Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B38F456ED71D11EFACA0CB8E762E951A.roa
File: B38F456ED71D11EFACA0CB8E762E951A.roa (raw, json)
Hash identifier: ya/Kn/K8v8bdYZN03kbuHoV9NJa4NbAX3uDYpBgz9AU=
Subject key identifier: 58:F1:B1:8F:40:9C:64:C3:AF:44:42:92:4E:6E:C0:72:C2:C8:3D:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B38F456ED71D11EFACA0CB8E762E951A.roa
Signing time: Mon 20 Jan 2025 11:00:04 +0000
ROA not before: Mon 20 Jan 2025 11:00:00 +0000
ROA not after: Sat 01 Feb 2025 11:00:00 +0000
asID: 44559
IP address blocks: 45.199.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68645 (0x10c25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 11:00:00 2025 GMT
Not After : Feb 1 11:00:00 2025 GMT
Subject: CN=678e2cb4-caaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:93:28:47:f4:df:56:e6:ea:ce:c7:50:97:
47:0a:63:6a:68:57:97:09:ab:17:8d:43:08:68:e3:
3c:5f:13:62:85:f9:21:43:39:5e:df:fa:74:7c:78:
a9:0b:37:18:97:98:d4:3c:7e:73:96:aa:e8:1b:f8:
7f:fc:9e:2d:fa:9c:5c:4d:e2:3f:d0:cb:0b:6c:91:
74:c5:55:cc:27:03:ec:52:61:3e:15:f0:e6:6b:be:
68:3a:55:ef:ba:3f:87:7f:4a:6d:76:5b:c7:38:ef:
47:3e:85:b9:27:61:e4:d8:16:95:53:86:cd:a0:1c:
48:0a:07:6e:df:dd:cc:12:7f:46:34:f7:d1:53:27:
d4:80:40:ec:cf:b4:e9:1f:72:e0:f1:ba:0e:98:c2:
90:72:84:86:0d:44:12:4b:c3:c3:aa:31:99:f9:b5:
9e:4d:93:c3:68:ad:ba:94:b1:04:44:23:71:ea:14:
b3:fc:33:7d:2a:72:f5:aa:fa:96:c1:d6:ea:60:02:
a1:d0:53:e0:da:7b:1e:08:cd:db:30:45:f8:5e:c6:
54:7a:d0:d0:b5:7c:73:81:f8:3a:d9:98:1c:e3:1f:
50:46:fd:86:a2:74:d4:2e:48:6e:ff:cc:6f:6b:0d:
42:19:61:9f:0c:15:7b:15:90:a8:e7:e5:83:07:02:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F1:B1:8F:40:9C:64:C3:AF:44:42:92:4E:6E:C0:72:C2:C8:3D:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B38F456ED71D11EFACA0CB8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.231.0/24
Signature Algorithm: sha256WithRSAEncryption
95:27:92:5e:3b:29:f7:62:92:cc:d2:32:f9:d9:04:a0:bd:3e:
81:57:bf:35:51:69:d9:25:bd:c1:86:b9:cc:e5:e6:d2:e9:77:
87:db:07:3d:ee:70:ad:d1:6f:35:dc:0b:4e:2f:61:c6:03:c5:
5d:0a:8c:81:69:ac:9e:ae:df:e1:38:6e:32:22:90:98:bd:76:
02:9e:05:3f:ae:f4:0f:54:c4:a9:65:e1:e6:56:3b:48:59:6a:
d0:4a:f0:81:6b:0b:60:3a:f2:64:0d:3d:3c:2d:18:0c:39:fa:
c0:7c:a3:84:e3:b7:77:73:ae:d9:fe:54:83:30:44:fd:f5:69:
41:b7:13:e6:0b:dc:12:f7:85:db:50:4e:98:f9:65:69:fa:25:
1b:87:91:79:a7:09:6d:8d:d1:b7:44:71:a9:70:8f:c4:4f:18:
ba:61:89:1a:e9:3e:5f:2f:66:87:59:35:f7:ad:c6:5e:5f:fd:
c2:3b:4b:c4:fd:a6:5b:e2:d9:66:5b:aa:b3:c1:c0:e2:a5:f7:
59:7c:88:cb:f5:40:f7:d1:d2:25:65:e3:0e:ba:ad:1d:af:13:
a3:1b:be:ba:0b:3b:78:0a:65:ba:42:6d:49:b2:57:2d:33:82:
5d:91:be:8a:b6:18:78:e3:0d:e6:fb:d6:6f:07:20:42:9f:8f:
30:22:29:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:22:05 2025 by rpki-client