Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A3CACBCDB0911EFBFB3B0BB762E951A.roa
File: 7A3CACBCDB0911EFBFB3B0BB762E951A.roa (raw, json)
Hash identifier: xz09Gmx9l/84JJY4psQQLg+OXMcvZD1ozJX02HzeT3M=
Subject key identifier: 6C:03:A9:47:7F:83:5B:EC:43:2A:BC:3A:28:DC:C2:00:17:CC:E4:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A3CACBCDB0911EFBFB3B0BB762E951A.roa
Signing time: Sat 25 Jan 2025 10:45:22 +0000
ROA not before: Sat 25 Jan 2025 10:45:19 +0000
ROA not after: Sun 23 Feb 2025 10:45:19 +0000
asID: 44559
IP address blocks: 45.199.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70135 (0x111f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 10:45:19 2025 GMT
Not After : Feb 23 10:45:19 2025 GMT
Subject: CN=6794c0c2-bcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:2e:37:f3:6e:e5:28:a1:73:62:96:02:98:
05:25:06:5a:2d:17:7d:f1:d1:81:e3:af:ef:16:24:
3f:44:44:89:83:a3:7f:e3:e7:97:ae:4a:b0:19:06:
2c:4d:b8:df:c1:70:4d:b1:43:ff:84:25:67:e1:25:
a6:8b:87:30:51:45:ec:55:fd:13:56:34:8e:97:13:
c5:d4:d7:ba:0b:8c:e0:87:cf:a0:25:74:fe:e0:c2:
43:1a:f9:3a:02:c3:80:06:12:7a:df:45:4b:c7:99:
7e:d6:6a:7e:79:30:20:de:0b:56:a4:39:b7:0d:a6:
28:6a:19:dc:f8:8a:69:5b:ec:83:ee:01:39:2d:11:
84:8f:b9:89:6e:50:7c:ef:67:84:46:78:03:c2:09:
74:ac:56:7f:31:1e:c3:1c:0a:6c:13:f7:34:24:57:
8b:f5:e5:07:24:a6:00:fb:53:28:32:73:82:ad:e9:
c9:4d:1f:6e:39:f7:a1:e1:15:e0:5a:26:8a:28:50:
90:cd:d5:0d:2a:b5:4d:a7:ba:8f:22:6f:74:6d:aa:
ff:4e:04:92:7c:1d:73:4e:ac:38:49:88:75:af:97:
dc:07:3c:85:0a:2b:5d:7b:ab:53:ed:7a:d8:97:6c:
25:16:c4:83:f1:61:9b:c1:e1:06:29:15:23:02:9a:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:03:A9:47:7F:83:5B:EC:43:2A:BC:3A:28:DC:C2:00:17:CC:E4:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A3CACBCDB0911EFBFB3B0BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.231.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b8:84:bb:b8:e5:6e:3a:c2:7c:27:eb:e1:6b:50:73:27:67:
6b:da:3c:bb:2c:3d:d7:45:4a:3c:e1:57:49:8e:34:44:c9:2d:
ff:5c:5d:59:15:af:0e:66:91:e2:ae:47:f8:e1:58:16:fb:fd:
ea:92:75:ef:e2:40:d3:c7:4e:af:80:21:62:3d:6b:c1:51:eb:
75:63:0f:f7:21:87:a7:c0:4f:6d:02:ab:9f:e7:fa:d2:c3:9e:
f7:8c:0f:4a:ba:ea:fb:f0:60:a0:ca:49:17:79:14:07:62:58:
2d:3a:9b:97:38:dd:00:3a:44:b8:7a:60:d8:05:3a:9f:90:6d:
ed:16:08:bb:36:b9:6e:44:27:ac:4f:cd:00:66:aa:47:46:f5:
bb:bb:cd:0c:96:17:90:75:9b:dc:36:91:f8:3a:b9:b0:a3:66:
f6:f7:3f:0a:02:81:e7:23:02:70:35:f8:ed:bf:e7:d0:49:83:
cf:cb:69:01:2b:e5:07:e4:65:6f:85:8a:d3:62:5d:68:d0:8f:
53:1c:82:ef:5c:6d:c7:bc:13:86:c7:97:ec:c7:bd:b5:00:81:
37:15:97:38:d3:67:90:c6:91:ef:2b:ff:f6:31:4a:2a:33:d7:
5e:6b:be:8c:35:cc:b4:4b:03:3d:31:a4:7c:6b:41:47:52:62:
34:24:f8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:48 2025 by rpki-client