Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C54280CD71F11EF909DF897762E951A.roa
File: 1C54280CD71F11EF909DF897762E951A.roa (raw, json)
Hash identifier: VkzDId1FojXcgECjGoq6wM1V4t+hDHUZyQYcpexc3OU=
Subject key identifier: 5A:5D:D1:48:57:A3:1D:B2:0C:C9:18:56:E4:5E:95:C4:B7:77:F9:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C2F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C54280CD71F11EF909DF897762E951A.roa
Signing time: Mon 20 Jan 2025 11:10:09 +0000
ROA not before: Mon 20 Jan 2025 11:10:05 +0000
ROA not after: Sat 01 Feb 2025 11:10:05 +0000
asID: 44559
IP address blocks: 45.199.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68655 (0x10c2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 11:10:05 2025 GMT
Not After : Feb 1 11:10:05 2025 GMT
Subject: CN=678e2f11-dd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dc:22:ad:b5:22:32:28:67:1e:2e:72:a8:7e:
3e:54:89:b4:66:45:4f:50:c4:09:3d:b9:0b:93:63:
4c:c1:94:e3:a0:42:3c:26:d2:62:48:d3:79:5a:df:
ca:85:2d:c4:45:8b:70:b5:66:8b:57:14:bd:dc:1d:
51:94:e5:f9:71:73:11:22:7d:b7:9a:f9:c1:50:dc:
8c:b5:c8:ef:bc:9a:04:2c:66:19:f5:fe:68:38:be:
ed:54:bf:3f:46:79:93:8f:a9:15:4e:45:98:5e:03:
68:21:ec:e1:51:43:c6:b9:e7:71:58:62:2e:ba:85:
63:7b:cc:ed:3e:ee:dd:9f:a6:ad:e2:4a:82:10:27:
c9:17:47:44:1e:7a:8c:b9:06:ba:89:d3:f8:ab:d1:
cf:77:80:ea:3e:19:b9:3a:3e:13:c1:97:97:d9:53:
35:0c:7c:77:d4:09:37:30:92:ab:08:08:f2:3d:92:
24:e0:08:b5:bd:16:e9:f6:43:44:8f:c2:f1:6f:53:
fa:66:16:b7:4f:10:35:4f:b1:ab:e9:74:c8:a1:e3:
7b:00:ce:fe:e0:bc:84:07:7f:02:cf:dc:1a:12:48:
b3:90:56:d9:51:52:d6:41:a7:62:a9:0c:63:45:4a:
3e:83:a5:38:e2:30:68:fb:73:a6:63:b2:96:27:ef:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5D:D1:48:57:A3:1D:B2:0C:C9:18:56:E4:5E:95:C4:B7:77:F9:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C54280CD71F11EF909DF897762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.236.0/24
Signature Algorithm: sha256WithRSAEncryption
29:87:58:84:8e:e0:5c:37:91:01:fb:24:4c:50:aa:f8:39:88:
95:04:d1:d0:a7:4e:02:19:b8:60:92:ea:de:0b:f0:19:d3:36:
aa:d8:3f:43:db:8c:e8:30:0b:e8:49:7f:2f:31:82:06:c7:56:
5b:ab:fa:01:e9:57:f1:41:d2:7f:d1:dc:57:3d:f9:c3:27:6d:
77:90:a5:85:f1:5d:64:44:e8:cb:ce:09:58:7e:f1:c2:e4:6a:
4e:bd:cc:f2:4d:89:5f:fc:dc:4c:a8:65:78:cd:a3:6a:a6:28:
6c:56:8b:21:06:7b:c3:a2:d6:fe:f5:ef:33:57:68:3e:86:b8:
86:1e:43:c1:63:62:a6:14:59:9d:60:d3:51:25:97:f4:5e:22:
91:26:f5:7d:cd:f4:56:fa:10:55:16:77:2c:0d:d7:3f:9b:bb:
b0:65:9e:3a:c7:df:15:4b:1a:b0:30:03:c9:0b:a1:62:a6:4f:
e7:41:94:94:35:09:19:a7:fb:6b:97:3e:79:7f:32:3f:ea:da:
f2:b1:2a:93:44:20:24:c5:1b:2b:15:40:be:42:52:7f:8e:94:
21:a4:01:83:76:40:8c:c6:dc:49:e7:d8:f8:d6:4b:20:9b:dc:
f4:57:11:62:bb:06:db:2c:05:cd:1c:87:0b:f5:f9:09:92:a3:
55:90:79:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:32 2025 by rpki-client