Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7254BD72DB1411EFB109C586762E951A.roa
File: 7254BD72DB1411EFB109C586762E951A.roa (raw, json)
Hash identifier: 6DPbm09sHgJYZq72ZeQq8SrtmZ8zpzN/G1z27w0yNtA=
Subject key identifier: 1D:B5:42:51:37:AE:C4:E7:3B:89:B1:64:EE:10:BD:42:D2:90:61:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011235
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7254BD72DB1411EFB109C586762E951A.roa
Signing time: Sat 25 Jan 2025 12:03:54 +0000
ROA not before: Sat 25 Jan 2025 12:03:50 +0000
ROA not after: Sun 23 Feb 2025 12:03:50 +0000
asID: 202656
IP address blocks: 45.200.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70197 (0x11235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 12:03:50 2025 GMT
Not After : Feb 23 12:03:50 2025 GMT
Subject: CN=6794d329-392c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:d5:04:48:5a:0e:57:2d:81:e7:04:e6:7e:
87:3e:96:02:6e:19:7e:0d:6b:8e:c6:86:c4:7d:b4:
8d:06:b9:d6:5a:95:7b:dd:73:77:2b:e1:b8:32:27:
87:6b:91:c8:2e:4f:2d:8f:9c:8b:3f:64:9d:9d:09:
13:d2:0b:49:ed:00:0c:ce:92:ee:9d:31:c5:ab:38:
c8:c5:72:41:54:56:4d:ab:8f:f0:34:28:a2:60:f9:
53:7a:8b:3c:4e:ad:ef:36:1a:b0:46:20:27:98:2c:
e9:d7:0e:7e:8c:b4:7c:23:7a:7a:1c:ac:44:c3:b6:
a2:d9:9d:a4:e8:5a:8e:a8:13:6f:59:5f:6d:fd:cf:
d4:8d:87:99:0a:78:44:98:28:89:c7:05:73:b0:a8:
16:eb:dc:da:1b:fc:4a:9d:e0:08:95:f9:00:87:43:
a3:e5:db:ce:90:92:29:2d:db:31:3c:9a:59:9b:70:
24:35:84:a9:df:65:1b:0c:a9:86:f0:da:0b:ff:ac:
50:99:98:1f:22:f1:7b:24:88:80:1b:ff:7a:73:d4:
92:9c:93:62:2b:83:72:a8:f7:01:ce:6e:cf:51:17:
c4:0e:7b:df:dc:69:cd:54:94:99:e9:2e:45:2c:f9:
e7:8b:cf:ac:cb:5f:ab:28:8f:2f:d5:6d:c6:e1:58:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B5:42:51:37:AE:C4:E7:3B:89:B1:64:EE:10:BD:42:D2:90:61:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7254BD72DB1411EFB109C586762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f4:23:26:25:d2:ee:61:17:96:3f:51:e8:06:f0:65:5a:56:
d1:4f:5b:eb:b9:50:7c:4f:bf:75:60:d4:70:83:e0:93:82:e9:
84:65:6c:22:7f:d0:6b:41:42:c8:41:1f:e2:ae:dc:e3:92:ba:
09:6f:8c:60:aa:d8:1c:80:03:b0:21:5d:7d:0f:d3:12:67:a1:
8a:d3:55:1a:d6:75:94:45:63:3a:2b:c5:6a:9a:74:9c:56:7a:
99:03:76:a7:a9:ec:d4:10:33:20:9d:f5:ac:6a:15:cb:3c:c1:
44:34:8f:2a:ad:47:b8:e7:28:fe:18:92:71:b1:7b:24:73:39:
9c:cc:0e:43:b4:23:34:1b:2d:b5:dd:09:54:dd:e2:9d:8d:f7:
91:95:20:53:ab:53:a9:3a:ef:06:5c:81:63:80:de:02:08:9a:
1f:c5:8f:be:28:1c:ee:97:c6:5d:fd:4e:e0:99:69:48:ca:cf:
63:b7:5a:ec:30:be:5a:8a:7d:83:0d:4d:b4:ee:39:b6:6e:4a:
ac:f7:fd:a4:23:4d:52:ee:49:5f:3e:d4:63:16:c7:77:f1:3d:
d1:c3:00:54:3d:de:19:50:8e:1e:d1:18:a0:22:95:25:33:c9:
96:9c:d9:9e:4e:8d:78:60:75:3d:60:2d:28:e6:df:e6:94:26:
38:5f:4a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:18 2025 by rpki-client