Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAF4F566DB0011EF89D56584762E951A.roa
File: AAF4F566DB0011EF89D56584762E951A.roa (raw, json)
Hash identifier: uauRBrwm8Id6g1FNHXhTpMOJ7ejA6fwAD5d0oHMp7dY=
Subject key identifier: 91:D3:4D:D3:17:7C:5B:98:8B:20:F1:A3:A7:D0:B4:CB:BF:40:A9:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAF4F566DB0011EF89D56584762E951A.roa
Signing time: Sat 25 Jan 2025 09:42:19 +0000
ROA not before: Sat 25 Jan 2025 09:42:15 +0000
ROA not after: Sun 23 Feb 2025 09:42:15 +0000
asID: 202656
IP address blocks: 45.192.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70083 (0x111c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:42:15 2025 GMT
Not After : Feb 23 09:42:15 2025 GMT
Subject: CN=6794b1fb-c949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:89:e0:b2:ec:50:5e:e2:26:90:23:95:66:
a0:45:29:d9:72:f1:8b:bc:8b:da:56:f0:41:98:61:
05:b7:6c:a5:28:aa:b4:01:c4:90:e5:a6:b8:ce:45:
c5:9c:b3:cd:8a:59:da:a0:25:eb:88:db:da:e6:6d:
bf:fc:a2:8d:e6:83:92:15:fd:29:28:8e:84:b7:be:
82:8c:09:45:93:6a:c6:c0:a7:85:73:5c:bf:4e:aa:
0a:66:73:5a:64:6d:00:a5:e1:45:38:87:b1:21:4a:
c8:99:ed:b9:49:26:01:a7:40:12:08:c4:57:b7:fa:
6e:ec:18:ae:dd:8b:72:47:9b:6a:89:47:c7:41:f1:
26:61:ea:1c:25:b9:f3:9c:5a:cb:87:e7:ef:e1:a2:
89:ea:fa:53:3c:f9:49:3c:7f:c8:a3:6a:b1:17:01:
b8:67:b3:a9:27:60:c3:35:e7:7b:a9:cb:7f:7a:68:
72:58:f8:00:89:9e:aa:81:f0:50:96:9a:d3:33:a6:
c6:e7:cf:a2:20:7c:5b:be:55:81:e3:7f:bf:b2:d4:
f3:15:8d:ed:d7:b6:65:db:58:2f:a0:f6:53:a8:3e:
c1:ad:bb:97:4e:24:94:a7:6e:bc:8e:80:0f:c3:95:
02:f3:bc:c4:43:5d:00:7e:ff:e8:a6:2f:bc:6b:37:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D3:4D:D3:17:7C:5B:98:8B:20:F1:A3:A7:D0:B4:CB:BF:40:A9:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAF4F566DB0011EF89D56584762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.60.0/24
Signature Algorithm: sha256WithRSAEncryption
44:98:20:cb:2c:bc:65:bd:f8:36:18:d8:48:dc:d2:79:12:5a:
5a:23:9c:1b:93:c8:57:19:65:58:05:40:e4:de:9e:48:ab:cd:
25:c8:b7:b9:c0:da:a4:f7:2c:ff:5d:30:01:a2:be:d4:07:2e:
c7:76:45:b1:aa:d6:18:18:3d:6a:08:af:70:6b:e9:b5:76:db:
9f:82:52:3c:52:34:e1:de:8d:07:88:4c:20:75:66:dd:a7:52:
9e:a8:70:b4:88:24:9b:b2:19:cd:36:3f:a0:5c:ce:f3:2a:39:
c7:de:aa:6a:44:ce:ce:bb:ee:60:ba:c7:3f:23:e5:bd:25:3e:
21:b9:b4:c9:d7:09:58:94:f8:f1:93:27:fb:09:06:2a:4a:6e:
02:79:e3:85:60:e9:29:1f:d3:90:fd:da:3b:46:88:56:46:73:
09:0f:2c:d3:1a:f2:33:0b:a7:c1:02:14:23:d1:00:93:c9:a1:
1b:c9:b3:51:ec:82:6a:27:2b:cc:9c:68:49:ca:86:9f:5c:b3:
0d:5e:ff:7f:e4:3a:08:37:87:eb:67:57:11:a2:6b:ae:f3:75:
82:ea:6e:05:1d:0e:70:b5:fd:9c:32:83:6a:30:2f:bf:f5:c5:
74:be:58:94:58:d8:2a:75:8b:c3:dd:f5:d6:38:b0:24:3c:9b:
1d:f5:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:41 2025 by rpki-client