Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E96C9CCD80411EF95F4FF75762E951A.roa
File: 6E96C9CCD80411EF95F4FF75762E951A.roa (raw, json)
Hash identifier: zNPj/q3WgI4KguKUFSrS2RmRkVpN+Y6cbid0SlK2sr0=
Subject key identifier: ED:CE:54:48:26:FE:7D:B8:32:53:51:06:32:15:37:D2:D4:0C:75:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E96C9CCD80411EF95F4FF75762E951A.roa
Signing time: Tue 21 Jan 2025 14:31:42 +0000
ROA not before: Tue 21 Jan 2025 14:31:38 +0000
ROA not after: Sat 01 Feb 2025 14:31:38 +0000
asID: 62240
IP address blocks: 45.192.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69136 (0x10e10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:31:38 2025 GMT
Not After : Feb 1 14:31:38 2025 GMT
Subject: CN=678fafce-c931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:32:03:ed:46:35:b1:8e:3f:5c:66:30:a1:
08:42:52:f6:29:d7:8f:69:93:d0:a9:ea:17:ea:a0:
69:35:73:9b:ac:5e:92:89:d8:62:f1:90:30:4e:26:
ce:41:38:cc:3d:00:55:cd:b0:47:8a:5c:91:75:29:
d2:30:ee:c8:25:99:ed:5c:e9:9e:13:6f:51:fe:01:
7c:6b:b2:d6:4f:37:a3:88:84:ba:71:e8:cd:bb:ad:
db:35:e6:1e:40:78:a5:7c:b1:fd:bb:d1:0b:35:b3:
d0:05:9f:36:be:f1:e6:a7:b4:9f:65:80:03:28:18:
3d:60:5d:f9:75:95:2f:3b:d7:8e:26:c2:66:6a:7b:
8a:ef:8b:fc:98:cd:46:4e:d5:2c:d6:1c:92:30:d9:
8f:d2:c0:e3:d7:33:da:24:a3:0f:3a:9a:b4:2b:6c:
ce:d4:27:25:74:5d:e8:f8:e3:0b:59:ef:c7:11:ab:
12:77:fe:ad:17:f0:f8:3d:97:cc:22:1c:67:e0:f1:
8b:99:d9:24:99:3d:64:ee:63:73:3e:27:b9:fe:53:
03:a3:86:4e:45:db:bc:45:54:d7:d1:39:6f:84:5e:
82:33:21:ad:3f:68:9c:73:1f:a6:eb:44:a9:30:20:
47:0f:e0:d7:fe:20:a9:0b:e2:10:65:54:ec:7d:ec:
f5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CE:54:48:26:FE:7D:B8:32:53:51:06:32:15:37:D2:D4:0C:75:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E96C9CCD80411EF95F4FF75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d0:8d:9e:9d:8c:95:9a:5b:f1:2e:1e:49:2d:92:9b:05:bc:
27:47:52:cb:8f:9a:52:e7:89:fd:f5:f7:49:15:29:81:6e:db:
9c:8e:73:c8:5b:88:b2:74:2b:8f:92:dd:44:3f:f8:2b:f3:99:
79:c2:91:42:19:47:e9:cc:a1:b2:90:6a:82:6b:8a:b5:54:6b:
0a:34:40:ab:59:96:49:89:b6:be:74:c7:b6:25:c7:6e:44:c7:
2e:b7:59:e9:0e:c7:11:52:55:d6:69:d4:04:a4:e2:ee:72:9a:
b6:4b:15:4f:20:96:cc:f8:48:f3:74:72:a3:6a:fa:6d:d7:bb:
95:af:1c:43:67:30:94:bd:c8:5f:4e:79:83:9f:87:82:e8:aa:
4d:28:ab:81:59:18:05:26:a6:14:55:84:5b:f0:26:6a:85:4f:
e6:70:93:31:ae:00:2a:b1:61:8e:29:f8:ce:03:7b:53:ac:8e:
e2:ab:60:21:71:20:5f:73:57:f9:fd:70:c5:43:26:59:ad:1a:
7b:0c:01:4c:b0:c5:e1:ee:4a:1b:ab:b7:33:59:3d:60:e9:34:
da:f0:06:de:6c:50:3f:8e:1d:f1:67:3a:09:82:06:54:94:be:
93:b9:ab:d6:62:e9:2a:03:75:9b:49:c4:42:70:b8:20:a1:7c:
63:50:b8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:19:07 2025 by rpki-client