Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D11F7F6E55711EFA8ADC0BA762E951A.roa
File: 6D11F7F6E55711EFA8ADC0BA762E951A.roa (raw, json)
Hash identifier: PvMb8h7etjc03XmJfUCJz+dMVdmd+n9MlCIuaJiygxs=
Subject key identifier: 99:49:32:E4:89:A2:EE:70:02:E5:E5:15:E8:5C:96:05:FC:98:92:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D11F7F6E55711EFA8ADC0BA762E951A.roa
Signing time: Fri 07 Feb 2025 13:28:33 +0000
ROA not before: Fri 07 Feb 2025 13:28:29 +0000
ROA not after: Fri 21 Jan 2028 13:28:29 +0000
asID: 17561
IP address blocks: 45.196.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73148 (0x11dbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 13:28:29 2025 GMT
Not After : Jan 21 13:28:29 2028 GMT
Subject: CN=67a60a81-7952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a9:76:6d:6e:03:25:d4:91:0f:8d:15:93:ca:
7e:1b:ed:d6:e1:60:b4:f8:e1:7f:d1:e3:dd:da:94:
ca:e8:b7:7f:c8:67:c5:47:aa:9d:56:56:a7:46:6f:
90:d8:82:d3:27:f5:e1:61:6b:3e:5f:34:64:f2:ea:
73:6c:a9:cc:bd:9e:f9:2e:22:3f:bc:18:67:f3:4f:
82:c0:3b:ed:c3:13:ca:57:d6:be:5a:36:0c:bc:ec:
17:e8:0e:13:0f:b3:c8:c6:e2:88:34:c2:ee:78:f5:
a9:57:ba:0a:07:80:70:5f:7b:83:68:89:f3:7a:9c:
07:1b:6d:b4:3d:8a:50:fa:4b:0d:42:20:79:61:ef:
4f:41:8d:87:6c:76:d0:6c:17:b2:63:61:ef:21:35:
3d:fc:ba:f2:c2:f2:b9:54:73:60:28:e6:88:b5:00:
f0:65:c8:bf:5a:d0:e1:6e:13:fe:9e:d7:27:26:af:
67:67:b1:7b:36:93:73:19:cd:93:2d:a8:41:cc:78:
5e:28:bd:67:00:50:4c:10:f2:54:84:15:37:7b:31:
3a:24:c1:a7:59:d9:a4:42:a0:cc:14:03:95:1d:3d:
05:9c:08:f2:87:72:6e:55:ef:67:f5:51:43:f5:5f:
9e:7e:75:b2:17:dc:25:94:44:ae:6b:dc:f2:d0:71:
05:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:32:E4:89:A2:EE:70:02:E5:E5:15:E8:5C:96:05:FC:98:92:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D11F7F6E55711EFA8ADC0BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.65.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:09:bc:b9:3d:89:8b:87:b6:65:6d:f8:a4:fc:14:b4:41:da:
a9:b8:da:1e:d4:21:22:e0:47:72:ac:ad:90:39:23:58:02:67:
08:3e:a5:7b:8f:7c:b5:97:88:17:26:32:e5:fc:21:23:8a:ff:
d8:cd:b6:0d:bc:bf:7c:c0:f6:d7:80:07:5f:bc:10:4c:28:5a:
93:8e:27:28:82:72:c9:c3:fe:81:c9:d6:fa:db:d6:93:0c:81:
70:ab:bb:c1:f1:ba:ff:97:01:03:95:72:78:f3:4b:e3:3a:fc:
14:02:da:72:40:d2:a8:71:27:26:7f:ff:d7:86:f4:b7:a7:cb:
f4:92:d8:6e:42:dd:75:e7:62:50:40:3a:3c:02:3a:c5:92:ca:
b6:94:45:e7:4b:b9:80:f8:56:73:f5:d2:4e:18:bb:04:57:f0:
07:72:4d:9a:55:98:1f:22:20:64:e5:ce:a8:e3:c7:92:3b:f7:
da:a2:b2:52:30:28:c5:6a:e9:c4:45:ac:5d:81:3f:b7:9b:19:
ba:04:67:f8:15:39:93:05:67:14:94:04:a9:db:01:c6:59:b9:
1d:c8:fe:35:95:7a:6e:21:48:45:8c:5c:62:41:76:ec:6e:be:
30:70:b9:6a:4c:ad:71:63:47:c6:fe:79:c3:89:a3:71:44:ba:
92:80:ac:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:56 2025 by rpki-client