Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CCF33E4D58311EFBDBDC692762E951A.roa
File: 3CCF33E4D58311EFBDBDC692762E951A.roa (raw, json)
Hash identifier: /Ne6QaGOE8GizFfdMJP9/2hYIk7HWoAt+x1MA/A6JxM=
Subject key identifier: 75:E8:4D:85:01:8F:D7:B1:67:77:B1:16:D1:5F:E0:46:50:AA:34:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CCF33E4D58311EFBDBDC692762E951A.roa
Signing time: Sat 18 Jan 2025 10:01:51 +0000
ROA not before: Sat 18 Jan 2025 10:01:47 +0000
ROA not after: Sun 23 Feb 2025 10:01:47 +0000
asID: 7018
IP address blocks: 45.202.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68457 (0x10b69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 10:01:47 2025 GMT
Not After : Feb 23 10:01:47 2025 GMT
Subject: CN=678b7c0f-cfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:49:14:d2:d4:91:d9:51:50:51:8f:fc:ba:
ac:3d:03:89:af:92:f1:71:04:cd:5c:4a:a3:be:6b:
12:90:a1:a0:0f:cb:99:35:e7:5e:49:d6:71:51:2d:
d1:d2:f3:98:46:fa:ff:e5:6e:c1:18:f3:1e:af:d6:
26:74:85:07:65:9d:d3:c8:ac:83:95:99:14:e4:07:
45:6a:9d:5d:45:4f:17:c2:42:a1:98:9f:b3:6c:f1:
a6:7d:2a:81:5f:fc:d3:78:ba:34:f3:fb:f5:56:fa:
2c:d0:82:11:ed:f2:de:cb:c9:0c:5f:6e:1c:24:1c:
14:06:b8:6b:72:6b:b8:ac:6b:35:34:c5:ea:f0:d0:
8c:d4:ec:75:42:ac:ec:4d:ae:ea:6e:09:67:1a:9f:
d1:eb:8f:a7:6e:92:0e:bc:6c:74:46:df:8e:f4:f4:
7b:9e:8d:6c:8c:21:7e:1a:a3:3b:2a:e1:62:89:11:
3b:25:33:f1:ab:68:6a:6d:67:7d:fb:75:f7:a0:1c:
b5:cd:ac:0b:33:b4:29:d4:26:b1:7d:62:14:6d:86:
d8:21:a3:38:9f:0b:c1:14:0f:17:62:90:a7:61:30:
27:93:50:1f:b5:ab:fe:84:93:95:6e:0d:52:60:b4:
ca:02:af:10:5b:1b:3a:a4:00:c2:c1:6d:d9:2c:22:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E8:4D:85:01:8F:D7:B1:67:77:B1:16:D1:5F:E0:46:50:AA:34:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CCF33E4D58311EFBDBDC692762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7b:dd:f0:9b:f0:75:2f:51:47:bd:a6:a5:54:3f:3b:78:00:
db:19:9f:e8:ac:4f:a9:21:00:b9:9b:b4:43:00:4b:b9:26:fd:
69:1a:f9:7e:e8:bc:6e:9a:09:fe:92:02:15:ef:0b:3d:6f:05:
a9:3a:8f:0f:0a:3f:6f:8e:02:9e:90:8a:b7:82:3d:03:f7:e6:
b2:e3:ce:f4:8c:86:81:0d:30:43:95:e6:7a:7d:dd:14:dc:d1:
98:fa:46:78:f2:f0:59:33:33:ce:ff:77:7e:67:55:c0:e9:1b:
6a:0f:dd:b5:fd:f3:b0:e8:62:a3:15:63:cb:ca:c6:ee:d6:3b:
46:0b:f5:7e:59:45:71:f4:0e:29:61:c2:0c:ea:e3:46:71:e4:
dd:5c:2b:df:67:ee:23:5f:46:b9:70:2a:a6:02:b1:92:61:27:
04:82:3a:e6:ed:d2:cc:a9:3e:46:6e:8d:16:4a:17:5f:e3:3c:
a8:9b:fa:d6:0f:0a:8a:40:34:80:71:05:d2:f7:4b:0c:54:33:
d7:9b:c2:f2:ed:46:93:cf:5a:98:24:9c:d3:7e:cd:c6:25:96:
06:93:3f:97:70:74:52:7f:fe:17:68:0a:3c:a0:4a:fc:5d:7b:
f4:70:3f:9e:1c:44:c6:c6:5d:56:bf:16:d0:62:c7:e0:ef:bd:
c5:03:d8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:34:37 2025 by rpki-client