Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D212F4EBDBB11EF885CC453762E951A.roa
File: 8D212F4EBDBB11EF885CC453762E951A.roa (raw, json)
Hash identifier: Si8QgLiWQNyPMCDan5vibPIqjrLzHl1fkap4w1GIQVs=
Subject key identifier: 65:49:9B:54:23:5C:B5:6F:10:FC:40:B3:AF:B7:0B:27:9D:35:DA:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E537
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D212F4EBDBB11EF885CC453762E951A.roa
Signing time: Thu 19 Dec 2024 03:44:30 +0000
ROA not before: Thu 19 Dec 2024 03:44:26 +0000
ROA not after: Wed 10 Dec 2025 03:44:26 +0000
asID: 984
IP address blocks: 45.206.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58679 (0xe537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 19 03:44:26 2024 GMT
Not After : Dec 10 03:44:26 2025 GMT
Subject: CN=6763969d-f259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:7e:1b:e8:b7:8f:74:29:bc:f9:e0:3e:ad:
f8:94:b2:06:dd:98:2f:b3:d9:ac:33:ca:29:85:30:
95:5c:f2:a9:18:3e:d2:03:63:54:92:fe:97:a6:e2:
fd:b3:ad:48:aa:c1:a6:6b:ce:91:e3:da:60:e8:56:
5c:d2:9b:10:42:9f:0a:8b:47:4c:cc:7d:0a:67:a1:
17:e7:bd:b0:b8:c6:85:8f:b3:2c:de:e5:91:57:39:
98:a3:9c:9c:86:56:cd:6c:7c:87:3d:a2:fc:00:79:
b1:54:2c:51:75:6c:ad:dd:c2:da:29:86:09:e0:b1:
0e:b2:91:b6:99:34:67:b8:5f:92:68:6f:05:be:9f:
1b:e4:6c:dc:02:ac:2c:75:1b:7c:84:93:b2:fe:5b:
96:cc:30:d1:f0:42:0d:31:2a:65:b8:e2:50:72:5b:
a2:8a:9e:ca:36:0e:4b:de:eb:d2:c5:49:44:0c:6d:
44:0f:ed:13:f1:2f:84:d3:7b:d7:8d:3b:2f:bb:27:
be:ec:0b:52:73:3e:a2:22:3d:7c:42:bb:e6:27:93:
45:16:57:ca:eb:ee:91:0d:b5:3e:40:7e:5c:c7:37:
d0:39:2a:a8:6a:f6:d0:07:2b:c7:3a:85:a2:7c:aa:
93:65:17:09:85:63:71:6d:bd:a9:bd:d1:f9:32:32:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:49:9B:54:23:5C:B5:6F:10:FC:40:B3:AF:B7:0B:27:9D:35:DA:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D212F4EBDBB11EF885CC453762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:4f:6c:6c:59:e6:c0:15:36:b6:17:2c:f9:70:a8:c7:0d:6b:
fe:5f:37:fd:b6:1d:7f:2b:0d:8d:1f:b2:09:af:68:39:38:89:
c4:de:07:ea:19:0d:f9:a1:b9:b8:be:4e:ac:3c:d7:50:fc:85:
75:bb:58:a6:ce:12:8e:60:b1:53:84:7b:d6:32:fd:17:a9:78:
8f:03:5e:43:b1:c4:3b:51:e2:28:de:16:e4:7d:2e:1b:eb:41:
43:c4:22:41:bf:30:f8:a6:e3:ac:8d:06:ed:86:ea:0c:9b:b9:
6d:84:63:e7:f3:5d:07:fe:cf:a3:42:5f:98:5c:30:7a:ee:dd:
8c:5a:c3:79:f9:f5:e4:12:05:e7:de:20:cb:a6:fc:61:bd:b8:
90:a3:50:66:68:0d:73:ed:08:f7:1e:36:7e:e1:0b:9b:97:da:
fa:36:d2:0b:e4:92:a8:03:d0:ce:bd:fb:29:e6:5f:bc:e6:84:
30:4e:ed:e3:13:90:c1:5c:c3:08:47:02:f8:1a:ea:89:42:78:
d4:3f:05:f9:3b:b6:f9:3e:de:9a:ad:f4:24:5d:31:1e:a7:9f:
f2:16:52:92:1e:21:60:3b:40:5e:03:b5:cb:a8:5d:ee:41:36:
9b:92:82:3c:3c:91:89:ea:62:44:43:d2:c4:b7:1e:cc:f2:eb:
bb:4e:eb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:22:35 2025 by rpki-client