Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDC14E8EDB0411EF9E2BDB9D762E951A.roa
File: BDC14E8EDB0411EF9E2BDB9D762E951A.roa (raw, json)
Hash identifier: slW93ti+8ad3SgC4RqEqqK2a/pfmCYQVigsC/duUJ10=
Subject key identifier: 50:F3:43:88:D0:14:62:08:91:74:5C:AF:13:7F:EC:F5:07:47:06:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDC14E8EDB0411EF9E2BDB9D762E951A.roa
Signing time: Sat 25 Jan 2025 10:11:28 +0000
ROA not before: Sat 25 Jan 2025 10:11:24 +0000
ROA not after: Sun 23 Feb 2025 10:11:24 +0000
asID: 62240
IP address blocks: 45.192.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70105 (0x111d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 10:11:24 2025 GMT
Not After : Feb 23 10:11:24 2025 GMT
Subject: CN=6794b8d0-428a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:88:4c:f6:ba:d6:4b:2a:2d:1b:44:c0:9d:dd:
c3:88:d4:33:71:7b:a5:81:25:17:ad:7d:62:b5:19:
6f:22:83:cb:fe:62:53:d3:33:86:4e:63:c1:25:bf:
b2:f7:f9:e2:40:2e:27:eb:2e:c4:b4:26:f2:f2:cc:
48:e6:29:a4:0a:e6:ed:b7:32:80:59:be:13:6c:78:
ad:9c:b2:21:ce:ea:b7:16:34:15:e1:98:96:61:9a:
5f:f6:82:d0:50:c4:a6:96:60:aa:ab:1b:8f:58:a7:
0e:81:29:e9:f3:88:61:3e:90:1a:60:b4:1c:fb:0b:
df:7e:91:e8:bc:c5:bd:1e:12:90:a9:30:be:31:d4:
69:b1:a3:46:8c:56:34:89:3b:3e:1c:44:12:ec:ed:
aa:fb:66:7f:3e:1f:01:9b:a6:8e:c1:88:76:72:ba:
86:db:92:9e:f1:bc:79:9a:91:ce:ef:f3:bb:96:16:
8f:6b:31:3e:ec:ca:c3:1f:62:a4:99:06:6c:3a:57:
bc:62:9d:03:d5:84:7a:9d:d4:c3:e7:14:9f:49:31:
65:01:a9:41:49:46:31:e2:95:8b:21:e9:76:a9:dc:
c5:d3:ae:52:bd:f6:bd:8e:6f:bd:d9:26:8a:12:71:
42:df:77:95:1e:85:d1:20:76:0e:9d:4c:80:08:3e:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F3:43:88:D0:14:62:08:91:74:5C:AF:13:7F:EC:F5:07:47:06:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDC14E8EDB0411EF9E2BDB9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.33.0/24
Signature Algorithm: sha256WithRSAEncryption
82:5b:10:01:0b:0c:e8:54:1c:17:07:f7:3c:ea:c8:1e:64:b4:
73:4b:9c:ef:e1:1c:b2:88:a6:c0:08:0c:53:ed:d9:f9:48:08:
54:1a:c4:5d:ea:11:7f:ea:a7:57:b6:7d:df:45:ec:2c:b2:75:
98:d6:27:2f:3a:53:e9:97:bb:28:f4:6d:ef:97:8b:bc:e8:cb:
20:ea:f3:e4:89:17:66:3d:d5:27:ce:56:d8:11:53:e2:a9:4c:
68:13:c5:a4:f4:56:b2:ec:65:01:ba:46:e8:98:8c:75:ca:ef:
26:cd:c5:c0:50:ee:21:24:e1:81:22:58:82:c6:35:8a:2c:3c:
7e:b1:31:59:bf:75:64:83:e4:fc:37:01:1b:15:0c:6a:e0:82:
d7:12:6c:db:ea:95:f3:1b:64:f1:a0:0c:6b:e0:2f:fd:2a:9e:
7c:55:30:03:fe:20:db:48:33:6a:8e:07:9e:7e:e0:c8:76:a8:
17:36:24:0c:7f:ae:6d:ad:f2:f1:04:51:c3:68:21:2b:7f:00:
48:9b:7b:7e:d7:20:3c:5b:02:96:f3:3b:87:a1:21:45:b4:bb:
7f:47:e3:2c:28:15:ab:67:30:b0:aa:a2:03:cb:a7:44:de:e5:
19:d9:dd:a8:2f:6f:fa:19:66:b3:57:4f:7f:12:70:11:96:43:
3c:0b:3b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:54 2025 by rpki-client