Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD2C463ED72911EF9470995A762E951A.roa
File: AD2C463ED72911EF9470995A762E951A.roa (raw, json)
Hash identifier: 35weHDoUa0MuJLlBxWHQLLAhl3nboJrLQMjshFB229M=
Subject key identifier: 3C:21:35:1B:82:CF:3B:2A:B9:49:EC:65:21:1A:0D:15:B3:49:64:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD2C463ED72911EF9470995A762E951A.roa
Signing time: Mon 20 Jan 2025 12:25:47 +0000
ROA not before: Mon 20 Jan 2025 12:25:43 +0000
ROA not after: Sat 01 Feb 2025 12:25:43 +0000
asID: 6079
IP address blocks: 45.203.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68727 (0x10c77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 12:25:43 2025 GMT
Not After : Feb 1 12:25:43 2025 GMT
Subject: CN=678e40cb-ea75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:39:c2:23:2f:f5:be:72:6c:07:56:be:87:
15:1b:b1:7e:9d:eb:56:d9:55:35:d9:40:06:04:bc:
dd:b5:fa:92:96:cc:47:88:23:7b:a4:53:38:ee:bb:
d0:f2:e3:8a:bc:4f:07:64:36:3f:dc:93:94:2f:fc:
9b:32:39:07:ee:a4:03:96:1e:f1:13:30:b4:08:5b:
2d:26:30:fc:88:37:d1:a1:71:5a:78:2a:d3:04:e0:
fc:6b:10:cd:f1:ee:d0:c6:d1:ae:6f:28:d4:fb:79:
f4:38:92:4e:f3:f0:09:5c:c7:fc:ac:6c:16:9f:81:
06:07:a1:42:8a:cd:60:2f:0e:ae:a7:fa:5e:a5:15:
07:52:67:b8:a9:58:fa:cc:6d:42:9c:7a:bc:05:9f:
d6:d6:4b:4c:1e:67:f4:1d:04:5d:13:f2:83:5a:e0:
28:e7:10:4a:17:63:d3:9b:99:06:c9:57:72:48:71:
c1:63:9b:c0:8b:ed:53:52:2f:f2:83:41:a4:7b:b5:
9a:22:e2:81:72:b4:34:74:a1:d9:8e:4a:3f:b6:8a:
b7:05:bf:11:59:9d:54:67:f2:9b:eb:75:19:4d:70:
75:67:7f:4c:73:cd:ee:3a:1c:a6:92:a8:4c:5b:2f:
d9:b6:ab:b0:8d:28:9b:85:ff:f2:59:63:28:e3:6e:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:21:35:1B:82:CF:3B:2A:B9:49:EC:65:21:1A:0D:15:B3:49:64:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD2C463ED72911EF9470995A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.240.0/22
Signature Algorithm: sha256WithRSAEncryption
93:6b:4c:1f:9e:47:f8:95:ad:35:8b:72:d3:fe:47:e9:bd:00:
3d:91:83:0a:46:8c:e1:bf:36:63:3a:32:b9:a0:11:25:64:f7:
5f:0f:b8:e5:8f:b6:49:b0:b0:52:8b:73:88:77:38:87:f2:02:
e9:0a:50:eb:e9:7b:14:ee:c7:36:e3:70:36:46:63:e6:5b:d2:
d7:fe:a4:85:48:dc:42:aa:29:d3:7f:fe:0b:f5:ce:21:0f:e8:
bc:1a:f1:82:b7:4d:ea:fe:e9:ee:f8:6f:41:45:b4:88:ab:af:
17:dd:a2:bc:c0:3d:63:5e:84:54:c3:4f:b1:f6:f2:57:df:ec:
c5:c1:3b:6a:11:22:af:dd:69:eb:0e:6f:d6:9a:b2:52:7b:75:
46:46:75:9f:2f:bd:c4:c2:71:c7:39:cb:1a:63:26:41:d1:85:
00:a0:bc:95:fa:1e:d2:13:c9:cf:a9:d0:dc:46:87:8e:09:8b:
a4:ca:bc:66:94:43:a0:5f:47:fb:95:6c:b2:29:04:2f:1d:0e:
c8:75:80:80:68:64:e4:43:6f:f1:1c:34:ab:00:cd:c7:ea:2f:
d7:74:1d:82:e9:0d:18:da:4b:5c:4b:b6:ad:bd:42:05:54:f9:
84:84:89:78:a6:d2:e0:c6:d8:3d:ac:23:1e:1f:93:ad:5e:fc:
cd:fc:d4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:16:58 2025 by rpki-client