Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A1CAB62BDB011EFB122C484762E951A.roa
File: 3A1CAB62BDB011EFB122C484762E951A.roa (raw, json)
Hash identifier: 7VgEVQYB5qVFmIw4C8FDqYecHXdoOIN+uDLiOf+sjqU=
Subject key identifier: 33:31:E4:C3:D6:68:78:81:AC:2F:2A:E6:7C:5C:81:97:F8:7F:13:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A1CAB62BDB011EFB122C484762E951A.roa
Signing time: Thu 19 Dec 2024 02:23:26 +0000
ROA not before: Thu 19 Dec 2024 02:23:22 +0000
ROA not after: Wed 10 Dec 2025 02:23:22 +0000
asID: 984
IP address blocks: 45.198.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58533 (0xe4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 19 02:23:22 2024 GMT
Not After : Dec 10 02:23:22 2025 GMT
Subject: CN=6763839e-fea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:10:72:54:77:a1:94:de:fd:d9:ba:0e:07:
0c:76:4a:3f:43:9f:1d:dd:d8:52:dd:bb:8f:99:48:
2c:ea:7a:48:23:11:41:63:3c:3e:16:76:9c:8c:3c:
16:9e:45:5b:0b:51:9f:2c:73:9c:ec:9a:fa:65:60:
38:cd:ff:3f:93:07:f0:f8:13:7e:6d:3b:94:94:d0:
96:00:58:92:55:dc:bd:e8:7a:74:16:d1:85:14:7e:
05:d3:fc:63:6d:da:37:32:b6:bf:ea:e4:14:9a:40:
ef:b7:b2:3d:9e:2c:04:55:b3:8e:de:0c:56:74:5d:
10:61:70:05:4d:09:6b:70:7c:b0:ea:6b:98:b4:83:
23:0d:c2:dd:8b:b7:1b:be:14:72:b0:9a:a0:cb:41:
e7:f6:21:4f:98:c5:24:ed:b5:20:74:13:04:6b:53:
46:f7:a7:0f:dc:b7:1a:84:2f:91:ab:73:a7:ae:f6:
98:86:93:36:2b:05:91:e3:be:79:24:52:0f:01:f1:
a2:21:78:22:c8:55:1a:52:28:46:17:94:ee:00:c8:
10:19:a0:2a:45:9a:f2:04:cd:1e:d0:30:c9:40:8a:
cb:b8:aa:2b:77:0e:e3:66:07:74:3e:c8:0a:c3:48:
b1:eb:66:5d:50:5d:49:77:0c:5d:22:9c:87:f7:f7:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:31:E4:C3:D6:68:78:81:AC:2F:2A:E6:7C:5C:81:97:F8:7F:13:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A1CAB62BDB011EFB122C484762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.234.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0d:70:5f:a9:50:c6:f7:51:cb:08:12:13:b3:74:e0:05:c0:
1a:db:01:b6:9d:4d:a8:d3:98:ce:72:42:ba:2d:ae:e4:ed:f6:
3c:81:ae:2a:f7:c6:1c:9a:bd:df:c1:6d:07:06:5b:57:1d:32:
c9:d3:65:ae:49:66:53:c8:35:cd:0c:fb:8b:c5:67:09:71:55:
65:3b:f7:d1:dc:57:b5:9e:f9:88:b3:95:a4:e2:a5:aa:56:ce:
30:c4:a8:e4:5e:71:b3:b3:76:16:e7:63:19:5c:53:2b:e5:2b:
1c:14:31:1f:f8:2f:f2:e2:5b:d4:fb:78:1b:15:6d:1a:4d:c3:
29:11:19:75:28:43:73:2b:aa:38:1e:f6:23:26:2c:5c:e9:41:
96:cb:ef:92:98:50:76:41:ce:d1:79:fb:84:7d:13:07:26:10:
bc:3f:a8:1a:e7:93:d7:b6:42:0f:04:30:00:1c:df:3d:0d:c4:
62:e5:c7:20:ee:e6:4f:b9:dd:01:df:5e:1d:7b:b9:57:71:5c:
e1:93:d7:cb:68:3a:77:d4:7d:0b:a9:f2:bb:78:50:6a:68:77:
d9:70:de:65:b3:6b:44:46:2b:78:d8:81:73:9d:c9:21:44:b9:
98:15:f5:15:98:1d:d1:20:d9:0b:33:42:99:f5:4c:13:5c:9b:
2d:02:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:51:04 2025 by rpki-client