Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B30867CDB4511EF8413584B762E951A.roa
File: 0B30867CDB4511EF8413584B762E951A.roa (raw, json)
Hash identifier: /nK4FUM8Eg2xkNqFCGg3YAQOIru8vFRBGlLWfiqHqnk=
Subject key identifier: 11:3E:CE:39:52:1F:E4:3E:58:0F:F1:3F:12:7F:7B:CB:CE:BF:6E:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B30867CDB4511EF8413584B762E951A.roa
Signing time: Sat 25 Jan 2025 17:51:46 +0000
ROA not before: Sat 25 Jan 2025 17:51:42 +0000
ROA not after: Sun 09 Mar 2025 17:51:42 +0000
asID: 63139
IP address blocks: 45.197.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70329 (0x112b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 17:51:42 2025 GMT
Not After : Mar 9 17:51:42 2025 GMT
Subject: CN=679524b2-9819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:ff:58:1a:2f:b4:5a:a5:b3:56:28:43:96:
a5:ad:31:10:b5:fc:98:9b:bc:82:c8:f2:c0:aa:5f:
eb:7a:17:31:ef:b0:2c:02:1a:d5:d1:4a:bd:3c:4e:
93:13:5a:2a:9a:a5:37:13:fc:9a:e9:a8:66:bf:86:
8c:fa:5e:d5:27:8a:88:b1:22:ce:97:04:cb:6e:68:
ff:d1:d2:01:11:61:74:15:37:50:7f:77:e5:96:46:
5a:05:0d:72:bf:5b:7f:d6:78:ef:b1:07:c4:40:b8:
01:f6:69:25:12:11:4c:21:4c:03:4c:cb:6d:fe:41:
de:f6:fc:e6:45:99:28:3a:07:3b:2f:49:44:0b:23:
e8:27:f8:29:d7:75:d8:86:6d:47:19:f6:27:16:fc:
27:76:22:f2:07:84:05:d6:8c:f4:94:a6:16:84:17:
9d:ed:eb:f7:78:55:bf:81:7b:89:19:b8:f0:bf:e8:
09:a9:46:0d:cc:7a:35:22:39:11:91:57:9b:43:2e:
e7:24:f1:64:25:16:68:ec:10:c4:ae:cd:6d:20:1e:
c0:c6:fe:08:2b:5e:2b:ee:47:0e:cd:e5:02:be:e1:
09:bd:72:58:38:58:65:f2:5f:58:41:be:91:c3:e4:
b0:b5:bd:f4:ad:cd:7b:bb:11:ac:15:03:45:7a:ab:
55:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3E:CE:39:52:1F:E4:3E:58:0F:F1:3F:12:7F:7B:CB:CE:BF:6E:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B30867CDB4511EF8413584B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.84.0/24
Signature Algorithm: sha256WithRSAEncryption
28:4f:59:3b:45:9a:65:07:eb:ce:da:d0:38:f4:5b:6b:e3:69:
ea:58:64:30:07:ac:a9:b1:f1:67:7d:63:48:da:2e:d6:1b:c3:
38:5f:66:8c:45:d3:70:99:49:11:d8:a4:5a:ea:e5:3c:24:a4:
cf:da:12:e4:26:ab:f1:28:6f:49:bd:f1:d7:3b:cc:a4:0e:44:
24:62:2a:c7:dc:e6:31:be:bb:30:0a:c1:e5:d8:61:e7:0c:cf:
cc:cf:d9:36:a1:13:21:23:1f:f7:11:e0:46:11:b7:71:05:8c:
bc:37:f4:1c:9c:92:6a:86:66:cc:c1:9b:41:8a:19:28:a5:2b:
8f:1b:70:fb:f3:b3:c0:72:6d:a2:77:cb:58:d5:be:c5:2e:c2:
d7:62:f9:88:74:f0:f8:f3:a5:3b:4d:fe:21:39:42:86:fb:67:
4a:e5:19:8d:07:8b:82:ea:a1:59:53:ef:cb:a1:f4:cb:4d:d2:
16:6a:2a:89:ad:80:ec:89:fb:14:38:f0:d2:c9:71:c4:9d:07:
3e:b8:3d:02:1d:55:81:f1:ee:49:14:ae:cb:98:44:bb:0b:72:
b2:d8:95:b2:03:e9:41:56:1c:67:67:85:27:5f:4f:5c:f6:6e:
4e:c0:e5:99:88:9b:cd:1f:15:e9:83:15:67:67:e1:5c:23:4e:
43:08:41:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:54:14 2025 by rpki-client