Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E719F76ADFFD11EFA17142A2762E951A.roa
File: E719F76ADFFD11EFA17142A2762E951A.roa (raw, json)
Hash identifier: coD6SJP9uzjVncqfvvtfy2CKMTyuP/33ca8YE7ONA5c=
Subject key identifier: 5F:CB:BA:DD:D4:FF:F3:F4:30:1C:E1:C5:2D:CE:EC:A0:1E:33:38:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E719F76ADFFD11EFA17142A2762E951A.roa
Signing time: Fri 31 Jan 2025 18:05:07 +0000
ROA not before: Fri 31 Jan 2025 18:05:03 +0000
ROA not after: Mon 10 Feb 2025 18:05:03 +0000
asID: 214808
IP address blocks: 45.192.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71371 (0x116cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 18:05:03 2025 GMT
Not After : Feb 10 18:05:03 2025 GMT
Subject: CN=679d10d3-7445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:fc:6c:c6:d4:83:24:a1:0c:60:f2:f3:9c:
58:db:11:ce:be:7c:57:3c:2d:22:3e:f3:f0:81:b4:
b7:ce:88:1e:c9:73:59:20:54:5f:d0:ab:b3:56:ce:
2d:b4:96:92:eb:90:38:33:cf:07:61:21:6b:c9:94:
0e:d7:1f:76:c4:75:da:78:3e:af:7c:ba:c7:86:44:
b6:43:06:a5:92:eb:0c:9c:be:ef:61:ed:57:46:c6:
85:d4:da:f8:6b:f5:4a:0f:01:56:ce:31:ff:58:90:
3d:9d:46:7a:48:3a:20:d2:4c:f2:c2:49:50:8c:25:
a3:15:83:fe:dc:bd:5a:8e:b4:43:68:a8:6d:e8:f3:
bc:62:62:62:5c:40:ea:65:5e:f9:f6:d8:a8:ec:36:
ec:86:21:a4:42:af:bb:9d:37:eb:26:97:bd:2a:c0:
c6:fd:b4:0d:19:c4:53:d0:7d:06:ab:a3:fd:d6:c1:
7d:5b:c9:43:6d:a2:96:fc:da:85:90:71:29:ca:cc:
f4:9d:91:71:b4:07:6c:b5:51:ce:64:1a:8d:66:4f:
7c:1a:19:f0:2f:3f:fe:0c:56:58:b8:9a:31:46:32:
42:bc:0d:25:b7:12:c9:9f:22:27:f2:b9:0e:2c:d3:
32:61:c9:3a:c9:6f:99:cd:10:27:90:96:b9:82:bc:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CB:BA:DD:D4:FF:F3:F4:30:1C:E1:C5:2D:CE:EC:A0:1E:33:38:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E719F76ADFFD11EFA17142A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.242.0/23
Signature Algorithm: sha256WithRSAEncryption
42:94:33:5d:79:a0:8e:93:83:a9:89:78:b1:ef:55:25:9b:8a:
a4:26:7f:17:d1:98:78:a8:28:84:5e:87:38:48:37:1d:14:c9:
57:ed:08:d3:ea:ce:13:ea:3f:af:16:0f:dc:c2:29:e5:47:87:
96:c6:99:52:e5:5c:c3:ab:7a:12:a8:19:57:c1:68:46:7b:c5:
b2:7b:15:6c:4b:48:3b:74:cd:e2:8b:59:30:19:a1:59:73:66:
02:51:5e:db:3f:9c:82:11:b6:2d:7c:2f:dc:76:86:87:76:d1:
6f:cd:29:95:4f:b2:e4:ee:7c:7d:20:a1:46:e3:62:d8:7d:c6:
12:cf:2e:a1:c6:95:4a:83:86:ae:92:bd:d1:d8:1c:28:90:55:
34:83:70:fb:63:54:24:4d:fe:7f:92:5e:f7:14:a3:ee:73:75:
91:b3:17:8e:f5:d3:d3:ad:8c:76:a8:2c:4c:3e:6a:85:bf:1c:
9c:2e:d3:33:c2:9e:c1:f6:18:91:d5:56:6a:25:34:b3:42:e4:
c2:1c:1f:76:b1:1d:c0:f0:04:47:40:4f:2c:74:a9:2b:1e:91:
6a:f6:54:81:54:0f:a3:8c:06:94:6c:ce:7c:6a:14:79:36:8f:
44:a2:c3:fe:84:cb:73:13:91:39:9c:0c:e6:8c:80:f8:45:72:
ca:09:8b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:43:02 2025 by rpki-client