Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA5716DAD58711EF8FA356AF762E951A.roa
File: AA5716DAD58711EF8FA356AF762E951A.roa (raw, json)
Hash identifier: +xizy1JfDQbEbs82rIlqyzN+nMSUk0GtATJSTjLQLMc=
Subject key identifier: C9:BE:FC:EF:26:94:A0:15:D8:66:D8:C6:5F:B5:58:1B:F3:AC:B0:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA5716DAD58711EF8FA356AF762E951A.roa
Signing time: Sat 18 Jan 2025 10:33:33 +0000
ROA not before: Sat 18 Jan 2025 10:33:29 +0000
ROA not after: Sun 23 Feb 2025 10:33:29 +0000
asID: 395793
IP address blocks: 45.201.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68487 (0x10b87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 10:33:29 2025 GMT
Not After : Feb 23 10:33:29 2025 GMT
Subject: CN=678b837d-66e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:2e:38:76:c3:51:96:fa:f8:c7:2e:ce:0d:
e5:bc:cd:ee:3a:ff:9a:75:82:9e:96:93:7b:49:8b:
10:21:89:58:47:21:95:0b:c0:95:11:07:01:73:fd:
70:7c:11:d1:a6:b1:72:6b:ed:e6:34:0a:63:59:5e:
65:8d:8b:6e:5a:a6:85:4e:0c:e5:f1:5b:40:93:3b:
03:4a:6e:6b:e1:f9:07:58:1b:db:93:4c:d6:d4:84:
ee:79:87:d3:f3:40:8c:97:6a:dc:5d:c9:6b:9b:2a:
55:ad:cf:9e:28:0b:67:1d:8f:11:6d:96:34:ce:1c:
51:ee:84:40:72:d1:ed:8b:78:8c:a9:61:dd:08:9e:
10:98:68:dd:6d:96:c8:37:4b:97:9c:bb:0e:a2:dd:
3d:f8:e0:3f:25:a8:38:d2:9b:5f:9b:60:ea:40:9e:
dd:0b:c6:43:bc:40:26:67:17:d3:c0:21:2d:7a:55:
10:93:88:0a:2b:c8:c3:8f:20:a3:ed:80:51:25:de:
20:f6:60:58:1a:29:fd:b3:fe:db:e2:cc:64:28:4c:
41:75:98:82:61:fb:bf:81:a5:07:31:a3:4a:cc:ad:
91:47:05:f4:2e:32:42:48:07:41:ed:47:70:99:d7:
14:27:f5:e7:ee:36:28:4a:7c:a5:07:e1:a6:8b:95:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BE:FC:EF:26:94:A0:15:D8:66:D8:C6:5F:B5:58:1B:F3:AC:B0:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA5716DAD58711EF8FA356AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.25.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:7a:d5:20:ea:53:1f:71:38:3b:e2:57:82:50:f8:da:da:bd:
cb:95:c3:44:67:1c:49:90:d9:5c:3c:55:ec:7b:89:85:65:44:
30:d6:7d:35:47:c2:e0:18:05:5e:27:b8:a3:d7:c3:18:9e:a3:
ca:dd:32:39:c2:6f:55:35:2c:b3:9c:de:b9:06:86:07:f6:76:
4e:7f:90:e5:8f:cb:e5:ed:3b:13:da:f9:ae:a2:e1:8b:53:38:
ce:fb:4a:12:6b:3a:88:88:e4:e1:e6:05:ce:ef:fc:31:7c:97:
73:4d:4b:78:92:b9:52:1d:25:f3:db:2a:d2:5a:be:06:ba:ca:
ac:70:68:c3:87:ff:66:5f:9f:cf:6d:e2:b1:1e:f5:2f:22:1c:
91:09:77:6e:ec:d3:59:58:b8:06:2b:b2:75:07:c9:56:29:6a:
16:8f:57:a3:bc:43:a8:22:bf:6f:66:be:fa:c7:e0:6d:d8:5b:
05:a1:a4:d8:ec:2d:e7:40:3d:e5:41:1a:3a:06:fe:5b:e7:ab:
7a:c7:cc:a9:f3:94:9b:88:89:95:79:c7:ad:86:75:d0:39:39:
35:56:ff:0e:85:5a:50:85:6e:b2:50:dc:4c:36:0d:d6:68:1b:
58:c6:ed:dc:4e:5d:fc:b8:99:1b:53:da:95:39:2a:03:45:21:
88:43:0a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:55:04 2025 by rpki-client