Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96150756D80511EF9108A77C762E951A.roa
File: 96150756D80511EF9108A77C762E951A.roa (raw, json)
Hash identifier: 6Mb+Cw1q6orbY3kzsUNowvv18LN9/Nc6wcJM1KKErEQ=
Subject key identifier: 66:50:BC:62:42:8B:99:56:E4:5B:CA:31:DD:36:3F:0B:92:03:D8:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96150756D80511EF9108A77C762E951A.roa
Signing time: Tue 21 Jan 2025 14:39:58 +0000
ROA not before: Tue 21 Jan 2025 14:39:54 +0000
ROA not after: Sat 01 Feb 2025 14:39:54 +0000
asID: 62240
IP address blocks: 45.192.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69144 (0x10e18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:39:54 2025 GMT
Not After : Feb 1 14:39:54 2025 GMT
Subject: CN=678fb1bd-797a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:59:78:95:1e:60:fb:47:38:3d:02:fb:f3:
d8:36:31:c8:66:7d:02:0f:4a:30:dd:61:e0:5b:c4:
1b:d9:96:25:fb:71:f2:eb:39:82:66:65:c6:4a:c4:
67:17:d6:8e:7f:b6:da:44:8a:88:19:cb:4e:3a:3f:
2f:04:38:8e:69:97:90:af:88:78:db:16:74:0b:8d:
df:f5:2e:3a:b5:42:e2:d2:e7:d1:58:8c:11:90:47:
26:25:b1:82:4d:aa:92:70:18:6f:9d:d4:4a:61:fb:
77:9c:dc:f4:15:cd:0a:a2:1e:a5:1e:f9:52:09:59:
77:94:90:fc:5d:30:df:13:97:40:03:cd:86:a9:ba:
c5:92:77:fa:e6:9b:26:b7:4a:22:e1:1f:ec:15:e8:
28:1d:ca:ae:90:1f:4c:7f:77:a8:78:4d:00:18:9d:
9c:23:8c:49:27:4a:1b:28:b6:65:29:dc:7f:ce:43:
c2:25:79:65:e1:a9:af:23:6d:ad:35:87:8d:af:45:
c7:a5:06:70:71:e2:3d:1f:20:34:1a:a7:7c:42:52:
97:3b:64:05:d7:5f:ca:4d:94:ed:eb:7e:94:b3:00:
fa:5e:68:31:f2:c8:b7:32:01:33:42:f5:04:da:98:
bd:de:73:8f:57:db:e7:6c:26:40:f2:61:6a:91:11:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:50:BC:62:42:8B:99:56:E4:5B:CA:31:DD:36:3F:0B:92:03:D8:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96150756D80511EF9108A77C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.47.0/24
Signature Algorithm: sha256WithRSAEncryption
69:fa:50:36:9f:77:b9:74:b1:13:1f:3a:e2:a1:f4:5a:85:0f:
63:ff:a8:cc:90:cf:9f:44:af:4e:dd:f8:11:b1:50:ff:59:6d:
c9:c7:6c:ef:a6:92:1b:d6:61:b7:1e:61:42:7f:ee:59:12:88:
c1:ec:27:31:e6:77:d9:ad:79:81:b6:d0:ed:ae:2b:9f:c7:cb:
ab:b9:93:d0:20:45:8f:03:3a:77:e5:bd:87:67:40:e4:3b:d5:
49:09:22:ce:a1:38:c2:02:80:07:50:99:c4:49:2b:8d:b8:44:
aa:ca:57:e1:5a:93:24:a0:c0:c9:1b:ce:19:a7:59:e3:27:9f:
c8:6d:de:11:f0:ab:b8:e9:b7:f5:e1:25:75:02:4e:8d:c5:8a:
98:aa:39:b2:ea:03:f1:61:27:20:59:68:0c:17:f3:e5:73:6c:
42:15:3a:9f:20:0e:78:9e:3c:d9:c1:81:b5:2e:0f:54:a4:c1:
f8:75:15:e8:89:71:d5:3d:4c:86:d2:05:ca:7d:5d:86:f1:a3:
8a:83:25:53:b3:4d:39:8e:5a:1c:bd:11:f8:fd:ea:6e:63:0d:
34:2c:93:87:f8:b3:4b:08:41:1e:19:9c:68:a9:dc:c0:04:d0:
fc:17:3c:b5:28:64:dc:e4:10:aa:e1:54:e3:71:2f:72:04:f6:
e5:96:66:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:59:31 2025 by rpki-client