Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A234092DB0A11EFBDCE0F41762E951A.roa
File: 1A234092DB0A11EFBDCE0F41762E951A.roa (raw, json)
Hash identifier: VM5JqsKC9tFLiSnTj284bTg/Rdhg/GSSRuHM2btnYZ8=
Subject key identifier: 3C:B0:A4:68:39:07:C2:82:E0:2A:1C:02:A8:3C:AB:E9:CD:4F:57:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A234092DB0A11EFBDCE0F41762E951A.roa
Signing time: Sat 25 Jan 2025 10:49:51 +0000
ROA not before: Sat 25 Jan 2025 10:49:47 +0000
ROA not after: Sun 23 Feb 2025 10:49:47 +0000
asID: 44559
IP address blocks: 45.199.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70139 (0x111fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 10:49:47 2025 GMT
Not After : Feb 23 10:49:47 2025 GMT
Subject: CN=6794c1cf-7c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:2f:b7:d1:df:49:a0:1a:ec:7f:09:27:78:
9e:9a:28:e6:d7:2d:af:b8:48:43:e7:0a:e2:2b:9d:
4a:1c:05:f3:b2:53:4b:f1:e2:6a:7e:c1:45:bb:06:
a4:9e:c6:a9:1f:57:e0:e8:dd:30:54:4d:df:82:1f:
19:50:9c:c9:31:a0:27:0a:34:f1:6e:ac:13:12:8c:
ba:d1:10:2a:24:ef:2b:0e:a5:2f:af:0d:c9:b2:b4:
d3:0c:86:dd:c4:cc:f9:45:a2:19:8c:b6:c4:56:04:
55:96:6f:2d:25:b5:b7:21:81:3a:55:4e:3a:9b:b7:
94:76:76:4d:84:74:ca:e1:42:e1:1e:98:05:78:2a:
28:62:da:97:18:6d:86:9a:76:a5:73:ed:a0:ff:05:
50:bb:29:80:de:f6:87:06:89:b1:97:03:3e:7f:34:
1a:74:7d:57:93:c7:3a:be:33:f2:f0:37:2a:15:fa:
e0:5f:99:07:39:51:2b:dd:59:35:ed:c5:b1:01:f1:
7a:2f:57:1d:45:5c:e8:c2:0b:a4:f9:1a:13:8d:76:
29:98:0c:16:55:4b:e8:be:5b:28:64:7c:98:e1:23:
99:0b:18:9a:c6:d5:b2:45:46:35:95:7a:09:ce:c8:
96:7e:fa:a5:f3:06:56:3c:e7:4f:d6:87:1f:1a:ae:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:A4:68:39:07:C2:82:E0:2A:1C:02:A8:3C:AB:E9:CD:4F:57:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A234092DB0A11EFBDCE0F41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.233.0/24
Signature Algorithm: sha256WithRSAEncryption
37:15:af:a8:05:4a:d3:c0:19:ba:d5:09:35:af:35:a9:68:64:
04:56:7a:79:fd:8c:80:3e:85:5f:83:6e:13:5a:9e:65:64:c4:
5c:dc:44:bd:87:0f:12:04:b7:23:d5:dd:3e:8e:7f:22:c6:e6:
92:ff:e8:3b:2a:c5:d3:b3:ea:3e:a1:a8:ae:df:7a:45:17:24:
8d:56:c1:41:8d:36:8f:71:45:e2:2e:9a:f0:14:84:f7:4c:e6:
dc:8e:65:9c:c2:0b:1f:ea:93:4a:c1:a8:a8:c2:7b:34:de:cc:
91:4e:b1:2c:7d:e1:be:df:ad:ca:a1:d3:e9:68:7c:9a:ab:bc:
28:df:dd:07:53:ca:61:8c:fb:e3:1b:9e:d1:07:e8:7d:c4:eb:
c1:03:df:5e:cb:77:84:8a:71:2a:d0:6c:ec:5b:d1:14:61:bf:
ce:14:19:9b:7f:5f:2f:85:92:23:07:f1:d3:db:dc:5a:0c:53:
73:85:e5:a0:81:84:ca:3a:b0:83:f6:57:94:96:d0:a5:b7:4b:
91:1d:94:c8:c6:af:26:51:3a:06:30:a9:c4:77:45:8e:19:91:
eb:c3:b6:15:04:3c:7a:e8:d4:ef:f3:a8:d3:78:8c:40:28:ab:
ad:e3:01:3d:df:2e:be:34:65:72:3e:43:6a:82:83:cc:f3:96:
23:02:8a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:27:13 2025 by rpki-client