Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED47BFA0DB5C11EF8545B86A762E951A.roa
File: ED47BFA0DB5C11EF8545B86A762E951A.roa (raw, json)
Hash identifier: o0pAQgYhNPaTgXGvl5Kmw0w9SI0llGFGY5oyZekXu6w=
Subject key identifier: 9C:05:45:9C:41:77:10:74:57:6C:1E:E3:6F:3F:9A:09:6F:BA:49:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011317
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED47BFA0DB5C11EF8545B86A762E951A.roa
Signing time: Sat 25 Jan 2025 20:42:44 +0000
ROA not before: Sat 25 Jan 2025 20:42:40 +0000
ROA not after: Sun 09 Mar 2025 20:42:40 +0000
asID: 138915
IP address blocks: 45.197.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70423 (0x11317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 20:42:40 2025 GMT
Not After : Mar 9 20:42:40 2025 GMT
Subject: CN=67954cc3-1143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:d9:e7:1a:02:b0:c7:a4:67:86:32:1c:20:
5f:c3:2d:d1:6b:02:94:93:d2:3e:50:68:88:90:e7:
84:39:11:6f:1b:39:22:cf:65:b8:93:92:da:eb:67:
93:a5:c0:65:52:91:e7:2c:aa:cd:e2:86:e4:e9:b1:
c8:38:2e:0c:2a:6e:ed:14:51:fd:52:ce:35:92:ff:
a9:89:ad:c0:7c:b0:84:02:68:1c:98:eb:55:9d:c6:
28:cb:d3:f3:75:fd:79:3d:90:08:1b:ba:1f:f1:b3:
d4:4d:ed:da:5b:cf:17:d7:4c:87:4d:a3:aa:6b:35:
2b:f5:05:c9:e0:41:2a:88:f3:e6:2a:dd:1e:ad:84:
34:60:43:16:d9:0c:15:8b:4b:82:e9:18:51:5d:29:
02:1f:28:0b:5f:96:5b:95:3c:8d:33:70:55:8b:d3:
19:45:bf:6c:9c:64:e4:98:7a:6d:3e:0b:30:91:4b:
4b:86:7c:c4:e8:ed:2a:e8:9b:1d:35:86:9f:a9:65:
19:2e:03:36:7a:e6:1d:11:98:40:c2:d6:49:4c:e4:
7d:7b:b6:cd:38:84:18:a4:e4:c7:33:4e:aa:31:05:
3f:02:4b:25:5c:66:0d:99:86:7b:fc:fd:ea:44:17:
52:2f:30:a8:f3:85:09:3c:39:9b:df:e2:49:53:09:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:05:45:9C:41:77:10:74:57:6C:1E:E3:6F:3F:9A:09:6F:BA:49:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED47BFA0DB5C11EF8545B86A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.75.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4f:91:26:0a:77:11:c4:3e:06:30:a2:ff:da:44:d9:77:92:
2a:89:e0:a3:9e:90:c9:70:3c:5d:5c:a8:2b:3d:e2:87:d4:87:
44:16:be:21:36:f3:cb:d3:5b:c6:5f:66:35:df:cf:d8:f2:e4:
0a:ae:af:67:ed:cf:b9:a9:b0:c6:5e:60:49:aa:cf:46:8d:9b:
3d:a4:c0:74:d6:a8:52:54:60:7e:77:05:f6:b9:3b:ba:bb:1b:
10:e1:29:9d:6f:e0:f2:18:94:4a:09:3d:f2:a3:bc:5d:6f:48:
cd:9d:f6:08:46:27:36:04:c7:8f:be:19:b2:b3:02:71:f9:e2:
80:52:f5:85:ef:6f:dd:54:e2:eb:72:47:63:1d:19:73:f3:f7:
a5:56:b7:bf:49:20:6e:46:dc:80:cd:02:a8:38:fe:d4:6f:be:
29:80:94:97:f6:2d:88:95:e4:6c:a4:80:ca:6d:62:a4:69:8d:
5a:7e:d8:31:51:49:e2:32:6a:3b:7c:df:ed:12:91:71:9e:1d:
4e:db:ee:1d:ce:46:7a:4e:6b:07:a6:d0:02:21:4a:7d:f2:0b:
86:5e:30:b9:1c:44:fb:b9:65:17:83:c9:dc:3c:1c:eb:b5:22:
34:38:f7:19:2b:de:b8:a0:8f:fc:88:99:af:3a:d4:c2:02:1b:
44:e8:92:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:55:25 2025 by rpki-client