Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/817F0104DB0A11EF86B9AA45762E951A.roa
File: 817F0104DB0A11EF86B9AA45762E951A.roa (raw, json)
Hash identifier: L5P3QNiXvvna0xGfdne5gPffLzUiMi7OQ9HrVtyCbaE=
Subject key identifier: AC:41:90:01:70:1C:9F:7F:F1:56:B7:96:2C:D4:CC:FA:E4:C6:37:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/817F0104DB0A11EF86B9AA45762E951A.roa
Signing time: Sat 25 Jan 2025 10:52:44 +0000
ROA not before: Sat 25 Jan 2025 10:52:40 +0000
ROA not after: Sun 23 Feb 2025 10:52:40 +0000
asID: 44559
IP address blocks: 45.199.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70143 (0x111ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 10:52:40 2025 GMT
Not After : Feb 23 10:52:40 2025 GMT
Subject: CN=6794c27c-be87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:6b:33:5b:0b:ee:ad:80:bd:fc:ea:56:8b:
50:65:ed:e5:f7:70:5b:40:be:2c:84:96:a2:de:ab:
39:65:44:0f:b6:9f:a1:26:26:b9:d9:3d:d9:b2:f2:
c0:5a:a4:89:50:72:34:5b:1a:f1:08:93:f4:cc:3f:
6e:70:37:4d:4f:1b:a4:7b:71:98:cf:43:3d:5f:6d:
3b:3c:ca:d3:01:22:32:c8:fd:46:4b:a4:f0:a8:e3:
9d:00:77:e1:d2:88:90:d6:fb:df:5e:e8:19:8f:ed:
ff:0a:cd:73:b0:5a:10:1c:5a:cf:16:6d:2d:1d:93:
b2:a9:df:e5:29:78:ff:03:47:22:8a:99:8c:42:3a:
0b:40:8a:df:8c:78:ce:fc:83:41:ea:ad:55:39:61:
dc:ef:b5:c9:85:88:98:02:c1:72:77:b8:9e:5b:be:
2b:f6:50:76:82:9f:10:ea:6a:8a:ad:37:9a:4e:9b:
a5:74:bf:2e:25:9f:48:39:13:db:73:01:45:92:48:
43:51:5d:fe:e0:53:a3:d9:1c:25:d4:f6:cd:87:b7:
af:f8:a0:89:f6:dc:0f:04:20:61:fa:33:fc:26:48:
c4:b6:10:41:b0:ff:52:4f:25:db:31:82:94:34:9b:
e3:7c:76:37:d1:49:a4:ac:e0:2d:df:fb:52:34:5d:
1a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:41:90:01:70:1C:9F:7F:F1:56:B7:96:2C:D4:CC:FA:E4:C6:37:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/817F0104DB0A11EF86B9AA45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.235.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:49:ad:fb:5b:21:62:a8:e8:31:a9:a9:ed:66:84:c1:1e:ed:
9b:3f:8c:2b:8a:eb:e8:bf:bf:0b:0d:4b:6f:64:d5:8c:43:ab:
70:79:55:9a:61:5a:23:5c:d7:b0:05:c8:55:75:14:c7:68:ae:
b8:35:ab:06:6c:0b:65:03:32:6f:49:39:01:a9:2c:a0:b2:61:
3b:d5:fc:4b:9f:eb:9e:c2:19:74:3a:cd:3a:74:53:f0:50:a4:
fb:da:04:25:61:61:17:19:14:2f:5f:c3:a8:10:86:af:4d:b8:
0b:1e:b0:10:56:af:f0:0d:42:47:e5:39:a3:06:14:b1:58:c5:
a4:44:27:2f:b4:fe:70:31:e4:30:ce:c8:03:88:54:3e:25:d2:
c4:40:6c:6b:86:5d:5b:6c:3b:3d:5e:20:ce:0c:0a:89:f3:40:
e6:b7:ac:b0:1f:5f:02:f7:c7:cf:3f:86:d2:3a:c1:67:04:04:
03:40:fa:b2:17:d1:7b:c1:0b:b4:c0:0b:f2:49:68:1c:7f:72:
0b:b3:73:8b:3c:f3:0d:b5:94:be:f0:9a:1f:a2:83:89:c3:cc:
5a:bd:4b:b6:06:96:8b:21:0e:ab:b8:de:c9:0a:59:2f:80:8f:
f8:02:23:f0:55:16:c7:df:65:6f:13:53:72:52:da:ee:74:95:
3a:52:b7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:35 2025 by rpki-client