Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B1B81D6C3BB11EF8BB09ABC762E951A.roa
File: 7B1B81D6C3BB11EF8BB09ABC762E951A.roa (raw, json)
Hash identifier: W/65oXkbsQP8jSv6HS9vD0bEEwY3jISUUAr1QtNMFdY=
Subject key identifier: 47:CB:DB:2B:CF:2D:92:8D:42:19:6C:4E:7C:43:41:0B:E4:23:87:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEAD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B1B81D6C3BB11EF8BB09ABC762E951A.roa
Signing time: Thu 26 Dec 2024 18:59:06 +0000
ROA not before: Thu 26 Dec 2024 18:59:03 +0000
ROA not after: Sun 12 Dec 2027 18:59:03 +0000
asID: 17561
IP address blocks: 45.207.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61101 (0xeead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 18:59:03 2024 GMT
Not After : Dec 12 18:59:03 2027 GMT
Subject: CN=676da77a-424d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:ec:b4:12:e3:42:27:6a:85:d4:bd:de:de:
fa:f6:1d:3f:2e:59:cb:6a:bf:57:26:15:5d:3b:27:
40:4a:d3:e6:a0:56:15:1b:c9:8b:18:07:3b:ae:3a:
66:04:cc:3a:fe:fa:05:d9:32:d4:ad:55:52:45:44:
df:49:09:65:6a:b3:5c:ba:df:c6:7a:d6:99:0a:cd:
eb:43:a1:84:be:41:99:c2:d1:c4:54:f4:f2:dc:0e:
5d:74:33:56:6a:c3:71:66:80:45:e2:e0:2e:54:6d:
33:71:a3:ff:5c:ff:9f:19:b3:ac:39:90:c1:4a:29:
75:01:87:9c:ef:5e:a7:03:43:79:09:8b:d4:1e:a9:
14:c2:5b:5d:76:c2:63:29:18:c4:e7:09:ec:20:d3:
30:1b:c5:7c:5e:3a:83:34:45:9c:cd:08:bb:f3:3d:
1e:8a:8f:52:02:65:9d:a5:76:1e:cb:82:38:1b:d7:
10:66:ec:67:2b:88:6a:19:0f:c3:06:ef:14:da:55:
bd:12:4f:83:26:41:4a:90:c3:1d:9c:53:5a:be:d5:
81:21:63:05:8d:69:5b:86:25:27:d0:16:50:f3:e5:
7f:a5:9f:83:d6:77:a1:58:39:0e:a1:7e:b2:cc:f4:
71:6d:31:41:5a:9e:c8:93:be:6b:45:52:28:65:87:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CB:DB:2B:CF:2D:92:8D:42:19:6C:4E:7C:43:41:0B:E4:23:87:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B1B81D6C3BB11EF8BB09ABC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.151.0/24
Signature Algorithm: sha256WithRSAEncryption
84:56:44:5d:d2:cc:65:80:7d:44:83:ea:06:1b:47:86:7c:d6:
3f:31:75:58:e7:c7:7d:1e:25:8a:d0:8b:07:6b:82:9b:17:0c:
8d:60:e4:22:28:f4:e1:ca:9b:cc:71:f6:ad:b2:01:34:eb:b6:
c8:e9:94:ca:04:54:b5:b6:56:68:b4:9a:36:58:4f:01:86:95:
36:fa:06:9a:ff:e0:00:d8:18:00:ef:a3:b5:25:0d:68:d0:09:
2c:a0:9b:e1:af:bc:1d:b4:d5:7b:97:9d:a5:82:8d:e1:3b:18:
10:e7:3f:72:59:28:18:6c:f3:8a:ee:6f:c0:7b:4b:de:33:19:
9c:08:03:95:17:be:69:2e:f1:4f:e4:34:e5:57:ef:65:18:16:
c7:9d:46:1e:ad:0e:96:1a:27:9b:9f:3b:96:b9:6f:84:0c:13:
68:aa:3c:34:c7:b9:dd:ff:a6:76:82:a9:f5:78:5a:e4:eb:5c:
0a:ce:4e:3b:e7:a9:07:9c:fe:1a:e9:ff:2e:7c:93:32:59:47:
42:04:5a:a4:37:7c:b1:98:d7:99:49:25:37:fb:2b:34:72:f8:
46:0d:fb:f6:63:2b:58:8f:44:ca:64:77:cb:b9:b4:1f:01:28:
f2:d6:a8:61:51:7a:d5:ca:de:07:65:da:c3:7e:5b:4d:9c:8e:
8f:41:0d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:24:05 2025 by rpki-client