Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7802FADEDB5211EFA79FE3A3762E951A.roa
File: 7802FADEDB5211EFA79FE3A3762E951A.roa (raw, json)
Hash identifier: sj7LiMiZwaX3waaAQBcv4442O5erMPC97JDGWhLpdcw=
Subject key identifier: 33:AE:C0:26:E2:CA:22:FF:A2:A3:55:BF:08:62:6F:CD:A1:B8:D0:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7802FADEDB5211EFA79FE3A3762E951A.roa
Signing time: Sat 25 Jan 2025 19:27:52 +0000
ROA not before: Sat 25 Jan 2025 19:27:47 +0000
ROA not after: Sun 09 Mar 2025 19:27:47 +0000
asID: 63139
IP address blocks: 45.197.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70365 (0x112dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 19:27:47 2025 GMT
Not After : Mar 9 19:27:47 2025 GMT
Subject: CN=67953b38-d903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6b:7c:b3:49:6a:20:16:3c:b2:f6:16:4a:cd:
fc:2b:f7:59:5b:b8:9a:74:59:e4:5d:50:16:0c:55:
20:01:3c:16:59:e3:17:91:96:bf:2d:ac:7f:3f:64:
76:6d:b1:f4:37:da:45:87:3c:4a:5e:c1:41:5e:34:
c1:f0:31:73:3e:cd:70:09:3c:32:e1:95:cc:f3:73:
81:3a:6f:00:2d:24:6e:2e:cf:76:10:bd:ea:76:b2:
b8:43:07:07:e0:8c:81:1b:c5:2e:ba:13:bd:74:66:
fa:c8:fc:25:fa:1f:75:22:db:ff:4b:97:3a:91:46:
80:21:08:94:5c:7f:79:a1:a0:19:e2:31:7f:73:38:
29:bc:da:fb:d4:df:92:29:ae:78:42:9c:8a:fc:d4:
ad:1f:be:5f:8f:7e:0a:1c:52:05:1e:ef:99:13:91:
9d:e3:eb:66:c5:3b:16:83:31:34:c6:53:1c:ce:38:
62:6b:0b:31:84:16:73:0a:72:96:57:72:37:9f:07:
74:8e:5d:ee:d8:02:5e:c6:1f:39:c6:1f:86:86:fb:
cd:5e:11:83:83:54:c1:37:9b:be:12:a3:c1:bc:7c:
25:83:68:dc:02:47:06:eb:a5:f3:9e:c7:7e:ce:49:
72:ab:a7:96:74:c9:2c:66:96:9f:af:32:cb:d5:f4:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AE:C0:26:E2:CA:22:FF:A2:A3:55:BF:08:62:6F:CD:A1:B8:D0:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7802FADEDB5211EFA79FE3A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.102.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5c:2f:64:ba:2a:e9:f4:d0:67:dd:d8:07:4d:74:a4:57:34:
d4:af:0f:17:17:94:35:e2:59:43:38:c9:24:b1:9d:20:69:fe:
d0:b5:fb:82:00:3f:c8:e3:e6:ff:bd:5a:cf:19:95:e7:f6:26:
11:35:41:d2:fb:c2:4c:71:20:40:bb:64:63:13:33:9f:3d:55:
02:68:7b:e6:00:ff:d6:39:85:28:ee:25:5a:05:b1:9a:6b:8d:
af:f5:f1:28:54:8d:2c:90:11:be:28:19:cb:f1:7a:df:06:af:
6f:78:5b:22:be:48:7f:44:60:fe:85:4b:f8:e5:c7:b3:ce:d3:
60:5f:bf:51:0b:06:a9:44:74:fc:c8:28:07:db:72:23:3e:9a:
d0:03:6e:1c:6f:9e:f5:be:76:d5:f2:1c:52:af:1e:7e:74:34:
41:c2:da:db:d1:51:39:69:53:1e:a3:1b:54:7f:b1:21:d7:e0:
fa:f1:8f:55:24:74:27:3a:bd:9b:e3:ee:ea:b2:dd:20:d2:2f:
2e:b2:b3:49:b3:2f:af:fb:f2:3b:3f:3f:e7:72:ce:af:18:64:
99:40:77:d5:1f:48:8d:e9:03:57:40:45:83:81:f9:7b:d3:a5:
7d:c7:19:35:6c:2f:13:2d:a2:d7:7a:7e:5b:43:20:0e:1a:d7:
75:81:13:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:38:12 2025 by rpki-client