Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6EAF4F8D58211EF9E3E2B90762E951A.roa
File: A6EAF4F8D58211EF9E3E2B90762E951A.roa (raw, json)
Hash identifier: tBhpbylnsCbRCf9gt6NwZLfCN3zyhD1qpiiMKqjtEqM=
Subject key identifier: 69:DD:DA:6D:38:6C:9E:17:3A:FD:6A:00:A1:60:FD:15:D7:4E:91:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6EAF4F8D58211EF9E3E2B90762E951A.roa
Signing time: Sat 18 Jan 2025 09:57:39 +0000
ROA not before: Sat 18 Jan 2025 09:57:36 +0000
ROA not after: Sun 23 Feb 2025 09:57:36 +0000
asID: 395793
IP address blocks: 45.195.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68453 (0x10b65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 09:57:36 2025 GMT
Not After : Feb 23 09:57:36 2025 GMT
Subject: CN=678b7b13-700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:42:f6:d5:29:1e:a8:14:23:10:f6:fe:cb:
04:fc:16:3e:24:95:26:01:31:b5:3c:9b:d2:92:58:
43:6d:e5:37:a9:46:ab:15:47:93:5a:1a:33:fa:18:
76:87:c5:e4:f8:ab:71:3f:d3:68:6c:74:5d:1e:ad:
40:19:d6:6b:94:6f:30:d0:7a:a9:19:44:c5:bb:8e:
01:86:5c:54:5b:db:6c:44:9b:d7:6c:c0:a6:05:ee:
09:76:5f:8c:1b:4e:02:b5:7b:36:d5:6c:49:44:87:
a6:64:7c:6c:6b:ce:70:48:cd:6a:a3:ec:2a:32:b6:
88:07:45:13:2b:06:8c:d5:13:8a:07:1a:48:d8:26:
47:b5:e7:b3:41:bf:b7:80:5b:59:77:07:22:8a:5f:
33:ed:60:dd:bf:9c:84:cb:45:79:94:fc:ff:bc:93:
34:29:ee:e7:6d:79:8c:f2:f5:d8:ce:b7:6b:f1:c2:
e3:3b:f5:c6:8a:f4:dc:f8:4c:28:59:1a:9a:d1:e3:
e4:1d:1d:d9:4f:f9:3c:75:de:11:d6:cf:20:60:a0:
04:6e:ff:8f:3f:82:14:63:a4:86:62:cd:67:1a:b7:
fd:c4:0f:7e:76:d0:c3:da:8c:e0:20:c8:65:72:77:
d0:2d:9d:67:76:e8:4a:61:8f:e0:e2:26:26:59:93:
42:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DD:DA:6D:38:6C:9E:17:3A:FD:6A:00:A1:60:FD:15:D7:4E:91:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6EAF4F8D58211EF9E3E2B90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:35:82:09:b2:70:24:ff:fd:97:cf:b9:22:79:fa:bc:26:e6:
7f:51:a1:d1:e6:bd:75:02:11:fd:c6:56:77:de:6f:9d:0f:91:
a8:64:f6:30:05:8d:a1:a0:3a:53:7f:7a:f9:2f:28:2e:f5:7c:
81:29:85:a4:6f:fc:53:57:2f:d8:e1:e2:df:85:5e:11:8e:4f:
f8:a2:b6:64:5e:2b:a0:68:40:52:25:68:23:98:57:b9:3d:f1:
e2:ee:06:0f:24:39:f4:8f:8b:d7:ff:fd:9a:01:72:69:27:32:
09:28:d1:a5:40:90:31:f1:dd:4a:3b:5b:20:b2:d3:d4:38:8e:
53:c9:7d:85:60:c9:bb:8b:39:fd:7d:1b:30:a0:24:86:fe:9f:
65:f7:09:ac:8a:c0:42:b8:4b:7b:7f:4b:90:61:ea:9a:b3:2c:
6c:e4:7f:ca:0d:29:3e:11:78:37:a9:e0:d7:22:fa:de:7b:9c:
0c:65:f7:1c:aa:04:df:96:23:5c:84:01:31:ef:1f:07:cc:77:
cc:cb:f4:54:43:02:09:6a:03:fd:1b:9d:5e:bc:33:c4:0e:6d:
ac:61:0b:8f:88:82:82:24:46:19:6d:7b:ea:cf:95:1a:36:12:
1b:22:e1:43:6e:b0:c4:2c:93:bf:78:3f:d0:91:e6:36:ad:b4:
a8:5d:fb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:48 2025 by rpki-client