Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A24D132D57C11EFAFAF3E67762E951A.roa
File: 8A24D132D57C11EFAFAF3E67762E951A.roa (raw, json)
Hash identifier: RNz04IfY9wS6WbJcAlE1dwDZGQ1WTBscJoAR0UpBtsk=
Subject key identifier: C2:F9:42:0F:AC:48:68:3D:A8:F7:48:E9:C2:E7:E5:FF:79:51:F6:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A24D132D57C11EFAFAF3E67762E951A.roa
Signing time: Sat 18 Jan 2025 09:13:54 +0000
ROA not before: Sat 18 Jan 2025 09:13:51 +0000
ROA not after: Fri 21 Feb 2025 09:13:51 +0000
asID: 131471
IP address blocks: 45.195.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68415 (0x10b3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 09:13:51 2025 GMT
Not After : Feb 21 09:13:51 2025 GMT
Subject: CN=678b70d2-1fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:d6:9b:fb:99:1d:7c:c8:64:e3:1c:9a:64:
d5:f9:68:52:d0:16:91:b9:73:66:69:3d:18:14:24:
8c:fc:5f:65:81:1b:ea:86:b1:4e:b7:87:b1:97:62:
0e:f0:32:0c:0b:53:80:a8:f8:a3:d3:5a:0f:51:26:
58:f9:37:dc:1d:58:2c:b0:80:bc:d1:42:3c:e1:3f:
80:41:6b:0e:78:f4:e0:5f:13:67:86:72:84:a9:c8:
04:40:93:31:d8:b6:3b:ed:f4:1d:57:21:9b:57:93:
d4:90:df:09:6a:4c:22:e7:2b:60:66:0d:4b:ba:cd:
27:61:b0:f9:53:26:16:fa:d5:34:c7:95:db:34:b6:
f5:9c:61:79:5d:04:f4:06:6f:5c:10:b3:2e:f7:ea:
82:c3:ab:54:97:66:49:47:e3:f1:59:df:88:8c:16:
ee:7e:74:4b:77:70:d7:b7:21:cb:ac:b7:07:57:28:
ca:74:68:3d:11:78:8f:b9:c1:a9:9b:7a:6e:7a:09:
f5:20:3e:3c:c2:34:8b:7d:af:e2:07:28:8b:f0:5a:
4f:ce:dc:22:31:2f:1f:9a:78:df:23:a8:f7:ae:51:
8e:b7:3b:7a:b3:97:52:a1:e6:81:eb:4a:e7:9b:35:
17:96:2a:19:1e:fa:98:93:19:0e:31:21:11:b3:3c:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F9:42:0F:AC:48:68:3D:A8:F7:48:E9:C2:E7:E5:FF:79:51:F6:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A24D132D57C11EFAFAF3E67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.194.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:bc:30:ac:c3:fc:a0:e9:e1:7f:64:ec:ce:df:44:5c:1e:c6:
01:00:31:76:30:51:e7:0d:21:02:a2:2a:95:7e:03:e8:90:69:
3e:4e:7d:3c:5e:16:29:ef:e4:c4:6c:fb:50:cb:33:5b:26:d9:
90:2b:2b:3b:ef:7f:b7:bf:e0:e8:a1:a9:51:4d:a2:6b:70:ea:
08:6d:66:db:b0:6f:b7:b0:54:5d:56:ce:fa:3e:42:91:64:bd:
71:3a:68:09:af:9e:cd:72:ac:01:6b:02:e5:99:ee:33:e9:b8:
9c:dc:50:dd:2e:6d:88:6b:92:b1:4c:fb:3f:79:34:c3:e3:12:
5c:c8:15:d3:ee:8e:cf:dd:7e:a9:37:05:fc:8f:ab:2d:05:06:
ff:fc:66:8b:7b:81:25:58:2a:eb:63:79:28:62:37:fc:ab:88:
a0:d0:4e:7b:42:97:0e:bf:8f:78:86:41:62:3a:db:d0:98:92:
d8:62:61:e4:1d:a3:18:e8:ff:8e:cf:34:ae:06:19:37:8e:6b:
3c:4f:dc:63:3d:0a:ea:42:90:7f:82:2a:0e:30:14:0f:c1:98:
e0:0a:2a:ca:05:17:05:14:47:f2:a5:e5:7e:bd:9f:e8:1c:29:
e7:0a:ce:fa:8a:7f:81:bb:b2:91:58:3a:71:b3:cd:4a:0f:cc:
fe:ee:fd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:28 2025 by rpki-client