Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2439E6B6D72311EFB4F063B0762E951A.roa
File: 2439E6B6D72311EFB4F063B0762E951A.roa (raw, json)
Hash identifier: LoB8eFpB0omdMB+Mhu+2n8vLgSSR6SVN62+WH4DhXrQ=
Subject key identifier: 71:6D:07:2C:9B:DA:D8:51:92:D1:4A:20:22:E9:0A:2B:58:ED:59:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2439E6B6D72311EFB4F063B0762E951A.roa
Signing time: Mon 20 Jan 2025 11:39:00 +0000
ROA not before: Mon 20 Jan 2025 11:38:57 +0000
ROA not after: Sat 01 Feb 2025 11:38:57 +0000
asID: 202656
IP address blocks: 45.199.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68683 (0x10c4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 11:38:57 2025 GMT
Not After : Feb 1 11:38:57 2025 GMT
Subject: CN=678e35d4-13eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:9b:97:de:05:34:b0:06:00:6d:d3:87:26:
02:5a:56:59:33:e9:9e:b2:91:cf:40:ae:d6:97:8c:
1d:b2:b6:03:31:66:84:bd:37:5b:6a:50:c7:8d:5c:
d9:a7:4b:41:30:5b:80:91:93:f4:f0:fe:97:12:ff:
e2:df:fb:98:ed:f0:b3:44:27:64:64:d8:42:65:2b:
eb:ac:04:89:be:4a:06:c3:87:b4:a8:4e:2e:bf:2c:
c4:fa:d4:51:2e:35:67:2e:8f:3e:d0:eb:53:33:c8:
d9:20:b8:f4:4a:df:24:d6:27:4d:a3:6a:9c:3a:64:
9a:83:37:e1:5e:80:a9:c6:70:59:02:e0:02:81:c2:
f2:7f:a1:71:6a:ae:66:de:6b:7b:bb:43:8e:36:0a:
d4:88:7e:40:f6:ff:69:01:6e:1a:b7:ca:26:f9:59:
39:2a:2a:f8:02:16:57:91:1e:c7:50:31:94:c5:ea:
d3:82:26:07:16:c3:49:90:0c:11:fd:98:d8:05:53:
c1:4c:4a:52:ca:e8:fd:5d:82:8e:fb:07:f3:cc:6a:
1a:6d:24:f3:57:c1:b3:d4:b4:1d:12:97:e0:45:06:
f9:f7:d6:c1:ee:75:5e:7c:1e:a1:c8:cf:ef:a1:07:
1e:6f:88:16:f0:08:cd:d0:37:7b:43:a1:61:59:56:
17:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6D:07:2C:9B:DA:D8:51:92:D1:4A:20:22:E9:0A:2B:58:ED:59:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2439E6B6D72311EFB4F063B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.192.0/20
Signature Algorithm: sha256WithRSAEncryption
02:c7:6b:db:5f:a6:65:05:d8:16:88:02:71:b1:1a:ef:c7:10:
9d:22:fc:7c:48:6f:23:33:d1:10:e0:d2:04:4d:e1:d7:0a:37:
1f:c9:9e:b9:cc:01:81:55:ef:21:a3:54:f5:92:4f:a7:d7:52:
b7:ad:0d:0f:5c:25:55:24:d4:c5:6c:37:4b:85:76:6e:7f:08:
1e:03:08:77:bb:ff:89:1a:a2:4c:77:a3:3d:a5:b7:1c:92:c5:
50:e4:16:71:16:d7:5a:86:f8:2a:d5:d1:1a:3e:c2:15:f2:cc:
4d:97:5a:d3:96:9c:59:df:99:5c:3f:c6:d6:70:ba:78:14:b6:
0e:47:ac:63:64:cb:8e:38:28:72:93:72:ab:61:a5:f5:01:e2:
5c:63:51:12:c6:a9:ec:1e:e7:58:d7:73:25:8d:c5:4c:39:3c:
28:70:fb:1b:e0:11:10:29:70:a7:30:fe:63:21:d5:63:cd:ea:
51:39:5a:df:1d:f9:ea:17:8a:17:df:3f:bc:da:8b:5d:7b:87:
b2:7e:b6:c9:3d:2b:11:b0:ce:3a:ac:43:97:f6:79:36:25:31:
d7:60:a9:a5:b8:5f:cb:fb:8e:a0:a5:90:f6:0a:41:d5:62:4f:
c2:73:66:b1:80:95:1c:24:ac:06:42:ad:d2:2c:af:0c:39:37:
fe:8e:4c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:13 2025 by rpki-client