Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/461ACB00DA8F11EF8EEFAA7B762E951A.roa
File: 461ACB00DA8F11EF8EEFAA7B762E951A.roa (raw, json)
Hash identifier: qE+QfpCQ0rnxjpiU4OEBkjPbdnZzdla6+9eYGN8Q1Jw=
Subject key identifier: 57:94:7C:86:4A:E4:DE:7F:34:77:F3:C5:A8:E3:53:12:C7:5D:B4:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01106C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/461ACB00DA8F11EF8EEFAA7B762E951A.roa
Signing time: Fri 24 Jan 2025 20:10:36 +0000
ROA not before: Fri 24 Jan 2025 20:10:33 +0000
ROA not after: Tue 25 Feb 2025 20:10:33 +0000
asID: 202656
IP address blocks: 45.200.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69740 (0x1106c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:10:33 2025 GMT
Not After : Feb 25 20:10:33 2025 GMT
Subject: CN=6793f3bc-0785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:9a:30:95:4c:a4:2f:e0:b8:fd:93:1f:e7:
19:52:eb:59:d2:f2:65:9c:d2:ad:7a:37:3b:5a:6e:
d0:73:9a:b4:cf:07:23:ab:53:3b:38:36:5c:d8:55:
51:14:62:4a:ec:89:cb:9b:1c:7a:31:4f:4f:fc:2e:
98:7f:c5:eb:54:7d:93:2a:8c:52:bc:4a:69:8d:fc:
10:4c:2e:7b:b7:bd:b3:be:ee:c5:66:c4:1f:f0:c0:
15:e3:de:b9:43:c9:0d:32:6a:c2:23:0f:dc:79:18:
c5:bd:19:da:30:6f:f4:dd:de:66:19:bb:a3:ff:fd:
21:d9:04:55:59:6f:2d:72:85:5d:86:8c:05:e8:26:
fa:79:0b:74:8c:c7:5e:dd:89:d6:8c:68:59:13:e1:
7b:0f:d8:4e:eb:dd:a7:04:28:45:dd:f6:93:0d:e6:
45:6c:23:e6:07:a6:00:f7:70:e1:87:f3:95:d6:ba:
05:23:0a:4b:2c:4d:a5:74:ea:0e:20:01:f2:74:7a:
b2:bd:f7:5f:10:3b:4e:f9:52:e7:4c:97:35:c2:ed:
0b:b8:9a:33:2a:fd:e5:4c:b5:c1:01:5a:a5:de:48:
f5:b3:59:70:06:29:cf:0f:b4:10:7c:e1:ee:f7:3d:
b3:2f:b1:00:a1:38:68:29:bc:89:bc:b8:c4:c0:8f:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:7C:86:4A:E4:DE:7F:34:77:F3:C5:A8:E3:53:12:C7:5D:B4:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/461ACB00DA8F11EF8EEFAA7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.166.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0c:30:a5:65:0b:2a:e9:88:c2:c0:ca:4a:31:e6:6c:56:4d:
dc:e9:1d:0d:9f:57:f4:7b:1e:c1:62:23:a5:51:5a:3d:9d:3c:
cd:d4:52:79:7a:9c:0d:fe:e8:03:a3:f4:1e:62:5f:3b:e4:42:
4a:4f:c5:d6:b3:b4:73:10:a0:59:59:79:94:27:4f:5f:6a:f3:
fe:c9:40:7d:d3:b7:66:cf:68:81:93:6f:d5:a8:3f:8b:18:ad:
b2:93:40:58:57:51:ac:4b:99:15:ce:5a:6f:4e:f8:e4:42:be:
b1:52:d5:e6:01:5a:ef:ad:ef:da:9c:8d:e4:70:31:d3:32:7b:
1e:93:4e:5f:a9:ee:9d:cd:4b:a4:c5:1f:0a:b3:e7:5b:21:01:
fb:53:9c:7f:29:a1:c7:7a:9f:6c:e4:1c:dd:57:98:d5:48:67:
1f:84:ee:82:cc:19:52:28:8b:8d:87:6c:2c:9b:89:63:44:61:
0c:1e:30:5f:ff:93:03:1e:15:1a:b0:f1:80:b1:2d:ed:09:71:
d7:52:16:83:68:19:af:a4:f9:1f:b6:4f:84:53:4f:76:60:c1:
29:36:5b:7b:78:8b:31:0b:60:73:6f:0f:f9:f5:33:5c:ac:b6:
fb:14:e6:89:f3:d9:00:10:73:16:df:4a:f7:ec:ac:7b:45:89:
61:c8:51:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:48 2025 by rpki-client