Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37D181AADA9011EF8EB9CE83762E951A.roa
File: 37D181AADA9011EF8EB9CE83762E951A.roa (raw, json)
Hash identifier: iZ8BQhyM5UseG5RunrqFS6iZldSDjH0JjF1yXe0+9vg=
Subject key identifier: 71:52:3D:34:24:75:61:ED:4A:62:44:02:36:3F:60:8B:CB:8A:B2:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011072
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37D181AADA9011EF8EB9CE83762E951A.roa
Signing time: Fri 24 Jan 2025 20:17:22 +0000
ROA not before: Fri 24 Jan 2025 20:17:18 +0000
ROA not after: Tue 25 Feb 2025 20:17:18 +0000
asID: 202656
IP address blocks: 45.200.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69746 (0x11072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:17:18 2025 GMT
Not After : Feb 25 20:17:18 2025 GMT
Subject: CN=6793f552-b4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:8c:16:0b:f7:dc:c5:8a:7c:dc:ea:30:08:
c2:18:ed:75:c0:b8:87:03:08:ca:d2:fb:2d:7e:5b:
6e:d3:7e:d3:d9:5a:17:7a:e8:b9:91:28:fa:8b:8c:
f8:bc:05:52:4d:be:15:00:2e:c9:c3:81:23:55:ab:
51:36:81:45:1e:f9:24:ea:99:e2:de:9c:3c:10:75:
3c:0d:c5:bc:27:26:e6:c8:07:de:80:9f:d6:8c:8d:
e3:51:36:8e:70:d4:62:f9:f3:8c:90:ca:ca:52:99:
d3:76:a2:d9:89:bb:93:f5:58:ef:c2:95:74:53:e7:
c2:ef:78:c0:ea:f1:ec:f4:d5:4f:29:44:9e:4a:93:
8e:c2:ed:94:c0:36:31:3d:b3:b8:bb:63:20:34:db:
ff:0c:38:8c:be:85:20:3c:ca:a0:7c:11:97:01:56:
a7:1f:e5:14:0f:56:c3:f8:ea:9a:4d:0d:d4:ca:b0:
41:8e:13:9a:c5:f2:8f:c4:44:1f:db:7d:ee:22:8c:
63:ba:6a:a9:e7:eb:e5:9c:eb:82:3b:07:b7:3e:20:
83:d9:57:6e:df:c0:87:ea:f6:30:bd:36:89:c3:e9:
c7:9b:6b:d1:8e:78:cd:a1:3e:07:3e:84:7d:1c:d1:
32:60:60:5f:6a:48:78:8c:63:1c:36:a3:9f:ee:60:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:52:3D:34:24:75:61:ED:4A:62:44:02:36:3F:60:8B:CB:8A:B2:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37D181AADA9011EF8EB9CE83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.171.0/24
Signature Algorithm: sha256WithRSAEncryption
68:37:57:15:fc:c3:56:a0:08:58:72:d3:7a:08:65:63:ca:8e:
25:f0:76:5d:4b:dd:30:a9:e6:2e:58:2e:2b:16:0c:a6:14:6b:
51:f0:50:48:97:39:f1:3f:b0:b0:07:84:76:50:a1:bf:ab:0f:
4f:e3:e9:dd:6a:c5:cc:b8:7e:d4:c9:ad:f7:d1:81:bb:ba:ee:
d7:22:29:51:63:62:3c:1f:76:a1:08:69:0a:fe:e5:68:b0:54:
13:02:7f:61:ba:36:3e:79:da:c9:b4:6f:8f:df:9e:55:7f:1a:
0c:fb:40:e3:66:9f:53:19:95:ee:98:66:23:e7:e9:35:1b:9d:
61:2e:ed:a1:8e:0d:3b:4a:53:6d:58:98:52:36:83:2e:01:16:
71:d2:0f:22:08:2f:31:63:cf:f2:9d:d9:1f:2e:59:f5:23:df:
79:be:0f:31:ce:b5:27:07:77:42:1b:48:8a:98:17:c3:77:83:
9a:6d:c4:93:1c:20:56:36:30:06:99:11:3c:51:a7:73:37:9d:
0b:50:4e:e0:50:21:df:21:1b:86:0a:41:88:97:6a:5d:80:2e:
cb:cc:ba:67:e7:07:41:af:c4:0e:0c:de:b3:d6:df:92:59:51:
67:cd:fb:68:f9:55:3c:46:eb:82:01:2b:7a:ec:35:09:9f:cc:
50:6e:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:44 2025 by rpki-client