6:ba:8d:
e3:6a:dd:02:90:06:0f:c1:4d:c0:94:fa:ff:08:96:
fa:3c:57:be:e5:e6:5d:fb:f7:27:b0:d8:e4:e8:f3:
59:49:b4:db:28:a2:f4:d7:f9:d8:a7:f5:cb:40:76:
19:08:f4:13:87:36:17:50:dd:af:d7:f2:13:f8:37:
b9:fb:93:4f:7b:e8:16:ee:c0:dc:fd:b0:b1:7c:01:
57:49:65:d5:fb:8e:e7:d1:aa:c0:38:15:1c:4f:02:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B7:BF:4A:C0:89:BC:5F:DD:0B:A3:8C:C3:BB:59:E8:06:16:6F:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/633FB4BCDEE911EF91CC7974762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.96.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:43:76:fc:2e:4c:d9:7c:95:c8:6d:a2:75:f7:cc:46:28:21:
94:0d:fa:50:56:a9:a6:ac:ac:63:83:0e:e4:4d:81:f1:40:d7:
71:b5:98:e5:e0:06:be:67:90:15:1b:11:1e:06:d2:ad:9a:c0:
75:89:f5:c8:27:17:b5:9f:27:14:42:f1:b8:f0:f2:d5:e9:a1:
40:ad:39:f3:79:90:57:b1:3d:88:ca:06:23:69:e1:58:2f:48:
0f:bb:49:d4:87:2f:e7:6b:8e:72:10:ea:6c:bd:93:85:eb:fe:
86:e6:86:44:2b:da:ad:83:b7:85:4f:85:b7:ae:05:d9:1d:6c:
7d:bb:97:fd:ee:0a:cf:98:c1:f6:dc:00:2a:d5:79:f6:21:29:
27:ac:ca:32:a9:1c:48:f3:b6:28:a6:19:00:89:c3:c1:b2:68:
40:48:eb:9c:ea:5e:3e:a4:14:a7:32:7f:c4:2b:9b:3d:ce:1a:
a5:46:68:16:d4:da:86:71:71:31:2e:7e:59:4b:3e:ed:68:1c:
65:28:cc:5e:c2:7e:b6:71:be:03:26:a6:65:3f:77:06:69:a7:
9d:2b:ee:66:39:17:d5:59:e7:a5:98:0e:52:a5:dd:57:12:12:
d2:af:19:1d:03:43:61:ec:29:c9:bc:5a:71:d8:9e:23:41:3e:
68:82:92:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:12:04 2025 by rpki-client