Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C1EDFACDBD811EFAD12C1B0762E951A.roa
File: 8C1EDFACDBD811EFAD12C1B0762E951A.roa (raw, json)
Hash identifier: RA/g+Hf47/orR7+OSmOKXCsb+glUue6K2D9EV6CdhQw=
Subject key identifier: 4D:12:97:18:41:5C:E6:DA:77:99:16:3E:76:84:04:12:A4:41:C3:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01134C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C1EDFACDBD811EFAD12C1B0762E951A.roa
Signing time: Sun 26 Jan 2025 11:27:38 +0000
ROA not before: Sun 26 Jan 2025 11:27:33 +0000
ROA not after: Tue 25 Mar 2025 11:27:33 +0000
asID: 6079
IP address blocks: 45.203.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70476 (0x1134c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 11:27:33 2025 GMT
Not After : Mar 25 11:27:33 2025 GMT
Subject: CN=67961c2a-dff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:f0:98:f0:b7:65:2b:a1:d7:a8:e9:45:2b:
29:99:d3:a1:36:ac:65:6e:ee:f9:de:19:8a:99:42:
e7:12:bd:b1:c4:65:77:43:a3:32:4f:bc:cd:37:6b:
e7:5c:84:02:de:c0:f7:1f:00:4a:66:14:8e:51:53:
91:e2:3e:d7:00:93:79:ca:8f:2a:47:66:f7:53:8a:
0d:31:32:59:77:b1:d8:2d:f1:6c:c2:9b:00:75:f7:
17:56:a4:a1:5f:31:97:11:e8:ef:c0:d9:75:92:0a:
12:7e:b2:c0:ac:57:0f:98:5f:78:07:4f:11:cf:e9:
9f:71:1b:a1:98:57:a6:9e:b0:2d:f7:76:1f:5a:a5:
b2:6f:05:af:25:3d:f2:ee:d2:51:c0:83:04:bb:fc:
bb:e8:9f:4b:2f:94:02:29:bd:a8:55:53:4f:8a:8a:
18:cd:81:c2:2a:9e:4d:47:88:4f:84:46:c8:7a:03:
bb:62:7d:92:74:d1:e5:81:64:69:b7:ff:ea:e8:ad:
cc:d3:c5:b8:d9:57:dd:00:5e:54:ab:18:49:5b:49:
ba:b4:4b:71:06:c5:ce:ee:44:de:1d:7a:ac:fe:99:
1f:b1:ef:e1:ad:ce:a3:9a:02:b0:9c:c7:ba:e2:51:
b6:24:c0:9d:41:7a:72:6f:6c:39:fd:cc:66:d8:62:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:12:97:18:41:5C:E6:DA:77:99:16:3E:76:84:04:12:A4:41:C3:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C1EDFACDBD811EFAD12C1B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.244.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d9:14:6c:e4:45:22:bc:ab:c9:9e:61:26:c8:4c:4a:0c:aa:
c8:30:9c:0d:f1:05:93:7d:71:33:5f:da:82:46:4f:8d:9c:37:
9b:69:ab:6f:21:50:b6:73:ef:83:31:e5:a4:c2:1f:5d:c0:55:
ae:e7:22:8c:15:21:e4:02:c7:be:39:9b:12:c7:2e:27:17:8c:
64:f7:e4:c7:67:b3:9b:01:5b:5f:d4:30:1b:ec:29:ca:85:8f:
d2:ca:16:78:2a:35:c2:de:d9:67:17:99:9a:d5:a3:7f:48:44:
6f:06:df:d8:fe:e2:4f:bc:7b:6b:57:19:88:4a:41:f3:0b:45:
60:55:df:ad:77:49:8d:04:32:c8:4d:0d:c5:39:79:52:7a:a7:
9a:1a:d9:9b:f7:bd:41:01:e8:48:7f:28:e8:cc:35:41:7a:66:
6f:e4:88:11:d7:03:b3:60:93:bb:c2:d2:1c:8c:dc:72:ed:22:
61:91:0a:4f:b5:c4:f4:ba:0b:33:54:da:8b:21:07:33:58:ec:
f0:88:ce:38:0b:18:e3:f5:c8:48:f7:d6:4c:9c:4e:a2:e3:1f:
1f:45:1f:25:aa:ad:b8:36:5a:d8:3a:23:28:f8:9f:cc:9d:2b:
43:14:de:a1:20:90:a7:34:63:2a:17:0c:2f:bb:34:ee:da:01:
27:19:e0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:15:48 2025 by rpki-client