Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BAF4AE0DBE411EFA8E4B781762E951A.roa
File: 9BAF4AE0DBE411EFA8E4B781762E951A.roa (raw, json)
Hash identifier: P1aw/o3CPHIJ1ILvN4rxraJ5bIceiDWS6EFnXVKU4pA=
Subject key identifier: 1B:D7:7E:41:7B:DE:32:3F:B7:9E:E2:96:41:DF:9C:D7:E5:2A:4D:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BAF4AE0DBE411EFA8E4B781762E951A.roa
Signing time: Sun 26 Jan 2025 12:53:58 +0000
ROA not before: Sun 26 Jan 2025 12:53:54 +0000
ROA not after: Tue 04 Mar 2025 12:53:54 +0000
asID: 203020
IP address blocks: 45.198.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70562 (0x113a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:53:54 2025 GMT
Not After : Mar 4 12:53:54 2025 GMT
Subject: CN=67963066-c021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:dc:ea:7a:79:f4:2e:7d:bf:21:72:97:7b:
2c:43:c8:ec:f6:d7:b4:80:b2:a5:37:e0:a4:c0:b0:
02:67:1a:ff:1b:16:3c:79:ab:f4:94:0f:4c:3c:8b:
86:3d:6e:03:e8:78:31:7f:d0:ad:40:09:5f:ee:9a:
a8:ab:53:ba:45:97:d1:7d:f2:93:ff:52:28:e1:99:
a6:b7:ea:18:fb:92:cd:e1:90:4a:ff:1b:44:8f:7f:
9f:ae:ac:35:9c:54:d6:60:46:c7:33:3d:28:02:4b:
34:7a:10:68:d1:02:5f:28:a5:0c:ad:f6:c5:74:1a:
fd:13:8c:04:3a:83:c9:f9:07:e3:86:3b:8f:f0:fc:
b4:f4:e0:ed:a3:95:64:6d:29:b7:c6:eb:ff:0b:be:
97:e2:74:31:2f:5d:1a:02:a7:89:e9:97:2e:06:c1:
ef:05:36:d0:8f:12:fc:0d:a2:f5:b2:a7:ba:e5:b2:
75:46:79:24:77:1a:bd:22:7c:b4:29:7f:8a:61:57:
74:02:64:92:d5:eb:ac:d4:4e:f5:99:21:48:f1:dd:
ee:5a:69:8a:06:1e:24:ae:7d:55:db:70:49:8b:ec:
0b:af:18:2d:f1:fd:4e:11:6b:c3:3f:4f:d8:ff:17:
98:1a:b9:58:d3:ea:05:00:75:fc:4d:1c:58:0e:c0:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D7:7E:41:7B:DE:32:3F:B7:9E:E2:96:41:DF:9C:D7:E5:2A:4D:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BAF4AE0DBE411EFA8E4B781762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.44.0/23
Signature Algorithm: sha256WithRSAEncryption
45:d5:74:cc:4a:2f:b0:2c:89:d5:bf:ba:58:25:3a:5c:94:6e:
1b:7e:dd:40:58:1a:cc:b6:77:91:f3:e9:35:e1:5a:7b:3b:92:
20:3e:13:2c:5f:fd:8b:83:eb:6d:bd:61:ae:ac:b7:ff:d0:18:
76:ee:81:03:b8:17:09:45:73:89:da:ad:26:00:6d:23:ef:7b:
33:ed:12:aa:d2:90:98:9c:e3:af:4c:1e:a5:2d:e7:62:74:5c:
74:6e:1b:5f:7e:c8:a8:c5:33:86:a5:c1:8d:34:46:a2:68:16:
29:55:2d:d5:65:da:ab:0d:46:4a:aa:f0:67:24:64:64:c4:13:
e9:d4:4a:34:b1:e4:29:92:98:5a:b7:3b:8a:a7:27:39:21:8d:
29:02:c3:28:d9:14:e0:ec:ae:35:a6:3f:f6:d6:72:58:d2:7a:
25:1a:31:dd:0b:a2:0d:23:93:d0:a9:c4:69:a6:8d:44:95:38:
f0:40:d3:d9:4c:43:c6:58:6a:48:3f:f1:cc:c6:02:ef:07:4e:
33:23:1c:c5:a2:fb:79:1b:b2:9c:a4:d3:29:0d:51:03:df:14:
e1:e0:7f:8c:aa:72:c8:f3:50:ca:a2:b1:21:da:89:3a:b4:1f:
aa:81:bd:cc:90:7d:8b:25:f2:f0:25:5d:a4:20:1f:df:01:b5:
89:a9:89:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:20:55 2025 by rpki-client