Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DDAE280D51811EF81C1354B762E951A.roa
File: 8DDAE280D51811EF81C1354B762E951A.roa (raw, json)
Hash identifier: /wPAOYWqkbYabzObBZ92F7tKMs1RC4ogHtIpMCThm1Q=
Subject key identifier: 71:70:2D:B8:03:F7:CD:DA:65:7E:EC:87:A2:4E:E6:6A:4C:AC:37:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010ABA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DDAE280D51811EF81C1354B762E951A.roa
Signing time: Fri 17 Jan 2025 21:18:11 +0000
ROA not before: Fri 17 Jan 2025 21:18:07 +0000
ROA not after: Sat 22 Feb 2025 21:18:07 +0000
asID: 141883
IP address blocks: 45.201.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68282 (0x10aba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 21:18:07 2025 GMT
Not After : Feb 22 21:18:07 2025 GMT
Subject: CN=678ac913-c87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:7a:fd:36:32:e4:d4:7f:20:c6:f5:65:4f:
94:80:0e:58:fb:b4:fa:f5:c4:01:97:59:f3:6c:4d:
c0:d9:5a:42:55:67:7b:8d:84:1a:99:de:8f:c1:6b:
e6:56:82:37:7b:be:38:d3:dc:a9:38:e6:25:af:3e:
e7:bc:a4:a0:29:96:47:0b:11:f0:af:c0:d3:43:06:
dc:b6:29:cd:37:6f:b4:10:b1:03:35:9d:72:92:f6:
cb:8e:a8:d3:1f:31:56:99:ea:d3:ed:fa:30:f9:7c:
98:cf:50:3a:6a:1a:1a:bc:ed:38:8b:52:d2:c4:ac:
c5:90:cb:0c:33:e3:77:0f:1e:e1:c1:9e:37:17:37:
d0:c8:66:d9:8a:0a:10:60:3b:c5:9e:63:b1:1d:a9:
fa:6d:31:6e:bb:47:0d:f5:1d:55:65:ba:c8:fd:26:
18:af:08:50:ef:cd:5a:f5:de:cc:c3:ee:5b:cc:c4:
90:33:86:d0:e9:af:06:88:27:6f:be:84:0d:9e:2e:
1b:56:fd:35:9b:36:45:f1:62:19:f8:75:44:74:14:
59:5a:d9:32:a4:43:06:cf:40:e6:9c:dd:f3:c0:fd:
74:b1:b9:5b:e0:69:cd:ac:30:82:1b:55:04:3f:b1:
7f:97:4c:da:16:f0:76:e2:4a:d4:9f:28:da:33:f5:
3d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:70:2D:B8:03:F7:CD:DA:65:7E:EC:87:A2:4E:E6:6A:4C:AC:37:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DDAE280D51811EF81C1354B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:39:ee:26:5e:61:33:fc:28:12:d1:94:ed:20:1c:61:fd:ac:
1a:03:12:7d:7f:f2:9d:6a:e6:dc:d5:28:5c:bb:37:90:29:55:
8d:3a:b8:0c:6d:c1:4c:32:5a:ae:8c:04:24:13:37:58:29:3c:
f9:a9:af:e6:64:82:8f:70:90:e4:74:e1:4d:a2:2c:5e:36:4c:
21:f8:5a:ba:b6:ab:6c:fb:cc:34:17:73:f8:fc:f7:bc:8b:24:
77:03:e0:7c:63:65:57:ef:b1:78:80:79:83:3f:b0:fb:a1:ef:
2f:08:08:0b:f9:10:71:01:52:26:c0:89:2d:70:d0:23:9c:94:
b5:28:4a:37:86:61:c9:27:56:cc:9c:a7:8f:f3:d5:51:d2:78:
87:86:7f:da:e9:c9:58:19:69:71:36:d7:83:f3:41:cf:87:29:
50:30:24:46:1b:f7:e3:08:59:7b:37:82:ff:b6:77:35:7a:d3:
81:6c:a6:c0:0b:5d:5b:de:49:bb:aa:77:6c:de:1f:20:a0:ea:
c1:a4:d2:f4:78:8f:57:07:a4:cc:fb:fe:b1:fb:fa:0d:90:0e:
70:75:5e:30:d7:e3:3a:0b:e5:33:9c:73:03:f5:21:fc:11:3f:
e9:a5:c4:80:71:ab:10:b9:6b:0e:b6:e4:d9:be:78:51:ee:95:
9a:5e:28:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:49 2025 by rpki-client