Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7835A52E55911EF9B41AE4A762E951A.roa
File: C7835A52E55911EF9B41AE4A762E951A.roa (raw, json)
Hash identifier: JRcebJX1YqvjtiUNeTaadPZXCyzKPK3PfV2Jux2EyH8=
Subject key identifier: F8:0E:77:1D:9E:33:DC:1A:94:CA:10:EC:40:1A:87:B3:40:AB:95:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7835A52E55911EF9B41AE4A762E951A.roa
Signing time: Fri 07 Feb 2025 13:45:23 +0000
ROA not before: Fri 07 Feb 2025 13:45:20 +0000
ROA not after: Fri 21 Jan 2028 13:45:20 +0000
asID: 17561
IP address blocks: 45.196.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73168 (0x11dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 13:45:20 2025 GMT
Not After : Jan 21 13:45:20 2028 GMT
Subject: CN=67a60e73-756d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:eb:08:2f:5c:35:28:7f:d1:28:82:74:83:
83:cc:08:59:c9:55:84:71:7d:37:2e:24:64:19:d6:
f6:dc:ff:17:5a:4f:35:b4:f8:74:10:8f:a4:62:63:
d1:7e:02:b3:6e:61:14:9c:5d:f0:b8:48:33:5c:c0:
4f:74:7b:d3:3c:20:c8:ef:f8:83:37:ad:df:b6:55:
dd:b4:60:54:44:f4:4e:7d:3a:17:ad:9d:b3:96:8a:
8f:72:c7:6b:0d:6f:e7:8c:9d:88:cc:ca:b9:d4:86:
ce:3d:07:e1:c1:bc:a8:d0:1f:53:b9:63:34:b5:0e:
99:dd:50:c7:f7:fe:cb:d4:82:56:40:07:46:8d:5f:
53:a1:8c:ef:62:bb:d5:1f:b4:8d:f4:2f:89:dd:e4:
62:41:4f:8f:02:a1:5d:97:8f:2f:2d:cb:a1:77:e9:
c3:c3:2f:92:2c:52:0d:bb:7e:41:67:d4:3f:0d:2c:
c1:f8:fb:cf:cc:2a:35:50:d5:cb:41:fa:78:6c:e4:
81:6e:c5:64:ce:a9:2d:93:26:ec:ab:8d:b5:61:06:
40:43:41:9f:98:ce:d4:df:9d:ba:e1:fe:8c:7b:b5:
0c:0d:4c:45:64:9c:64:d5:5f:a8:25:e8:f6:98:50:
7e:b5:c4:6b:2a:c2:ca:ce:0c:c7:62:e9:36:c0:44:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0E:77:1D:9E:33:DC:1A:94:CA:10:EC:40:1A:87:B3:40:AB:95:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7835A52E55911EF9B41AE4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.72.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:62:1f:90:eb:1d:57:9c:24:8c:97:77:62:5c:9c:ae:e4:56:
49:77:f0:c3:f7:1e:96:7e:a3:96:45:c2:3e:4d:49:4f:35:84:
2f:03:1d:bc:c6:69:3f:23:16:34:0a:22:5a:09:90:cf:a9:8f:
64:5c:9f:34:e5:0a:d6:6f:6d:b9:91:d6:62:4a:d8:06:12:a8:
aa:a9:20:ca:03:86:94:d1:03:00:bb:0e:0a:42:bf:a9:8c:98:
b2:8d:eb:84:5f:3a:75:d4:81:05:7a:ae:d9:da:8c:e6:bc:0f:
be:1c:3f:6f:72:55:70:06:5a:35:97:b9:a9:2c:bc:03:4c:84:
56:54:de:e8:66:20:34:11:6d:28:de:21:6b:22:ef:84:c6:cf:
9e:42:bd:42:b3:2e:4f:f3:e1:ae:32:db:88:c1:5b:e0:9c:e8:
06:b4:8c:75:22:3b:ce:a7:0d:6f:e4:73:a6:7e:c5:34:01:4d:
ad:ee:eb:77:ea:bd:84:ae:89:0e:46:19:49:5f:27:07:26:30:
28:70:f1:97:09:7d:5c:ef:38:c2:a8:97:39:70:9c:57:57:b9:
9a:04:6a:01:95:43:03:1f:d3:da:6f:c2:6c:34:a9:6d:7d:44:
30:02:6c:c9:95:b0:a8:cb:81:20:c7:dc:fb:65:24:5a:cb:33:
1f:1f:75:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:21:47 2025 by rpki-client