Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/150D54BCE55511EFAC1C90AB762E951A.roa
File: 150D54BCE55511EFAC1C90AB762E951A.roa (raw, json)
Hash identifier: Juoyxu/Ou3XNxV2mg0FrwH6WAJnX50/+/5bC8sQX4K0=
Subject key identifier: B5:1A:49:DA:8F:13:A4:9E:08:AD:00:3C:88:96:5F:41:F4:5E:32:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DA6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/150D54BCE55511EFAC1C90AB762E951A.roa
Signing time: Fri 07 Feb 2025 13:11:46 +0000
ROA not before: Fri 07 Feb 2025 13:11:42 +0000
ROA not after: Fri 21 Jan 2028 13:11:42 +0000
asID: 17561
IP address blocks: 45.192.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73126 (0x11da6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 13:11:42 2025 GMT
Not After : Jan 21 13:11:42 2028 GMT
Subject: CN=67a60692-5420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:ad:fe:4f:e9:3f:6a:53:80:86:12:9b:47:
ec:a8:fa:a0:35:33:a0:9c:24:7e:6e:ea:ca:b9:0e:
3d:fe:7b:0e:19:87:40:52:c0:65:b1:63:0e:2f:f8:
4e:c6:84:e8:d4:43:20:27:4f:c2:c8:c7:93:0c:54:
84:af:20:5f:db:9a:ed:5a:a7:e5:22:ff:60:b6:a3:
ef:fa:f1:9a:6e:64:2c:28:b2:9e:ff:8e:a0:ec:e6:
a1:99:25:29:5e:ae:fb:9d:1a:3e:74:8c:2f:7d:89:
0d:dc:01:08:55:ba:c6:e2:f5:8c:51:ac:ab:a9:7e:
bb:46:39:7c:6b:68:a5:ca:35:71:36:f4:bf:dd:9a:
2d:32:cf:e8:99:72:45:ea:db:26:c4:e9:68:9e:00:
1a:79:ec:62:28:32:50:41:db:77:4e:3d:5a:af:0e:
79:c8:bf:6a:08:ed:a1:65:e6:1e:6c:59:de:6b:0e:
e4:5f:94:eb:bd:28:f2:86:38:53:45:d2:cf:b3:cd:
63:37:42:1b:8d:cb:6e:75:bf:2a:ed:92:72:96:09:
dc:2b:fb:75:97:97:63:51:32:bd:1a:82:56:8f:d8:
1d:18:85:ee:0a:fe:4f:ba:b8:44:c1:ce:b9:29:00:
99:44:9b:df:03:c4:72:80:38:72:b5:9a:b0:14:cc:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1A:49:DA:8F:13:A4:9E:08:AD:00:3C:88:96:5F:41:F4:5E:32:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/150D54BCE55511EFAC1C90AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
26:02:c4:08:d0:c5:ef:71:24:7a:a9:f9:2a:54:05:dc:04:4e:
35:a9:03:19:17:6b:ff:e7:b6:cb:50:7f:b2:33:e5:d3:32:b9:
c4:c6:76:e1:66:78:a4:6f:5f:b2:cc:85:ab:e4:e9:f7:f5:d7:
29:ef:4c:96:de:44:99:7c:38:ef:92:aa:10:2c:06:f0:70:e1:
a5:b3:53:75:4a:53:49:ae:a0:8e:bf:4a:62:37:98:34:00:b9:
34:9a:40:53:93:b6:fd:9a:50:c7:d7:d2:af:b1:94:5d:71:d6:
61:e9:5b:86:b5:37:0c:b2:e0:61:e0:f6:3d:c0:d9:83:c0:4a:
54:03:ed:76:7d:c6:6e:3c:fd:1a:e9:d7:03:09:15:9e:34:1f:
81:f4:ae:bc:e5:51:1e:68:3a:88:a2:75:0b:8b:17:b1:01:da:
9d:83:a8:8e:d4:ba:14:fc:8e:58:c2:72:07:ff:c7:72:f0:3e:
36:4e:5a:d9:ab:ef:bc:41:4b:97:38:ac:09:1e:05:a9:43:12:
34:53:2d:94:9e:68:62:01:66:9d:09:d6:f8:86:e6:28:75:54:
e8:35:c1:42:a8:41:ad:4a:36:86:b0:f6:fb:c5:94:71:ea:2f:
57:c7:64:9b:f8:a1:6a:e5:31:3e:93:ec:66:f5:6e:09:a8:8f:
b0:2d:60:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:55 2025 by rpki-client