Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90D67DA8DAF111EFA050199D762E951A.roa
File: 90D67DA8DAF111EFA050199D762E951A.roa (raw, json)
Hash identifier: UZNmWIKZEJrGV+cs7nuDrwjDSYaFsjRmOsRcVSqIF+Y=
Subject key identifier: 4B:41:99:EC:56:5C:D7:85:CE:57:FD:35:22:E7:1F:74:9B:D7:89:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01114D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90D67DA8DAF111EFA050199D762E951A.roa
Signing time: Sat 25 Jan 2025 07:54:13 +0000
ROA not before: Sat 25 Jan 2025 07:54:09 +0000
ROA not after: Sun 23 Feb 2025 07:54:09 +0000
asID: 202656
IP address blocks: 45.195.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69965 (0x1114d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:54:09 2025 GMT
Not After : Feb 23 07:54:09 2025 GMT
Subject: CN=679498a4-d175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:2b:8b:f9:0d:58:23:ed:ce:7e:29:e7:d5:
17:01:cd:5c:2a:72:0f:e7:92:d7:0b:44:4d:ec:e9:
74:28:82:0a:cc:2c:5f:af:b5:cd:e6:b4:f6:64:9c:
ff:28:bc:1b:87:46:c2:70:1a:de:47:22:a9:c0:81:
5f:3e:63:fa:10:09:ff:0c:c8:09:93:a7:00:d3:5c:
b1:78:be:b2:15:91:78:ec:5c:36:62:ac:51:65:cd:
29:27:38:0a:e0:da:84:c4:c4:60:74:25:3f:8e:ce:
2a:cb:8e:60:26:02:8b:1b:92:ad:a5:2d:f1:f3:b5:
10:da:e0:2d:92:39:c9:20:b7:cf:f3:18:29:7f:58:
c9:16:ea:48:9f:17:b4:f0:4c:13:df:0b:d7:6a:46:
ef:57:58:32:d9:eb:3a:a3:9e:6b:71:a1:d0:17:a4:
f4:e9:bd:7f:d2:84:60:0b:ca:f6:d7:47:d8:6b:37:
73:5a:eb:bb:df:40:16:b1:f3:db:7c:11:fb:e0:ab:
54:2b:8e:4e:84:85:80:f0:fd:3b:af:5a:6a:fd:ea:
85:60:47:dc:c6:0d:01:2c:68:34:3a:8e:05:7d:e1:
98:cb:78:5f:59:33:2d:ad:74:b7:f9:40:1a:be:12:
36:36:5c:68:32:c9:10:2f:b5:5b:83:bb:e2:d2:54:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:41:99:EC:56:5C:D7:85:CE:57:FD:35:22:E7:1F:74:9B:D7:89:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90D67DA8DAF111EFA050199D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.185.0/24
Signature Algorithm: sha256WithRSAEncryption
72:33:ed:81:d7:ba:10:2f:25:84:bb:50:56:d2:43:21:2a:49:
32:3f:63:1c:c7:1c:10:b0:d8:42:85:2a:03:d0:2e:0a:94:d7:
f8:6e:4d:17:c0:e0:c7:d9:81:9b:cf:81:69:f9:74:15:1f:a0:
28:3b:4f:3a:17:1b:8e:b3:f4:dc:76:92:a7:85:db:ff:54:46:
ac:4d:a6:50:17:0a:0a:23:65:9e:bf:2c:52:ee:a6:45:98:9b:
0b:f4:22:ad:f5:d1:ed:84:bf:c1:8d:67:ce:71:5a:ca:90:ae:
b5:f4:42:eb:20:de:11:e9:ef:29:89:a8:7f:5a:18:17:c4:c6:
be:c5:df:8a:3a:4d:25:bc:5a:84:33:38:0b:a5:81:fc:99:18:
18:9c:7f:69:cb:1a:ac:c2:cb:91:18:8f:38:8a:14:2b:28:0b:
87:fe:e5:e8:71:64:34:93:7e:11:bf:88:d6:bb:e2:5e:0b:f8:
f3:8b:14:1d:81:3b:a0:7b:2c:01:65:ac:52:09:99:de:48:f4:
87:7e:e1:85:50:78:29:cb:d3:2c:54:d2:64:cb:2f:eb:bc:76:
84:95:b9:72:33:df:c8:ce:1e:b6:ad:da:72:be:42:2e:f4:08:
4b:54:ac:6e:1d:a1:e8:15:c9:0e:c7:ca:25:5b:11:ee:01:69:
0f:af:87:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:28 2025 by rpki-client