Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E97F99C8DFDB11EFAEE918BE762E951A.roa
File: E97F99C8DFDB11EFAEE918BE762E951A.roa (raw, json)
Hash identifier: UrQgCJbXPRozloOiYe9w9laPVTorgCF29pUP4Tj9+XA=
Subject key identifier: 5E:FC:86:CA:72:FF:FF:63:CE:B1:84:66:40:E2:D5:4A:23:5B:AE:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E97F99C8DFDB11EFAEE918BE762E951A.roa
Signing time: Fri 31 Jan 2025 14:01:48 +0000
ROA not before: Fri 31 Jan 2025 14:01:44 +0000
ROA not after: Sun 09 Feb 2025 14:01:44 +0000
asID: 135377
IP address blocks: 45.203.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71150 (0x115ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 14:01:44 2025 GMT
Not After : Feb 9 14:01:44 2025 GMT
Subject: CN=679cd7cc-01b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:52:2d:60:60:f5:76:8c:ee:2a:fb:00:a8:
e0:bd:d9:29:cb:70:dd:c9:20:f3:26:48:84:7c:0a:
3e:06:99:3e:98:1f:aa:d6:79:e9:21:fb:85:df:ec:
47:6a:a9:c6:92:73:38:3d:fc:eb:77:0a:0b:ad:e5:
79:51:7a:0c:db:2b:a2:94:49:2a:09:d7:b9:82:d7:
48:7a:71:3f:36:7c:ba:31:14:92:82:a1:ca:fa:8a:
79:57:08:77:0c:83:5e:4e:a5:39:e6:68:fc:b2:1c:
d6:fb:61:8a:ec:b1:09:32:63:f1:0b:4a:75:c7:84:
6c:c4:d7:d2:40:50:71:9b:e0:a9:2e:a7:37:c8:48:
a0:5f:f0:d3:eb:7c:a5:d9:b0:6c:6c:4f:cc:f6:f9:
8e:01:39:dc:6d:9b:31:d2:5b:58:75:67:76:12:cd:
43:5e:bb:73:92:f2:a7:a5:6e:4d:2b:2a:f1:eb:e4:
37:df:4d:20:a6:39:e8:b4:37:bb:45:7b:d3:d6:ec:
f5:09:70:97:a4:97:f6:da:26:78:ca:f1:ba:56:2b:
1c:63:40:1f:12:49:e4:42:3b:3e:65:af:6b:15:2d:
5e:7c:65:8c:4e:3e:fd:5e:8c:ed:12:fe:d5:c1:9a:
96:3c:82:27:e5:3b:39:cd:ad:b0:89:47:ad:1b:0f:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FC:86:CA:72:FF:FF:63:CE:B1:84:66:40:E2:D5:4A:23:5B:AE:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E97F99C8DFDB11EFAEE918BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.162.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9e:03:27:c2:b2:c0:e2:ec:53:db:b9:db:b9:e0:4c:78:2b:
e2:51:99:c8:53:bf:f5:92:6b:2b:09:ba:88:42:e5:81:15:d8:
f2:78:b4:2b:95:43:7d:d5:53:5c:aa:14:7b:44:26:18:eb:47:
70:36:1f:aa:8b:f4:ca:2f:f1:3a:10:7a:fa:15:23:4c:9d:2f:
8e:cf:41:59:ab:ab:1d:8a:ce:8b:ab:88:97:54:98:39:53:59:
11:02:d7:7e:18:1c:c5:76:ef:cc:5c:c9:6d:cd:5e:ea:43:27:
65:4d:de:72:bb:e9:1b:2b:1f:d4:f7:04:90:79:8b:d3:d2:9f:
2b:35:22:e8:fd:fb:a7:8c:e0:68:94:14:4d:66:79:d3:8a:16:
a4:c9:b8:06:e9:6e:3b:3b:c6:b9:10:b4:88:a3:50:93:2c:8b:
11:3f:c5:4f:fc:4b:8b:05:88:5a:18:65:52:40:d2:27:a1:3e:
f6:34:72:68:4b:f8:28:f4:14:7d:6a:1f:c1:ae:70:a8:cc:0f:
49:8b:bd:0e:49:1e:50:a6:88:4d:30:84:c0:99:f1:7f:de:33:
ef:f9:d0:eb:02:1e:fa:56:5e:8e:d0:c0:5f:22:31:40:45:29:
e3:1c:da:8f:8d:b8:af:2d:81:7c:94:24:b1:11:21:54:c7:71:
aa:c2:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:00:32 2025 by rpki-client