Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84B09B18DBE511EFBAB3C386762E951A.roa
File: 84B09B18DBE511EFBAB3C386762E951A.roa (raw, json)
Hash identifier: Ae0iC2n9AnZmQo89Wv1E0n31q9eRF4GtEAl511XD4F0=
Subject key identifier: 14:84:5A:77:12:0A:A8:FD:DE:B7:10:37:FC:E0:03:37:98:92:3C:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84B09B18DBE511EFBAB3C386762E951A.roa
Signing time: Sun 26 Jan 2025 13:00:29 +0000
ROA not before: Sun 26 Jan 2025 13:00:25 +0000
ROA not after: Tue 04 Mar 2025 13:00:25 +0000
asID: 203020
IP address blocks: 45.198.34.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70568 (0x113a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 13:00:25 2025 GMT
Not After : Mar 4 13:00:25 2025 GMT
Subject: CN=679631ed-ca6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:e6:7e:0e:27:78:1a:58:35:52:db:5c:4d:
4d:c9:66:25:9f:15:36:d8:cf:b5:68:76:a7:3e:04:
4a:ce:ad:ed:ab:6b:c6:1d:bf:3b:dc:9c:56:d4:b8:
05:fb:95:73:5a:a1:09:29:5c:bc:04:a1:08:7f:72:
80:0b:89:cf:f6:cd:21:49:ac:87:6a:26:88:4a:cc:
83:24:5f:02:be:3f:9d:c7:ff:7d:b1:ef:66:10:90:
a2:2b:bd:21:6f:99:eb:a4:60:10:24:49:3a:bb:6b:
41:df:d0:95:f8:62:42:24:82:a8:0a:f5:13:d4:b1:
9c:8a:59:48:0e:2b:8c:d6:e6:34:3d:05:b2:56:fd:
cb:6b:d4:76:b2:86:82:bc:51:21:36:92:ed:34:fb:
a8:29:55:a1:40:7a:16:48:cb:eb:1b:66:60:23:e0:
61:4b:f3:32:73:dd:b3:50:55:aa:b5:57:11:31:76:
47:43:1e:4d:94:27:3d:eb:fb:3d:eb:0c:38:e1:4b:
4e:13:f2:b7:10:98:2c:53:a6:32:d9:63:bb:59:7c:
87:02:cf:6c:05:c2:8b:12:36:ec:99:a9:9e:44:7d:
76:82:a3:b7:7a:8b:4f:c2:3d:0a:2b:42:50:72:9a:
9f:60:d5:55:64:2b:f2:f5:4b:01:7e:4b:55:8f:8b:
06:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:84:5A:77:12:0A:A8:FD:DE:B7:10:37:FC:E0:03:37:98:92:3C:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84B09B18DBE511EFBAB3C386762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.34.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:fc:1f:8f:72:a3:a0:a4:91:b6:45:77:c5:76:55:cf:35:37:
08:a8:64:b6:41:63:e7:dd:b5:ab:04:de:26:93:ed:29:87:9a:
85:c3:40:f5:80:91:81:61:57:d1:06:50:46:2e:9d:46:e8:96:
fc:5d:b4:63:c2:da:a9:3d:e5:3b:b5:be:33:53:ec:1e:3d:12:
73:3e:02:51:60:06:e1:30:a7:4c:57:29:78:49:dd:a2:3a:6b:
a0:e5:74:da:76:17:65:d6:c9:13:d5:19:c1:fc:20:2c:12:bb:
37:0c:4b:fc:c4:54:39:e9:98:55:91:09:07:74:c0:6c:f7:5e:
f7:79:15:2c:c3:70:84:19:43:91:12:4b:07:33:0e:d0:8d:93:
5b:ff:5e:9b:b7:5b:8f:92:4a:60:91:22:88:5d:ee:fb:97:94:
07:16:9d:4e:cd:bf:09:0e:37:e1:e3:df:3b:b2:bb:de:a1:97:
a1:0e:ca:f5:0e:cd:cb:e1:94:f0:56:c2:06:20:22:c7:5c:14:
84:3b:16:2d:14:b1:bb:a3:db:89:d3:fa:60:49:7b:87:41:44:
62:f4:8e:f7:a9:6e:e7:ba:c5:e1:87:cb:d8:92:56:5a:aa:03:
d2:a8:d9:84:c3:cc:e6:e0:ec:b9:a4:fe:b2:d8:ac:f1:1b:2a:
7d:72:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:04:18 2025 by rpki-client