Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02A0B674DB5B11EFA64D815C762E951A.roa
File: 02A0B674DB5B11EFA64D815C762E951A.roa (raw, json)
Hash identifier: hRTSvhz0/MP+LX7t4A83L6U0dcUCFW699Sn9v2OFjgo=
Subject key identifier: A9:40:F2:BF:4F:F2:97:0C:09:8A:8F:F3:ED:2F:37:C0:BB:5A:D0:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01130B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02A0B674DB5B11EFA64D815C762E951A.roa
Signing time: Sat 25 Jan 2025 20:29:00 +0000
ROA not before: Sat 25 Jan 2025 20:28:56 +0000
ROA not after: Sun 09 Mar 2025 20:28:56 +0000
asID: 63139
IP address blocks: 45.197.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70411 (0x1130b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 20:28:56 2025 GMT
Not After : Mar 9 20:28:56 2025 GMT
Subject: CN=6795498c-33bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:81:61:a7:89:a3:e7:16:63:6c:44:d1:40:ca:
e9:3f:fc:32:72:dc:dd:d1:bc:e7:69:c6:56:a5:08:
bf:c7:b9:8e:e4:b8:33:ed:bd:c5:47:6c:d0:19:9a:
74:0d:e5:83:c9:b0:d0:49:3f:c3:95:63:10:12:32:
89:40:0d:54:21:b0:e1:35:b1:96:45:c2:16:32:67:
16:0b:09:ac:07:ab:65:13:e4:a1:ac:5b:15:9a:d1:
e7:4f:61:e6:95:cc:53:2e:b5:d7:06:5f:4e:d8:8b:
8c:b7:81:2c:02:88:bd:49:19:2f:ea:2c:9e:63:96:
4d:c7:fd:56:c3:82:54:15:f4:2d:93:5e:42:2a:a5:
5b:fa:71:80:c3:02:bf:12:c5:20:fc:9f:90:be:a3:
7b:98:60:e7:23:62:bf:31:89:47:ab:df:06:cb:bf:
5d:14:9a:31:89:01:74:13:54:0d:ad:28:f1:78:dc:
65:8d:50:09:db:8d:e6:d8:ce:90:c0:85:4d:ac:04:
ef:36:cd:63:d4:af:a8:dd:bb:72:b9:34:53:bd:3e:
61:5c:d5:6d:22:db:c9:e7:86:c4:e6:70:01:17:68:
5f:ad:d4:e8:17:94:59:66:39:b3:0a:10:fc:2f:85:
ca:d4:95:55:33:c0:98:b1:84:66:be:0a:ee:b8:a1:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:40:F2:BF:4F:F2:97:0C:09:8A:8F:F3:ED:2F:37:C0:BB:5A:D0:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02A0B674DB5B11EFA64D815C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.125.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ed:41:a6:33:60:d7:db:14:56:6f:0d:95:71:8b:c7:98:b3:
6b:b2:d7:e7:0e:1b:78:48:38:d7:ad:d4:9b:86:35:18:b0:04:
7a:32:67:d2:92:d5:b1:4f:0d:0c:4d:f8:8f:62:55:87:86:33:
5a:fe:9d:44:99:83:61:f4:76:73:41:3e:75:fe:3e:d8:a9:f9:
86:9b:b4:af:0c:9e:f4:ed:fc:ee:b6:69:3c:95:2e:b4:f4:d4:
be:b7:82:65:f9:fb:bd:c0:10:34:90:2a:50:d0:44:40:8f:91:
3d:0d:64:40:8b:0b:97:ff:aa:ea:1d:a3:60:ba:48:c5:42:6f:
72:35:30:e7:62:99:9c:fe:64:9a:6d:07:17:70:81:b1:b7:28:
5a:08:a0:4d:62:ec:e6:07:f9:8d:0c:49:dc:7e:01:04:6b:c9:
8d:c5:77:47:36:c3:42:9e:46:38:52:d8:c8:77:67:41:a0:e2:
75:4b:fe:ba:d1:f1:46:8a:1b:19:05:27:fb:46:71:5a:15:ac:
d6:0f:b7:df:cd:9e:d8:8a:23:d3:e1:d7:6b:78:50:c5:5e:7b:
ba:b2:90:f4:9d:f2:90:57:c2:ac:96:23:ab:30:f7:e5:fb:16:
36:66:b4:07:b3:47:b5:3e:4c:29:9a:59:94:53:53:39:01:53:
a5:76:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:51:24 2025 by rpki-client