Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7712328D72D11EF9D57C575762E951A.roa
File: A7712328D72D11EF9D57C575762E951A.roa (raw, json)
Hash identifier: XawN/gUeM6zvmR7rBS+BLR+5hHL6klKifK+42BY/gl8=
Subject key identifier: 59:09:3C:68:40:D2:49:19:A5:71:65:C1:60:56:E7:0A:9B:84:13:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7712328D72D11EF9D57C575762E951A.roa
Signing time: Mon 20 Jan 2025 12:54:16 +0000
ROA not before: Mon 20 Jan 2025 12:54:12 +0000
ROA not after: Sat 01 Feb 2025 12:54:12 +0000
asID: 6079
IP address blocks: 45.197.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68745 (0x10c89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 12:54:12 2025 GMT
Not After : Feb 1 12:54:12 2025 GMT
Subject: CN=678e4777-fe65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:54:bf:9a:2a:0b:76:45:bc:6a:f2:96:ee:
09:05:0b:5e:bc:ba:e8:05:d3:d3:d4:17:36:57:72:
53:94:f1:07:46:03:98:cc:d2:b5:5e:b0:16:a5:8a:
88:53:21:7b:a2:75:1a:fb:85:f2:0a:1d:5d:f5:8a:
4f:ed:27:cd:60:ed:01:0c:4a:4b:79:c3:14:29:cc:
95:ed:f1:37:16:d3:63:9c:83:38:68:59:0b:33:8d:
53:71:64:05:ce:1f:39:8b:54:7a:96:3e:21:df:40:
ba:88:5e:0d:31:f3:c8:2c:b1:5f:88:cc:cf:4b:6d:
16:01:61:d9:12:a9:4d:e0:42:db:bb:86:a8:e1:d5:
fa:57:a8:40:00:b1:af:c0:c0:a1:45:a0:89:1b:d1:
0f:8f:0a:f5:2b:23:9d:a2:2c:02:33:5f:55:27:c6:
40:59:cb:ed:7a:2e:0f:2b:2c:b0:91:90:a9:89:07:
14:e9:49:0c:0b:c9:a6:9c:93:a4:0a:29:ae:fc:b9:
9f:64:9b:45:93:c7:a0:97:4e:07:07:ef:27:e6:ae:
36:d5:0f:3e:5b:9b:8e:74:3d:24:e3:83:ab:cf:60:
3c:28:36:2c:82:5e:38:84:fd:f2:bd:0b:93:60:9a:
2f:6b:9e:10:16:b4:69:b4:1c:c7:2d:3e:92:e8:f3:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:09:3C:68:40:D2:49:19:A5:71:65:C1:60:56:E7:0A:9B:84:13:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7712328D72D11EF9D57C575762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.208.0/20
Signature Algorithm: sha256WithRSAEncryption
23:fb:16:7f:ad:f2:aa:61:0d:2b:ed:32:af:2c:ca:4c:cf:78:
80:20:07:2a:64:15:c8:db:ee:ec:66:72:78:8f:c1:94:36:d5:
79:6b:9a:70:86:2b:46:ba:ff:17:c0:be:6c:9e:dd:0c:ea:fd:
c1:fb:dc:fc:53:66:f4:b4:af:94:1d:7f:ef:25:f2:bf:ca:86:
e9:6f:8d:51:89:3d:21:a4:9c:77:72:11:1a:7a:66:62:9b:a6:
64:ac:99:eb:b5:d3:76:44:b6:51:65:8d:22:ed:24:ca:31:8a:
1f:38:ef:c4:bc:c1:fd:78:16:d1:c6:7f:05:43:88:0f:01:af:
f2:68:a6:61:9e:88:6b:ee:de:33:e7:db:20:8d:2e:26:ee:12:
16:41:ad:8f:f8:f0:7a:68:9c:5c:4e:c6:e0:c3:f3:a1:a0:c3:
bc:6f:d0:6d:40:cf:a1:29:c6:69:5d:c9:9a:98:c7:38:b2:fb:
a8:16:4f:ed:6e:45:e7:e5:1a:b9:0c:bc:e9:d5:8f:7c:a5:ce:
a1:1d:d1:a5:21:53:f4:96:5e:d5:28:37:5f:54:9b:04:6e:cf:
8f:39:0a:13:b3:d3:39:cb:b5:18:7e:32:0c:f8:fd:82:4d:1b:
c2:f3:c9:d2:05:f0:6f:ac:16:6e:4d:86:a1:ef:5e:b5:e2:a6:
bb:30:1c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:24 2025 by rpki-client