Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A94E57C6DFDC11EFA56D9045762E951A.roa
File: A94E57C6DFDC11EFA56D9045762E951A.roa (raw, json)
Hash identifier: WoooBsL7yuWtaspqM7KS/Mbh0Oo8avul8VZxTXJC1CE=
Subject key identifier: D9:C6:79:D1:7C:28:A8:E4:79:AD:28:CC:74:02:61:D3:17:27:02:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A94E57C6DFDC11EFA56D9045762E951A.roa
Signing time: Fri 31 Jan 2025 14:07:10 +0000
ROA not before: Fri 31 Jan 2025 14:07:06 +0000
ROA not after: Thu 06 Mar 2025 14:07:06 +0000
asID: 45814
IP address blocks: 45.197.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71156 (0x115f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 14:07:06 2025 GMT
Not After : Mar 6 14:07:06 2025 GMT
Subject: CN=679cd90e-9800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:42:9d:5e:b0:64:f1:2f:3c:38:dd:37:2e:
df:77:37:10:18:82:64:dd:24:63:fb:d8:bc:af:04:
20:2b:f4:1e:e2:1a:6a:50:41:a0:71:36:c8:7d:72:
96:46:79:f7:2d:d1:59:fe:c5:2f:97:cd:5f:77:eb:
b8:48:31:6f:72:40:a9:bc:21:bb:e8:3c:a7:6f:c0:
ad:40:7a:11:73:a8:99:46:7b:de:3d:97:57:e2:a1:
84:38:a3:78:81:cd:88:f1:da:82:e2:1f:40:cc:5e:
de:a0:a9:b5:53:aa:2b:0f:19:f2:cf:3e:4f:d9:48:
d4:81:7c:27:59:d1:ef:c8:f4:16:d3:0d:9d:ef:6e:
53:26:0a:dd:7b:2a:6e:29:e8:56:9a:4a:dd:46:1b:
17:25:e4:00:03:e7:37:8a:8e:e5:68:d4:23:1c:fe:
39:39:06:99:2d:bf:0b:a6:75:e3:d5:fb:e3:05:50:
5c:38:8a:7c:91:a0:72:bc:56:65:16:55:19:56:93:
89:2f:ec:ae:b1:04:08:c4:e7:8d:69:be:9d:87:54:
81:37:30:f9:9c:64:a5:bc:6f:e8:70:64:45:71:f2:
d9:39:08:b6:fe:85:d1:f5:24:c0:03:3b:88:a8:d4:
0a:d3:ce:70:75:17:7d:a9:39:84:e6:bf:09:4c:53:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C6:79:D1:7C:28:A8:E4:79:AD:28:CC:74:02:61:D3:17:27:02:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A94E57C6DFDC11EFA56D9045762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.133.0/24
Signature Algorithm: sha256WithRSAEncryption
03:10:6f:bd:8e:3f:0d:95:8a:43:c3:44:63:c5:12:58:29:a0:
fa:1e:01:70:a4:8a:c7:ea:1e:ff:9e:ef:1a:14:d2:4b:a8:20:
f4:11:fd:98:f1:a6:92:7a:06:c1:a4:10:33:e2:dc:1c:6b:18:
9e:7a:0e:75:1f:0d:fc:e8:2c:59:bb:d3:35:b3:51:82:16:c0:
79:ef:54:3e:6b:64:98:e6:a1:61:a8:5b:a6:48:13:c4:b3:98:
21:9b:0c:a6:c3:31:67:47:de:62:55:2b:52:bc:20:95:2b:4f:
91:2f:13:76:9c:03:ab:74:34:02:2a:20:e3:2a:60:20:8c:20:
e5:bb:ea:61:71:71:ba:18:87:97:72:a6:df:30:b1:95:35:9e:
cf:c1:44:5d:12:1d:66:53:2b:08:08:bf:8d:3d:56:e9:1c:f0:
a7:9c:8c:25:46:0d:4a:7a:2e:b8:9a:a6:38:26:2b:2b:3a:cf:
0d:52:47:97:4d:8a:94:25:f3:8a:b6:32:18:bb:d7:f0:08:a3:
79:59:5a:20:79:dc:a4:e5:db:ba:db:33:a5:b9:56:cb:de:dc:
a4:b0:20:5e:4a:21:a1:8b:8a:53:47:52:37:ee:9a:30:b4:8d:
eb:0f:1e:56:8f:53:c4:c4:2a:56:07:f6:21:3b:ad:ae:32:3d:
cb:53:a2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:53 2025 by rpki-client