Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAFDF9E2DAF211EFB4A4F7A5762E951A.roa
File: CAFDF9E2DAF211EFB4A4F7A5762E951A.roa (raw, json)
Hash identifier: cvs/nWj6nfFayfKGNiEbgKIRwfpUWHrhMB4IO/tJhLQ=
Subject key identifier: CD:4D:35:D8:84:FF:FF:53:18:5E:52:C9:A2:22:54:A4:25:40:05:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011160
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAFDF9E2DAF211EFB4A4F7A5762E951A.roa
Signing time: Sat 25 Jan 2025 08:02:59 +0000
ROA not before: Sat 25 Jan 2025 08:02:56 +0000
ROA not after: Sun 23 Feb 2025 08:02:56 +0000
asID: 202656
IP address blocks: 45.195.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69984 (0x11160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:02:56 2025 GMT
Not After : Feb 23 08:02:56 2025 GMT
Subject: CN=67949ab3-90ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:98:fe:18:96:82:d4:d4:96:5b:e5:b7:0e:
7e:53:90:5a:4e:6c:4e:47:82:13:31:bd:59:5b:10:
5f:ec:b8:a9:6a:66:0f:69:75:10:e3:01:a0:79:fe:
a9:7a:c2:cc:00:fd:5c:84:09:d2:cc:3d:18:70:71:
de:7e:29:7b:a6:e6:1c:25:55:23:11:34:08:29:49:
ff:30:e4:33:29:20:e2:50:f2:c6:5c:fa:a9:12:05:
0a:e6:4f:43:68:9b:64:79:16:1c:89:8b:09:ff:f9:
81:71:41:97:ad:97:33:ba:ae:8b:9a:9f:61:e3:da:
0c:8d:3a:6d:c4:4c:fe:06:22:c8:a9:4d:0c:71:5e:
ed:4b:b6:8e:4f:92:9a:80:87:93:f9:94:ae:5d:ec:
20:38:56:08:87:22:d3:0b:c1:c6:44:79:17:3c:86:
81:ff:15:e9:d5:63:7c:80:c9:53:60:fb:0c:92:1d:
40:3e:12:c8:13:8c:b1:12:fc:82:de:fa:d8:c7:f0:
41:b6:2b:c4:a1:4d:53:49:dc:18:ae:c6:af:fb:19:
db:ad:8f:92:f1:18:59:e4:fe:1b:f6:57:e9:11:1c:
37:a6:0a:05:5f:49:3a:ec:9c:f3:c8:d4:8c:a7:96:
00:e0:a3:93:e4:3f:e0:41:6a:ba:1a:bf:07:8a:19:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4D:35:D8:84:FF:FF:53:18:5E:52:C9:A2:22:54:A4:25:40:05:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAFDF9E2DAF211EFB4A4F7A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9a:7a:68:64:da:0e:91:f1:7a:d9:d0:a7:56:2a:7a:e2:b7:
1d:d8:25:e7:9f:b8:20:ed:36:e4:43:35:e3:23:0a:ff:e1:a1:
b3:2e:58:66:33:19:31:80:cc:9b:25:08:fe:7d:7e:f0:35:4b:
31:79:83:3c:e7:5b:c4:45:3e:58:16:ea:67:dd:89:b0:af:65:
e3:5c:72:9a:4c:6a:a8:ff:b1:30:1c:5a:5e:79:9f:04:16:83:
47:51:5b:8e:84:5e:13:d7:90:92:c8:54:5c:e7:44:07:e4:23:
3a:87:d0:ae:4f:2e:6a:b3:72:e3:1c:04:22:9d:69:d2:29:15:
02:b1:2c:d5:b9:de:64:36:7f:8d:13:92:1d:79:62:a8:5f:ff:
28:2b:28:80:ef:d1:fe:ad:51:f0:eb:96:30:e2:ce:50:bf:e6:
cf:17:74:6d:bf:4b:f7:e0:67:6d:57:83:03:00:b6:dd:1a:56:
7b:a1:f8:e4:22:39:75:18:1a:35:29:15:ca:39:be:bc:96:d7:
e3:14:f4:3a:17:ac:41:10:ad:32:57:7d:7a:b8:b7:77:57:e7:
79:5a:74:20:7f:2f:a7:0c:6c:52:5e:30:47:07:6d:70:37:56:
95:49:04:f8:85:0d:3a:bc:85:e6:b8:34:7f:4a:ca:02:a1:f4:
fb:5b:2f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:53 2025 by rpki-client