Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29B3077EFE4411EF96413B4D762E951A.roa
File: 29B3077EFE4411EF96413B4D762E951A.roa (raw, json)
Hash identifier: l0I+i7NdXbjLQyQyhXgL6PkqSfl5hfQaFEQ7bH4Cajo=
Subject key identifier: 2B:86:12:B9:84:D5:E5:A4:0F:7E:FB:7F:5E:B2:7E:D3:4C:DB:C2:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29B3077EFE4411EF96413B4D762E951A.roa
Signing time: Tue 11 Mar 2025 06:43:38 +0000
ROA not before: Tue 11 Mar 2025 06:43:34 +0000
ROA not after: Thu 08 May 2025 06:43:34 +0000
asID: 137443
IP address blocks: 45.192.177.0/24 maxlen: 24
45.192.178.0/23 maxlen: 24
45.192.180.0/22 maxlen: 24
45.192.184.0/22 maxlen: 24
45.192.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83127 (0x144b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 11 06:43:34 2025 GMT
Not After : May 8 06:43:34 2025 GMT
Subject: CN=67cfdb9a-a616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:b9:7a:ad:f2:2f:84:60:86:d8:f3:cf:f9:
1b:96:a6:7d:af:40:1a:06:19:20:80:b0:e9:b5:a3:
a6:54:cd:64:58:73:ea:bd:c0:db:74:7f:8d:62:c2:
8c:08:81:ce:ce:10:36:a4:2d:b0:25:66:58:13:db:
d2:cc:a2:b9:21:14:7c:1b:08:15:94:5d:39:40:cd:
b7:a1:62:cd:e3:86:19:37:e5:bc:f6:ad:12:27:f1:
24:3c:38:b7:a8:87:4d:8f:01:3d:36:08:5f:c0:fe:
75:bf:03:4c:b2:93:20:ff:f0:5d:46:9d:d6:ca:61:
95:39:9a:cd:64:98:b8:36:42:0a:9f:6c:12:a2:08:
ed:dc:e6:cb:f8:56:3a:5b:10:fe:b8:b5:bb:6c:c1:
76:ac:86:63:3b:2d:6a:5a:38:f5:a2:50:ee:22:3a:
0f:12:66:b2:a9:57:2e:bb:28:15:20:ee:dd:86:b7:
e3:4f:46:9d:a8:95:ad:ca:05:30:41:23:63:47:04:
f5:fd:45:87:bf:f7:99:c5:d9:40:67:d2:37:cb:1b:
9a:6c:2c:7d:8c:c6:d0:56:82:61:16:65:eb:e5:2c:
47:41:d5:23:f0:8b:8c:87:07:3c:ec:c5:2c:fb:18:
ba:61:98:03:08:41:7f:99:30:4f:6a:de:c3:8a:7f:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:86:12:B9:84:D5:E5:A4:0F:7E:FB:7F:5E:B2:7E:D3:4C:DB:C2:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29B3077EFE4411EF96413B4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.177.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
8e:6d:24:04:2b:80:01:2f:22:15:ee:b8:6a:31:a7:b1:ae:87:
bc:13:a5:14:4c:0f:66:61:65:fc:5c:b9:dc:20:8a:1e:14:7e:
2c:9e:42:01:55:ac:e2:43:96:7a:66:b8:84:82:22:6d:70:a0:
e6:a3:4a:ab:d4:58:f4:8e:4f:fc:87:39:16:39:dd:09:51:46:
b0:22:47:22:d7:69:86:95:69:37:e3:f9:78:49:42:99:c4:af:
e2:88:62:44:b7:f0:54:2d:d7:dc:ea:b3:21:5a:4c:82:b5:70:
86:f6:ff:26:1f:b1:e9:68:b6:0d:94:76:59:fd:0a:54:29:71:
ec:97:11:34:3e:0d:fd:17:27:cd:5f:11:0e:36:5d:87:fa:f6:
53:91:ac:d1:d0:a5:21:98:89:e1:a3:39:d0:30:a7:95:8f:65:
58:c1:6e:af:43:a5:62:9f:a3:f0:d4:e2:b1:e1:44:11:e5:f8:
0d:63:54:f5:76:9d:b2:f3:85:fe:12:7a:f3:b3:d1:2b:68:fe:
ec:6b:6c:bb:f5:f7:c9:7b:e8:8d:7f:80:89:74:1a:11:d5:06:
5f:4f:29:d0:f1:dd:3e:72:e9:c9:5f:86:8c:45:3b:41:f8:be:
92:09:b4:fc:16:66:a4:f9:a6:4c:2c:75:75:03:e4:88:89:b8:
1b:69:72:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:07:40 2025 by rpki-client