Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B58E0C4CDB5A11EFA4A94D5A762E951A.roa
File: B58E0C4CDB5A11EFA4A94D5A762E951A.roa (raw, json)
Hash identifier: mIpWfIyCYiRzqyDDrRstlPRdBUSYcH1y274KQxGsz5U=
Subject key identifier: 4A:0B:8A:88:D1:1B:7F:2C:18:73:E0:C4:67:D6:13:66:73:A2:AE:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011309
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B58E0C4CDB5A11EFA4A94D5A762E951A.roa
Signing time: Sat 25 Jan 2025 20:26:51 +0000
ROA not before: Sat 25 Jan 2025 20:26:47 +0000
ROA not after: Sun 09 Mar 2025 20:26:47 +0000
asID: 63139
IP address blocks: 45.197.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70409 (0x11309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 20:26:47 2025 GMT
Not After : Mar 9 20:26:47 2025 GMT
Subject: CN=6795490b-1d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:bb:b4:3c:48:b8:35:a5:f1:2a:0a:14:7d:
54:40:aa:e8:ba:91:e5:f6:bc:b9:bd:aa:4a:75:f0:
1c:9d:c0:82:e0:e3:2d:ef:d1:61:22:3c:3e:83:6b:
35:c7:b8:07:c6:6b:43:f8:7a:e5:4b:5c:9a:5a:43:
c3:8d:34:0f:ea:e4:aa:89:a7:53:22:12:c3:86:84:
ff:d6:fa:43:d9:50:2e:36:a5:79:e9:05:96:54:30:
d7:ef:9f:33:9c:1a:4b:e5:eb:f3:55:33:4c:c2:fe:
cf:e3:a3:aa:df:03:e0:6c:7a:85:b2:f5:e8:6d:ed:
c1:a8:73:11:ea:c5:40:d6:95:33:33:35:c8:e1:24:
9c:66:b0:67:60:95:38:b7:fe:6c:a8:65:44:30:eb:
e6:11:16:78:fa:d1:db:5d:f6:62:b4:21:fd:fe:26:
03:e6:77:1e:e7:d0:40:31:25:bf:22:15:13:65:71:
cb:a0:31:8f:81:48:2e:ee:62:f2:85:80:e3:8a:9b:
2f:8c:0c:9f:c2:24:46:a8:e4:7c:57:ce:b3:9f:46:
bb:1f:a1:4e:15:d0:2f:ad:69:b5:af:44:95:9a:b5:
c0:fb:50:70:8b:d7:bb:f6:9b:73:e9:95:c4:c8:0c:
1f:1d:b2:1e:0b:3f:05:d2:44:f1:00:64:e0:15:1b:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0B:8A:88:D1:1B:7F:2C:18:73:E0:C4:67:D6:13:66:73:A2:AE:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B58E0C4CDB5A11EFA4A94D5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:68:04:25:17:95:1d:36:4e:ad:00:5f:e8:6c:e6:fd:a2:df:
09:2e:6c:a0:6c:d1:e0:a0:26:c9:06:9b:1c:e8:a3:ce:82:f7:
89:be:d2:ee:4c:2a:3f:e2:7a:96:44:57:6b:09:32:93:ef:ca:
ce:a9:3c:16:b0:54:1d:19:12:3d:79:6d:3d:a4:77:45:8b:33:
a4:d8:f1:d3:dc:a5:ea:28:71:2b:6b:7c:fa:7a:dc:39:9b:7c:
87:30:57:c7:bc:3a:06:f8:48:27:00:67:4c:fc:00:ba:2a:c3:
3a:2c:da:63:a2:ca:92:cf:18:b3:40:b9:1a:f7:e0:dd:ac:d3:
b2:6c:a5:91:43:73:ac:8f:e2:1c:e5:ec:d0:6a:ec:47:72:d0:
43:e0:a8:e6:f5:1b:52:9e:7a:b0:91:6b:2d:39:3c:ac:33:05:
73:d4:59:ec:32:c6:32:db:2f:f8:fe:9d:98:a9:46:dd:40:fd:
d6:e5:47:c6:e4:e2:a1:8a:0b:e2:09:e8:7d:e8:46:24:8d:71:
f4:8b:b4:f5:bc:a7:bf:e6:de:50:09:54:c8:37:cc:e1:e7:83:
4c:0a:4a:5c:1d:11:3a:3a:ce:21:2f:60:ff:1d:e7:5d:58:b2:
c3:3f:40:b7:28:f3:03:32:18:24:bb:2f:6b:54:46:77:bf:b7:
cb:48:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:36:36 2025 by rpki-client