Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4630B2F8DB5C11EFB6B73865762E951A.roa
File: 4630B2F8DB5C11EFB6B73865762E951A.roa (raw, json)
Hash identifier: XmvcyWiLuVze3AIo/+HM0ufwU6GzuBqklHLMbPl1Or4=
Subject key identifier: D6:D9:B0:4B:4C:64:42:2F:36:7E:3E:06:E8:16:09:34:9C:7C:52:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011313
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4630B2F8DB5C11EFB6B73865762E951A.roa
Signing time: Sat 25 Jan 2025 20:38:03 +0000
ROA not before: Sat 25 Jan 2025 20:38:00 +0000
ROA not after: Sun 09 Mar 2025 20:38:00 +0000
asID: 138915
IP address blocks: 45.197.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70419 (0x11313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 20:38:00 2025 GMT
Not After : Mar 9 20:38:00 2025 GMT
Subject: CN=67954bab-6e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:ef:a2:8e:76:98:e4:b1:d8:6e:ff:fb:a9:
d3:8a:72:1b:46:84:8f:fd:f2:bb:05:d9:4c:94:64:
6b:01:18:76:f5:26:a7:8e:95:b5:3f:46:8f:55:a9:
d6:bf:9e:f1:42:26:53:cb:f0:72:8d:de:ca:08:6f:
af:d0:16:bf:fe:80:6c:0a:a4:e2:19:24:3e:e3:f8:
e5:b7:e1:b1:ec:b3:41:b8:d2:c7:b7:f1:b3:bd:c4:
55:0b:b8:44:7e:1d:94:2c:90:73:a5:7a:ce:d8:71:
d4:2c:02:44:da:1f:9f:27:71:c0:a6:ae:c5:80:d3:
b6:e8:d0:2a:6d:82:41:4d:c4:6d:3a:eb:c2:b2:dd:
61:25:f0:28:b3:9a:d4:57:6b:74:2d:ac:65:ab:96:
b7:14:3a:cb:bc:e7:c0:c3:43:07:07:7c:9a:b2:da:
74:19:5f:5d:6e:8d:06:d9:9c:c9:5e:98:e7:cd:d7:
04:98:f3:a1:57:82:a3:a2:b7:ec:21:3a:5e:24:d8:
ed:64:ed:4f:75:f6:f7:bb:17:57:a6:62:12:18:0f:
93:8f:3c:9e:07:e3:ae:f0:5c:75:c6:6c:9d:4c:a1:
9e:3b:95:4b:ba:6f:7e:71:ed:e0:29:81:b5:e9:e3:
66:44:4a:69:a4:a5:a1:42:0e:5b:43:9c:7c:61:ec:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D9:B0:4B:4C:64:42:2F:36:7E:3E:06:E8:16:09:34:9C:7C:52:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4630B2F8DB5C11EFB6B73865762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.107.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e0:e1:13:ea:22:02:d7:8c:19:39:7b:46:ba:7d:d4:c7:25:
57:7c:c6:0f:84:20:ee:43:a9:9d:d8:e4:04:12:4e:f8:4d:31:
67:18:38:eb:91:03:65:90:49:b9:a4:b6:77:e5:0d:f1:25:a6:
b0:1a:af:cd:7d:e4:77:d6:2b:ed:e1:c1:28:35:2d:d9:96:58:
89:28:98:0a:19:6c:c3:06:cd:7f:ab:1c:6f:3e:c7:f9:c2:e4:
12:cb:66:6d:00:0c:0a:b1:00:b0:0f:7d:f0:c6:78:fd:7a:1f:
f4:7f:80:55:dc:c9:f4:ea:57:35:6b:7b:02:17:36:1a:42:61:
76:af:32:8a:50:73:fb:db:67:5c:bd:52:6e:30:6e:73:0a:51:
87:46:52:f8:44:f0:d8:87:79:36:ed:34:da:e5:a6:42:08:8d:
d6:ec:55:98:1c:54:02:4a:a5:36:eb:b4:bb:41:8f:18:cd:25:
2e:9e:5d:49:5d:02:c2:fb:90:70:12:be:64:c7:fc:5e:2a:c8:
45:17:7f:1c:43:6d:bb:d0:c3:86:d2:27:53:11:4d:26:50:88:
1f:0b:81:fe:4e:a2:d5:f0:e9:9d:37:4e:0e:2b:38:33:7e:89:
81:85:4d:36:b2:0d:49:e5:42:b2:10:01:e0:2c:ba:99:ce:d7:
24:ff:3a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:12:40 2025 by rpki-client