Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7D80056DC1A11EFB9E6596B762E951A.roa
File: F7D80056DC1A11EFB9E6596B762E951A.roa (raw, json)
Hash identifier: 0FBmc3gFxLMGppUGfjMndvecVmrtHBM4tZhGhLrEpes=
Subject key identifier: 27:FC:67:6E:D4:43:B5:31:B4:7D:A1:D0:21:14:6B:CD:D4:DB:BD:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011456
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7D80056DC1A11EFB9E6596B762E951A.roa
Signing time: Sun 26 Jan 2025 19:23:06 +0000
ROA not before: Sun 26 Jan 2025 19:23:02 +0000
ROA not after: Fri 07 Feb 2025 19:23:02 +0000
asID: 395793
IP address blocks: 45.192.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70742 (0x11456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 19:23:02 2025 GMT
Not After : Feb 7 19:23:02 2025 GMT
Subject: CN=67968b9a-a25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:2a:0d:ed:ce:0e:b5:6b:c9:69:ad:b8:20:
1d:29:b5:c5:87:f6:8b:be:92:31:b8:31:94:c6:48:
ba:8f:e6:90:18:3e:ac:7b:4c:ef:fa:78:26:b8:2d:
04:d2:d9:29:bf:4c:47:5d:8b:50:82:aa:65:60:cc:
4e:d2:2f:78:26:43:bc:25:f4:d8:d2:89:cc:c1:c8:
a4:e9:45:96:5c:7c:cb:74:f7:bb:73:f2:50:16:65:
2f:4f:8d:1e:1d:0d:4b:b0:c2:2a:8c:77:ac:ec:74:
5d:fb:6d:ac:35:03:f7:a8:e7:a1:cb:5a:ae:fa:f0:
9a:17:3d:0b:ce:c6:3c:9c:03:3f:10:fd:ab:1d:03:
61:d2:56:3c:c5:1c:f3:1e:eb:7f:82:20:86:00:dd:
52:f4:01:05:05:bb:16:71:41:a3:bc:19:1b:a4:c7:
8b:f5:a9:3a:d9:a8:da:fa:a8:87:e7:70:86:6e:87:
5f:60:08:c9:62:0e:a1:b3:86:21:ab:bb:5a:2b:d2:
92:eb:e0:6e:bc:c1:f6:b2:5d:ed:70:9a:b9:7e:14:
47:fb:cd:23:8b:ea:a5:fc:2f:ea:1c:41:b6:ef:d6:
42:0c:41:43:ea:e7:01:9a:c6:f0:7f:36:04:1e:67:
06:f4:56:81:3d:34:2c:2f:9a:2f:17:41:c3:2d:67:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FC:67:6E:D4:43:B5:31:B4:7D:A1:D0:21:14:6B:CD:D4:DB:BD:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7D80056DC1A11EFB9E6596B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.165.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f4:4b:b4:30:8e:50:61:65:ce:d3:c3:80:e0:3a:82:0f:3c:
47:07:79:64:e5:4b:2b:0a:17:b8:b6:79:05:f2:5c:3d:e8:64:
57:b6:fc:e2:31:ed:db:6f:fc:35:de:57:e9:1d:90:31:7f:0d:
ad:7e:50:76:f5:94:7d:fa:c0:36:f8:8a:d3:fd:27:dc:c3:87:
e5:d3:e2:e9:19:86:9a:9e:13:90:51:18:f6:a1:7e:3c:83:9d:
0f:53:25:12:af:94:f8:d2:bc:7a:c8:0c:d8:29:75:fd:e5:3f:
46:54:2b:49:1b:54:3a:8c:61:be:7a:92:44:fe:b2:1a:a9:40:
8e:f1:43:58:af:49:08:3d:31:ca:c9:ac:aa:84:16:1d:06:a8:
90:0e:f4:27:56:c7:9f:b2:a4:ed:0a:9a:66:e2:c4:e5:65:64:
b0:17:fa:4d:c1:4b:db:81:59:98:c4:42:6b:32:79:89:28:8c:
87:05:e2:24:55:cc:80:cf:91:cd:3e:7d:8e:b7:bf:66:94:9f:
9b:3c:58:5f:b1:fb:f0:fe:56:7b:19:ea:e4:fe:d2:ee:1e:13:
d4:2a:e3:6a:38:d3:8c:b2:eb:67:fc:65:2e:d3:14:0f:c5:c1:
5c:e0:81:1a:12:c6:9f:b7:ec:20:74:3b:14:2b:03:c8:8f:b9:
a6:72:6d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:13 2025 by rpki-client