Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A9663B6C3B511EFABAA2095762E951A.roa
File: 3A9663B6C3B511EFABAA2095762E951A.roa (raw, json)
Hash identifier: SFx4gUV4b9gRqrtVmD0UFgIe/KJCNelw84Qs0sbmRas=
Subject key identifier: 17:79:61:8E:C0:D9:E6:14:92:5B:30:86:C4:D8:02:89:35:4F:CD:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A9663B6C3B511EFABAA2095762E951A.roa
Signing time: Thu 26 Dec 2024 18:14:21 +0000
ROA not before: Thu 26 Dec 2024 18:14:17 +0000
ROA not after: Sun 12 Dec 2027 18:14:17 +0000
asID: 17561
IP address blocks: 45.207.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61037 (0xee6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 18:14:17 2024 GMT
Not After : Dec 12 18:14:17 2027 GMT
Subject: CN=676d9cfd-327c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:7d:7e:ef:69:85:c2:64:9a:4d:3c:fb:08:
35:6f:76:34:24:51:31:e1:14:29:dd:d8:1f:59:77:
f6:c2:c3:f0:5e:56:12:47:82:06:24:7b:fc:a5:57:
a8:22:2c:ca:26:d6:fe:37:f3:59:3d:e8:6f:0e:b6:
54:75:3f:35:a5:54:6f:0b:8a:a9:60:cf:8e:69:9d:
0a:1d:b6:72:1f:4d:f2:6f:cb:f5:21:45:ce:a5:16:
9f:1c:e6:1c:2d:89:23:d9:8a:99:22:47:dc:b9:72:
78:74:91:01:08:98:7c:0a:b3:72:56:9d:07:c6:fe:
b8:f7:14:ab:7e:03:d6:af:18:d3:a4:70:2d:b2:a0:
55:e8:73:ab:45:b4:bd:df:6b:be:9a:f2:39:7e:e8:
36:65:e5:c0:56:3b:fa:fb:8f:ba:da:42:9f:64:56:
68:88:91:c3:64:e7:21:cc:f7:57:21:15:eb:b9:be:
95:18:58:66:e0:d3:8e:39:fa:36:12:6e:9c:22:77:
31:06:61:53:32:0a:80:32:91:27:e9:bd:27:f6:1b:
e7:28:7a:c9:bc:cf:72:0c:99:ab:08:bf:ec:31:bb:
be:02:27:69:ea:2f:7d:b8:21:1c:5d:e3:4d:b3:6d:
7a:4a:3f:5c:58:b4:27:bc:a6:2c:a5:7b:16:9c:3e:
5c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:61:8E:C0:D9:E6:14:92:5B:30:86:C4:D8:02:89:35:4F:CD:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A9663B6C3B511EFABAA2095762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.2.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5a:8a:21:ea:f1:50:9b:1a:58:34:5a:b1:00:b6:9d:a5:54:
69:45:cb:b2:69:62:9a:d4:d7:f0:3c:d5:42:ec:1e:9f:83:d1:
bb:ab:39:99:61:24:17:60:cf:5c:8c:00:c9:a4:c1:cd:d8:a6:
e3:c6:06:16:62:c2:08:af:35:8f:3a:5c:56:70:f2:e1:86:0d:
65:09:1d:15:ec:ab:4c:d2:e5:2f:8f:06:17:eb:be:65:cd:5b:
39:43:cf:bf:03:51:74:e1:2b:b1:17:37:19:ae:49:c0:ee:b0:
b9:77:17:ef:16:f5:98:21:c8:d0:3c:92:77:22:e3:c7:63:61:
f3:13:5c:09:45:49:2c:41:a9:09:ca:d7:3f:59:54:09:f4:b7:
a9:c2:a1:25:ee:1a:58:64:d2:fb:17:b2:a0:97:b8:98:a9:33:
65:52:9e:05:37:db:84:ac:e2:f9:22:82:5a:a0:d1:6b:2c:c0:
d1:96:51:bf:cf:45:2e:d0:dd:2e:f5:70:73:b8:2e:d3:0e:78:
0b:f4:12:fd:5a:75:37:ab:4a:79:a0:78:ae:01:17:23:ac:2d:
4a:19:bf:3b:5a:74:47:88:59:c9:3b:c1:d3:9e:d2:3e:ac:87:
a0:f8:26:fe:24:42:ca:5a:a0:25:0a:22:f7:a8:8e:4f:d5:fb:
50:6b:21:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:34 2025 by rpki-client