Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93A6AFFADC1B11EFA6A2BE6F762E951A.roa
File: 93A6AFFADC1B11EFA6A2BE6F762E951A.roa (raw, json)
Hash identifier: 6lCc4vyDhPhm68sr2uTK1fSTtDtwjHZ+PD81a1dXM5U=
Subject key identifier: DB:EE:B2:0B:4E:93:6F:EB:7B:40:58:1B:BB:04:D1:AA:5C:26:1F:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011458
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93A6AFFADC1B11EFA6A2BE6F762E951A.roa
Signing time: Sun 26 Jan 2025 19:27:27 +0000
ROA not before: Sun 26 Jan 2025 19:27:23 +0000
ROA not after: Sat 08 Feb 2025 19:27:23 +0000
asID: 39600
IP address blocks: 45.194.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70744 (0x11458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 19:27:23 2025 GMT
Not After : Feb 8 19:27:23 2025 GMT
Subject: CN=67968c9f-1e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:4b:a6:a9:c1:0e:34:ab:14:b8:80:32:fd:
12:d6:13:9f:5b:7d:76:e6:52:ef:72:dd:86:f4:2e:
9f:ca:2c:8a:34:b8:04:00:94:bd:8d:28:11:f2:df:
6f:7b:99:54:61:e2:9b:90:05:0a:53:51:91:cd:e5:
a7:a9:36:1d:e5:9f:f6:26:61:a1:d6:f0:fe:62:0b:
c4:13:45:fb:c1:e5:70:91:69:cd:a8:1f:34:33:c8:
ab:73:4a:ca:87:35:50:da:9b:50:61:19:b9:ba:23:
af:85:47:51:7b:c1:cc:ed:74:c4:1a:53:ae:06:b0:
bf:da:b7:9f:72:b9:2e:3b:0b:24:26:f2:f2:c0:bf:
2a:54:fb:08:6a:d1:bd:d2:10:bc:53:7f:d4:8f:85:
a5:12:82:de:a8:42:af:30:ed:8f:52:36:9c:92:b3:
fe:df:14:cb:99:b2:9a:33:51:b9:79:e2:06:a2:83:
32:ca:1f:6c:22:01:95:b7:44:51:ab:02:d0:80:20:
fa:74:43:7e:2f:ee:76:59:8d:35:4c:4d:68:b1:98:
70:1a:41:2c:9b:7a:8c:1d:77:47:20:af:3e:79:48:
55:03:11:8d:52:86:69:da:9a:b9:7f:a8:75:d0:15:
e3:5f:27:d0:43:95:b4:ae:fe:39:cc:1b:8e:d0:2f:
d4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EE:B2:0B:4E:93:6F:EB:7B:40:58:1B:BB:04:D1:AA:5C:26:1F:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93A6AFFADC1B11EFA6A2BE6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.76.0/22
Signature Algorithm: sha256WithRSAEncryption
00:cd:c4:ff:06:b6:d1:93:b7:0e:48:3e:92:bc:2a:ff:e9:44:
43:01:66:9c:45:82:22:39:ed:a0:fd:6a:64:ec:0e:df:a5:c5:
7d:46:9a:d6:ec:d8:84:6a:e8:25:a8:66:93:4f:5b:e4:b1:fe:
ff:ce:19:7b:24:f2:a1:af:94:89:4b:ab:4b:2d:42:0e:15:e7:
90:a3:f7:61:de:e5:6d:76:5d:c5:3f:2e:2f:37:4f:02:5e:4c:
40:34:d4:e0:a8:8c:e3:a9:23:77:8f:d0:09:4e:52:49:94:62:
6f:42:45:0c:b4:5b:a0:4c:54:ef:a1:e6:ae:41:fa:1e:04:7d:
08:c7:e2:82:05:cd:1c:00:f4:2e:77:8a:1d:90:87:79:ca:77:
98:df:e3:da:0d:78:8b:a3:53:0b:ac:42:cc:5c:99:fd:e4:4a:
7e:34:51:ed:fc:57:52:f0:53:14:7c:54:6c:96:21:44:52:ec:
8a:e6:87:f1:9d:e9:95:9e:27:67:3c:13:a4:44:8c:19:f5:f0:
b7:18:a7:39:13:4a:18:fc:d8:f0:1c:6d:2d:07:76:81:69:1a:
6a:ae:e3:d2:61:67:8a:e4:cc:68:67:77:26:08:d5:d5:9b:57:
9a:75:1a:99:08:69:8d:07:69:e9:51:d1:88:18:62:0f:d2:d4:
34:b5:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:58:25 2025 by rpki-client