Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97571A0EDE1411EFA0C41D4B762E951A.roa
File: 97571A0EDE1411EFA0C41D4B762E951A.roa (raw, json)
Hash identifier: vrQCRVSYBSL9ADOfW2hZun5SDLlLsZPa2EBaojLh/OU=
Subject key identifier: 1A:AD:73:35:3F:FE:84:7B:78:DE:A1:CF:21:69:CD:D2:A8:61:6B:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01159F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97571A0EDE1411EFA0C41D4B762E951A.roa
Signing time: Wed 29 Jan 2025 07:42:29 +0000
ROA not before: Wed 29 Jan 2025 07:42:25 +0000
ROA not after: Tue 04 Mar 2025 07:42:25 +0000
asID: 20473
IP address blocks: 45.194.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71071 (0x1159f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 29 07:42:25 2025 GMT
Not After : Mar 4 07:42:25 2025 GMT
Subject: CN=6799dbe5-d463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:73:f7:e8:da:c7:17:29:c7:9f:03:ad:ea:
16:7e:a5:a6:bb:8b:3c:f3:67:1c:f6:59:90:af:a5:
0d:7b:65:92:2d:89:31:7c:68:f4:7d:07:71:03:5e:
af:47:98:8e:c8:3b:9b:ed:c3:6c:35:95:fe:24:f0:
ac:83:e3:f4:c8:c9:8e:bf:eb:d7:8c:72:46:32:8e:
23:bf:a4:bf:31:2a:8d:2f:ff:5e:c4:8f:ae:2e:0c:
e2:c3:3f:b9:97:d3:06:53:3f:30:41:45:de:22:24:
9b:81:b2:4d:a8:e7:57:01:73:9d:c1:aa:c9:dc:af:
ed:f2:c6:72:61:44:4d:08:7c:c0:85:25:f1:e7:a7:
b1:9a:16:c7:67:bc:f3:eb:6b:e0:3d:1d:c0:5d:7a:
72:5f:ad:13:6d:82:bd:c0:58:18:21:b2:01:ec:bc:
aa:07:bd:15:e1:6f:82:01:6b:f7:36:9f:04:46:8c:
13:0c:f9:f9:08:90:ba:65:b4:fc:88:91:fd:5e:20:
04:1d:81:46:12:6c:3d:2e:98:d0:a8:82:f2:bd:a1:
8d:72:1a:9b:7e:5e:37:11:21:db:48:ae:e1:86:ec:
1e:6d:81:de:80:7f:95:a3:c7:39:d0:7d:d5:22:5b:
f4:52:d9:ce:15:2b:68:6a:86:9a:d8:7c:c5:04:a9:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AD:73:35:3F:FE:84:7B:78:DE:A1:CF:21:69:CD:D2:A8:61:6B:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97571A0EDE1411EFA0C41D4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.82.0/24
Signature Algorithm: sha256WithRSAEncryption
22:56:35:d8:28:66:b2:e7:50:bf:30:50:4a:71:9f:e9:e9:be:
dd:f1:a6:a1:c1:05:a9:9e:b1:fe:d4:37:03:ea:b3:a5:9f:1c:
a3:86:79:68:fe:1a:de:af:92:ae:c6:a9:12:e7:1f:a5:49:01:
c7:75:08:a8:3a:4b:b0:27:d9:1b:63:6b:64:3a:78:3a:c5:59:
bf:5e:02:e9:15:5c:71:65:82:a5:59:36:ed:06:e9:69:55:c7:
86:51:73:ec:39:23:50:f9:a9:e4:32:6b:2d:71:d9:0e:eb:04:
7a:a1:10:b9:0a:45:3e:9e:e7:cd:39:83:ee:2d:b1:91:27:41:
2f:fc:11:4c:5d:d9:31:9d:a5:75:e5:8d:4a:b6:53:c3:7c:98:
7c:8d:14:2b:cc:ef:ba:9b:2d:e6:d9:2a:be:af:5d:e9:64:9e:
c0:e3:ca:40:56:e7:a5:82:6a:b6:79:4e:58:cb:07:e0:bd:c3:
81:ef:93:4e:ca:4c:04:c1:70:bb:41:27:f3:77:13:0c:d6:f7:
32:93:60:b4:13:ee:00:0e:2b:92:38:49:eb:32:ca:40:61:4e:
9d:5a:6c:87:ca:4d:12:b8:05:50:f5:cd:ed:44:92:b5:5d:9c:
70:2f:fa:16:3a:d5:59:9f:e6:cf:95:ca:f5:19:a9:72:16:35:
ac:46:0b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:43:45 2025 by rpki-client