Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3E36CDCDAEB11EFA8875378762E951A.roa
File: E3E36CDCDAEB11EFA8875378762E951A.roa (raw, json)
Hash identifier: 31iAcnbJ+PzbCbjaiE+gLuP31bm9nKxRJLAvF9nnNkk=
Subject key identifier: B4:FC:46:47:E0:F9:B8:3A:78:82:97:4D:44:67:0C:D3:4C:D5:34:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011108
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3E36CDCDAEB11EFA8875378762E951A.roa
Signing time: Sat 25 Jan 2025 07:13:35 +0000
ROA not before: Sat 25 Jan 2025 07:13:31 +0000
ROA not after: Sun 23 Feb 2025 07:13:31 +0000
asID: 202656
IP address blocks: 45.195.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69896 (0x11108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:13:31 2025 GMT
Not After : Feb 23 07:13:31 2025 GMT
Subject: CN=67948f1f-5cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:11:46:a4:ae:6e:4a:7c:a3:45:3f:8a:64:
70:0d:18:fc:d6:4d:97:35:03:e2:77:a7:5a:b3:73:
8a:56:28:8f:29:bc:7c:00:b2:e3:53:54:4c:c0:0b:
0b:0e:d0:6a:52:20:2a:55:9f:9b:b7:d6:ce:4c:9c:
8b:01:40:b5:b4:60:81:f2:f6:56:96:cc:7d:f3:5d:
eb:38:33:a1:69:99:8e:f9:d5:78:b8:12:0f:48:bf:
b5:ee:97:ef:c5:72:e2:07:a3:da:20:cd:07:71:34:
bb:b5:cf:b4:d4:66:09:10:38:ef:4e:23:7b:79:3a:
e1:02:9b:6c:b8:8e:8d:70:92:4d:77:19:09:3a:6d:
20:08:6d:a5:46:0e:b0:61:f6:d5:74:d2:18:d8:e8:
9b:1a:b8:86:ae:fb:ab:49:a2:96:bf:ff:79:56:31:
f3:d8:8e:2e:88:bb:92:72:16:d9:6d:03:02:b3:75:
b0:b3:20:1c:5f:ff:2b:ca:a4:bd:71:a3:6e:51:51:
4b:51:dc:d1:6a:51:ee:5c:ce:59:07:8c:25:de:09:
ee:62:a1:ea:e4:6e:be:38:1a:f2:fc:01:3b:57:1c:
15:7d:16:d5:32:9a:bf:ce:87:11:e6:77:f6:c1:21:
7c:4b:9d:88:91:7a:a0:78:1f:5a:8c:97:f0:76:3a:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FC:46:47:E0:F9:B8:3A:78:82:97:4D:44:67:0C:D3:4C:D5:34:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3E36CDCDAEB11EFA8875378762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.165.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:92:8a:05:8e:a3:cd:66:c0:f0:05:a9:c5:96:80:bd:0b:23:
5e:d5:5c:02:6e:fd:9d:b0:91:84:42:a9:26:7e:3a:45:96:19:
e8:b9:b6:ea:93:7d:40:a7:2c:bb:28:cd:d4:98:21:f4:45:d3:
6e:c7:20:60:15:61:32:9f:78:ae:18:c7:b4:7b:37:53:69:8b:
f0:35:a6:8f:6d:84:15:26:16:57:af:c8:cf:a6:6c:3a:8c:44:
7d:8c:c0:99:07:f2:da:8e:ea:58:a7:a2:77:19:ad:12:c9:5d:
ca:78:ac:e3:fa:2e:98:3c:89:e8:62:e6:e3:d9:6e:36:b3:2d:
78:3c:5d:68:81:3f:81:32:76:47:7f:a0:19:eb:0c:52:77:d4:
b9:5a:1c:72:97:4d:cb:af:e0:6c:f6:48:7b:60:d4:a5:8a:84:
29:15:40:03:5a:e5:96:ba:55:a5:a1:dc:9c:23:55:94:47:b8:
94:85:7b:39:94:a0:9b:e6:ec:af:2f:06:8e:71:25:5e:25:97:
58:e6:57:b0:51:0e:fb:b1:c2:f6:cf:bb:26:b3:99:cc:f5:5a:
e7:29:47:07:90:a6:6f:f3:af:98:61:eb:b0:0f:e4:aa:de:41:
5b:d7:80:6d:2a:60:2b:f4:be:64:0c:7a:cf:ad:d6:3c:d2:f8:
e8:49:ad:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:46:42 2025 by rpki-client