Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D08330DAEC11EF8C3B937C762E951A.roa
File: 77D08330DAEC11EF8C3B937C762E951A.roa (raw, json)
Hash identifier: rfqfUffN75b1y0Nv68FmvbmYyS0+OgktiHEoycxkR+c=
Subject key identifier: 25:42:BC:41:2C:AE:D4:59:5B:09:9B:C3:C8:5D:88:BE:92:D9:A7:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011110
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D08330DAEC11EF8C3B937C762E951A.roa
Signing time: Sat 25 Jan 2025 07:17:43 +0000
ROA not before: Sat 25 Jan 2025 07:17:39 +0000
ROA not after: Sun 23 Feb 2025 07:17:39 +0000
asID: 202656
IP address blocks: 45.195.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69904 (0x11110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:17:39 2025 GMT
Not After : Feb 23 07:17:39 2025 GMT
Subject: CN=67949017-9922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:97:96:d9:74:b5:63:8c:51:e8:72:79:d0:
c3:6b:8b:da:f5:41:d9:2c:37:22:9b:1f:b6:d8:01:
f6:39:11:90:41:76:0b:57:e7:54:bb:a9:38:a6:31:
7c:46:5f:14:1c:c0:eb:fb:a8:1d:62:d2:c8:8a:e3:
fd:73:d8:d8:5c:f8:53:f7:df:2f:fb:96:2b:1a:f1:
6a:30:e6:34:12:00:51:47:30:e1:19:10:45:db:5a:
02:99:83:2e:d3:12:b8:84:62:9f:34:60:ad:37:7e:
b6:fc:72:f6:73:7d:a9:47:48:de:6d:be:e1:da:b0:
ed:4b:6b:5c:e9:1f:8a:04:c7:2d:d2:a1:31:46:cc:
8d:03:77:6a:c7:e0:c1:ed:46:5a:43:a1:1d:0b:da:
99:89:08:8f:55:2a:49:35:da:ad:9f:01:2b:b5:57:
0d:4a:ef:55:82:de:4e:0e:24:02:c4:ba:87:80:74:
56:5a:af:a7:2f:1f:6e:18:c1:d4:0f:d6:81:9a:8d:
94:e9:ce:62:21:ff:00:90:4e:f2:29:c6:0c:53:ab:
3d:b2:bf:53:e4:d8:f6:a1:c4:61:4b:69:27:23:c8:
7d:a0:e7:2a:ea:ca:60:30:17:5a:60:ba:8e:ea:39:
6c:9c:49:c3:33:5b:4d:34:8a:97:b8:ac:7e:0c:4e:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:42:BC:41:2C:AE:D4:59:5B:09:9B:C3:C8:5D:88:BE:92:D9:A7:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D08330DAEC11EF8C3B937C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.167.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ca:11:8e:81:e7:8e:d3:17:12:ce:36:25:9b:ac:94:85:fb:
f5:c6:9e:cb:98:e4:05:a8:9b:53:f6:2d:52:fa:55:70:68:d9:
d5:22:a5:08:23:48:99:79:96:02:b6:6a:d3:a3:73:dc:26:2b:
9a:f4:66:a2:38:6d:01:70:ae:1e:29:9e:3f:b0:5e:39:79:88:
34:77:d5:85:e2:5e:b7:85:55:3e:3a:7b:56:4d:70:e0:1f:b8:
5a:5e:2b:c9:c9:33:fa:05:51:fd:12:8d:45:97:59:a9:f4:ed:
57:4d:ce:14:04:f4:c3:30:84:c5:77:f2:f8:5f:8e:fb:6b:bd:
80:01:92:b2:56:73:4a:2b:eb:bf:cb:b6:86:bb:29:a4:77:1d:
3b:da:9a:63:72:0b:ee:fb:f6:d3:30:4c:0a:b9:45:6d:b6:b3:
bd:c1:fc:31:51:39:97:98:e1:59:ce:19:cb:e3:82:b9:b2:79:
d4:61:92:b4:17:af:98:81:e5:2d:87:0c:fa:6c:00:01:dd:64:
57:60:ea:86:5a:e5:03:28:0a:54:2e:2a:f6:63:4f:85:75:03:
34:21:36:45:64:46:07:da:05:72:29:6a:78:ec:81:7c:a7:60:
9e:db:2e:f3:80:e7:90:73:07:d8:b1:11:80:7b:d0:43:73:26:
b1:6e:e8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:35 2025 by rpki-client