Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D14DE70DB4611EFABE55156762E951A.roa
File: 9D14DE70DB4611EFABE55156762E951A.roa (raw, json)
Hash identifier: U+MIqzaOyOCSQl6cabJPQeMXHTvnjgAFeyaIDhtBE9s=
Subject key identifier: E5:67:D9:FC:80:1A:14:21:BA:40:FD:F4:52:C1:B6:37:9A:C3:D3:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D14DE70DB4611EFABE55156762E951A.roa
Signing time: Sat 25 Jan 2025 18:03:00 +0000
ROA not before: Sat 25 Jan 2025 18:02:56 +0000
ROA not after: Sun 09 Mar 2025 18:02:56 +0000
asID: 63139
IP address blocks: 45.197.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70339 (0x112c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 18:02:56 2025 GMT
Not After : Mar 9 18:02:56 2025 GMT
Subject: CN=67952754-b885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7f:1c:bb:87:75:87:0e:38:cd:8a:a1:bf:c0:
81:3d:de:18:b5:c5:42:fa:2d:c1:93:ca:a6:7e:58:
38:a7:f5:e3:f2:51:0d:11:13:af:f3:72:2a:fe:07:
5c:51:3f:a3:3e:8d:9b:1b:c5:07:a3:84:97:11:96:
e6:66:8d:16:7f:4f:f0:0a:23:38:90:9f:6b:3f:dc:
ac:01:1e:e0:2e:53:95:ea:05:fb:f8:12:c0:43:4f:
aa:6b:35:ae:87:4b:64:cb:50:4e:a3:8d:61:84:fb:
91:78:c5:84:8a:4c:c7:43:30:0c:e4:61:fb:1a:56:
01:f3:99:c0:3a:dc:e0:1d:36:f3:14:75:f3:92:b1:
41:4e:73:b7:00:11:37:7b:d8:f7:dd:09:36:b9:3b:
81:8b:a3:e6:e2:a8:9d:4f:cd:aa:64:ea:79:34:59:
a3:3b:02:0c:76:93:be:54:37:16:de:c8:f6:21:3b:
0c:ef:56:f7:97:32:56:57:c6:da:b0:d5:a6:e1:9d:
ec:93:37:14:4e:b3:b2:cb:3a:ae:55:a5:f8:e2:ae:
56:c7:db:d4:78:8a:0a:3f:c3:23:7c:84:d4:4b:4e:
18:1a:f0:89:50:a9:7b:4e:e5:aa:36:78:09:b9:de:
22:6a:af:ee:c2:ce:de:59:8a:9a:c7:62:b2:25:ad:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:D9:FC:80:1A:14:21:BA:40:FD:F4:52:C1:B6:37:9A:C3:D3:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D14DE70DB4611EFABE55156762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:26:50:0a:46:cf:2c:38:31:ed:9b:4f:7a:d3:8c:51:be:42:
3e:c0:e8:78:2f:35:5f:6d:ad:ed:06:d6:c0:b7:6c:79:3c:b2:
d8:fd:6c:05:3b:4a:c7:53:29:df:d2:b2:6c:91:0d:54:47:68:
69:6b:54:42:60:45:7a:bf:ed:b7:c0:e9:84:bb:85:1b:f3:cc:
16:68:12:13:2c:93:7c:18:ad:2d:d1:0e:09:fc:33:f9:84:8d:
d5:8f:82:c7:36:f1:52:2c:2e:3c:98:bd:34:d3:0b:00:cb:f7:
85:70:87:a5:05:8a:35:fe:bb:30:db:65:b1:31:b8:bf:80:46:
d8:20:e6:17:7c:9a:88:3b:86:56:50:76:74:0b:49:fb:4b:ec:
77:64:ac:05:87:47:25:b6:c6:b2:d7:dd:b8:8a:04:94:fe:1b:
3b:91:ce:43:e3:4b:40:2e:be:6f:be:29:2a:94:7b:15:36:42:
98:28:8f:b9:a3:30:9b:cc:30:b6:e7:76:58:91:fd:1c:97:33:
df:07:33:c8:d0:b4:a0:1a:5f:b7:33:1b:b1:06:11:25:9b:eb:
82:78:f4:72:3f:33:00:97:4d:0c:6f:c0:be:18:1b:cd:f0:47:
2c:e9:90:43:12:6e:71:fd:35:de:b7:89:12:0a:42:3c:20:b2:
08:f3:44:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:46 2025 by rpki-client