Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DCD01E0D7C711EFB1A0AD69762E951A.roa
File: 3DCD01E0D7C711EFB1A0AD69762E951A.roa (raw, json)
Hash identifier: Uopsr5RzdA+0WcsHdihzpocuq4dpw2bChTa23x989Hs=
Subject key identifier: BF:E9:3B:E2:6C:AD:09:BA:B4:45:42:6B:6F:6D:DF:4C:CE:DE:F0:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CB8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DCD01E0D7C711EFB1A0AD69762E951A.roa
Signing time: Tue 21 Jan 2025 07:13:41 +0000
ROA not before: Tue 21 Jan 2025 07:13:37 +0000
ROA not after: Tue 25 Feb 2025 07:13:37 +0000
asID: 202656
IP address blocks: 45.199.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68792 (0x10cb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:13:37 2025 GMT
Not After : Feb 25 07:13:37 2025 GMT
Subject: CN=678f4925-d7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:44:95:a6:97:cb:b3:f8:0c:23:c2:69:83:
47:82:83:12:f9:82:57:cf:6b:9b:0c:47:05:95:93:
49:70:9c:1f:89:58:d5:b8:e1:7d:8e:5d:57:a4:a2:
33:48:bf:4f:9a:8f:ef:3f:1f:09:12:1f:3e:66:4d:
47:1c:35:a4:4d:a0:54:78:82:a8:99:2b:d3:ee:6c:
82:e5:34:fa:cc:ff:37:e4:44:49:d7:7d:95:fd:c3:
ac:ab:fd:0e:43:00:4f:3e:38:1b:67:b8:59:25:36:
c1:26:e6:af:66:fa:be:e4:58:f6:25:22:6b:fb:1f:
55:8d:6d:b1:9f:83:ef:1d:53:97:e1:4b:53:b9:48:
49:6b:6b:19:e3:2b:18:84:aa:92:f4:ac:fa:8e:4b:
6c:6e:05:0d:68:38:cb:7b:ed:a6:63:29:c7:89:f1:
f8:f3:2a:1e:1a:b0:67:f1:f6:1e:2b:42:69:ef:49:
60:07:62:75:ab:35:dc:56:10:0c:1f:40:bd:3c:78:
5a:91:9d:83:e7:f6:aa:ed:59:c0:6c:1a:8d:f0:ec:
72:44:36:0d:fb:42:2a:d6:b3:e6:18:14:83:4d:e0:
f1:26:7b:9e:1f:8f:3b:1d:a1:5f:29:c9:ae:34:a7:
a7:55:99:7f:d2:e5:1e:f8:3b:91:f2:41:1c:5a:b1:
9b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E9:3B:E2:6C:AD:09:BA:B4:45:42:6B:6F:6D:DF:4C:CE:DE:F0:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DCD01E0D7C711EFB1A0AD69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f7:b8:7c:62:45:84:70:db:8e:ac:de:67:e1:5f:8f:29:4c:
c5:99:5a:6a:88:f8:f5:d8:ea:69:4d:4c:3f:4e:a8:fd:5b:f4:
31:a7:d3:eb:32:d6:1f:3d:98:e9:b4:5b:2b:ab:08:24:48:ef:
47:1a:78:16:5c:ce:26:92:c9:2c:a9:24:fa:10:42:6d:0b:aa:
3d:91:5b:08:a8:1d:a3:c0:71:64:3c:47:dc:4f:ef:df:38:ad:
74:f6:a5:00:46:cf:c6:93:15:cd:6b:83:05:87:6b:c1:63:a4:
6b:8e:80:72:81:dd:75:6d:3a:23:dc:7f:d7:a0:b0:59:33:21:
4c:ce:e6:b7:68:02:03:5d:85:ad:4d:d1:88:d7:6d:84:c3:50:
06:9d:f3:d6:a4:52:fa:9f:d7:2c:1d:3e:f2:79:00:82:8b:ff:
fe:a9:8c:17:8e:4c:3f:92:d0:d7:22:b1:b0:25:36:32:ed:0c:
36:ec:f0:db:43:24:f4:23:95:ba:98:2d:56:a7:97:5e:f7:34:
3f:b6:5d:ad:bc:69:9c:0a:55:b1:6f:d9:9a:00:b7:66:f4:c2:
e1:ea:f6:62:02:17:ac:a5:28:79:db:5d:df:2e:1c:39:c5:e7:
2c:a0:03:a9:7b:bc:7e:51:f8:b6:27:15:1b:5e:0d:c2:76:53:
0b:f8:3c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:40 2025 by rpki-client