Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6C9824CDAEA11EFAFC3486F762E951A.roa
File: A6C9824CDAEA11EFAFC3486F762E951A.roa (raw, json)
Hash identifier: rqZt/YP5ElP0jHZ0LWP9FQ/+nuUv7yIG6wxt37aozaE=
Subject key identifier: DD:FE:94:06:E2:50:F2:A4:82:19:A1:1E:35:D3:C7:4A:39:42:98:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6C9824CDAEA11EFAFC3486F762E951A.roa
Signing time: Sat 25 Jan 2025 07:04:43 +0000
ROA not before: Sat 25 Jan 2025 07:04:39 +0000
ROA not after: Sun 23 Feb 2025 07:04:39 +0000
asID: 202656
IP address blocks: 45.195.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69879 (0x110f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:04:39 2025 GMT
Not After : Feb 23 07:04:39 2025 GMT
Subject: CN=67948d0b-80ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:97:dd:08:d5:07:d5:a6:b1:67:47:7c:ac:
d6:d8:27:5a:e2:fb:12:75:d9:15:a2:b1:f5:67:e1:
f2:7f:6b:e2:ed:44:82:95:10:9d:df:63:69:0d:9c:
b6:00:2a:7c:fe:3e:76:af:3c:2b:c4:67:91:21:c5:
86:9b:b1:6f:ba:0d:4d:c9:f8:4c:bd:5f:be:3c:2e:
2a:1f:5d:df:4c:f3:8f:5b:1c:23:e1:a4:9b:81:10:
45:d7:92:ab:ca:b7:83:2b:9d:da:82:07:9a:e1:28:
7a:4c:f2:61:7f:c5:94:40:b7:30:33:fb:f1:a1:1e:
9a:2a:1d:16:25:0e:10:b6:ce:0e:4f:92:4a:bb:63:
f8:2f:a0:dd:79:93:f5:06:42:94:a4:8e:fe:71:be:
b3:ff:d9:07:4b:3b:b9:e8:eb:f7:29:b6:69:b4:2c:
69:29:46:6f:50:0c:6e:9e:06:08:a4:2d:07:9d:1b:
81:6a:ef:6f:b1:95:72:ce:cb:da:c6:48:2e:a7:be:
be:39:50:a9:8c:97:48:7f:5d:1f:28:29:3d:f6:e5:
2b:a5:02:80:58:00:45:19:f9:33:ad:e8:66:d7:b8:
03:f1:d9:92:ec:e9:dc:dc:8c:fc:cf:7a:ca:ee:d7:
0b:8c:60:29:90:62:25:c5:52:94:ff:14:53:6b:79:
c0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FE:94:06:E2:50:F2:A4:82:19:A1:1E:35:D3:C7:4A:39:42:98:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6C9824CDAEA11EFAFC3486F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.160.0/24
Signature Algorithm: sha256WithRSAEncryption
80:59:71:96:27:76:11:a3:0f:1e:91:a4:e2:7e:c0:08:d9:4f:
01:ec:76:a3:34:1f:98:65:c6:78:3b:69:d5:f7:24:30:54:11:
84:e1:8d:33:99:56:cc:15:22:3d:e7:60:c3:da:ff:cb:fe:b8:
27:c6:45:a1:c3:be:ee:95:27:62:2a:bd:06:e0:bd:14:e1:ee:
5a:0b:e1:e2:39:75:be:34:41:54:ed:61:47:fd:68:a3:1d:25:
8f:9f:51:9d:8c:9e:19:f2:e4:ee:2c:63:61:4a:6f:91:2e:97:
4e:4a:3f:c1:97:ea:05:d8:45:3f:95:9a:22:5d:cd:5f:92:93:
3f:05:b2:0a:b5:34:03:ec:d4:75:50:fd:f7:b5:75:f7:90:aa:
a2:15:b8:a6:db:a2:a3:94:c0:c5:00:cd:64:63:b6:03:98:62:
51:82:1a:d2:0c:70:20:ed:07:ed:90:6d:4c:92:6d:2a:d7:50:
f2:de:bd:a9:b8:6b:82:d9:74:26:f0:6c:12:5c:0f:c1:5a:48:
81:03:dd:2e:82:86:98:22:f2:c4:6f:ff:6e:5b:78:3e:55:b3:
83:67:0f:14:81:34:b5:17:65:8d:76:79:76:8e:e8:27:ba:aa:
64:d7:8d:f0:66:40:bd:62:36:6b:ce:3c:dc:a1:0f:71:01:3e:
46:44:2d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:27 2025 by rpki-client