Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3EA4BEEDB5B11EF969B7B61762E951A.roa
File: F3EA4BEEDB5B11EF969B7B61762E951A.roa (raw, json)
Hash identifier: 5ZSrwXoLlRuWy/TqLWuJ3j2W105hX53f//ypsS2rmS8=
Subject key identifier: 65:46:38:C4:B0:02:0E:41:98:23:8F:8D:D8:DF:DB:D3:23:CE:CD:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011311
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3EA4BEEDB5B11EF969B7B61762E951A.roa
Signing time: Sat 25 Jan 2025 20:35:45 +0000
ROA not before: Sat 25 Jan 2025 20:35:41 +0000
ROA not after: Sun 09 Mar 2025 20:35:41 +0000
asID: 138915
IP address blocks: 45.197.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70417 (0x11311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 20:35:41 2025 GMT
Not After : Mar 9 20:35:41 2025 GMT
Subject: CN=67954b21-423f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a5:a9:24:a9:39:68:76:b6:9c:0c:8a:0a:fa:
8e:85:f7:53:21:5c:9d:58:fb:ec:11:e0:74:c7:19:
c8:65:e1:00:22:c3:42:e1:02:a0:d1:99:00:7a:43:
32:a2:fa:3b:3a:2b:2e:9d:f3:a8:cd:ed:1b:ad:bd:
8e:e0:ff:bc:15:80:c0:fe:8d:29:b0:fc:f0:6d:8a:
2a:60:96:66:e1:b3:79:0f:55:eb:50:54:05:55:60:
ae:c8:43:1b:12:f0:20:f5:da:96:c7:e5:65:70:74:
ec:41:72:17:46:11:c5:63:12:50:5b:c8:c0:f6:7a:
e7:8d:8a:f0:a3:d2:6b:30:17:45:dd:ef:94:d4:db:
44:46:16:4d:26:e5:53:a2:6d:c4:0f:3e:ac:a5:1f:
4b:85:c9:69:d5:9a:ba:7e:3b:dd:0a:ec:a2:9a:99:
af:0d:36:de:88:1a:c3:ef:73:d2:ae:95:01:6e:8a:
96:dd:73:ab:4f:4d:e7:1e:62:04:40:3e:5e:44:b4:
15:6b:3d:4a:e6:08:47:95:05:af:3c:3e:39:33:9c:
20:e9:93:9a:90:c8:cd:69:f0:d4:13:7a:36:ee:39:
bc:59:11:5f:0c:7a:11:e6:9b:65:c0:e6:a0:65:12:
c3:e6:b2:c8:8c:de:34:a4:36:26:0e:3d:0d:e0:07:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:46:38:C4:B0:02:0E:41:98:23:8F:8D:D8:DF:DB:D3:23:CE:CD:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3EA4BEEDB5B11EF969B7B61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.106.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:bb:f1:8f:ca:29:78:66:3f:a5:aa:3a:db:fe:60:50:0d:b5:
e3:5d:78:0c:99:7b:a1:30:af:00:ac:b9:00:89:06:34:9b:4b:
34:cb:54:a7:bd:45:ad:5e:5b:ff:ed:64:52:08:0d:28:2a:79:
b1:07:3c:a1:2d:8e:2e:5a:fa:13:31:92:16:f2:52:64:de:e3:
d6:8e:74:87:13:32:09:c2:3c:cc:e2:fe:50:45:46:16:d8:78:
4b:2d:24:da:6c:a2:f6:ca:55:63:5c:b8:da:97:f2:18:29:dd:
1f:6d:53:7c:37:ff:f5:f2:56:fd:97:e8:17:3d:d2:09:97:0b:
3e:22:73:8c:8e:7e:36:a6:f2:4f:0c:c9:77:58:1d:6e:89:0c:
f6:6c:e5:22:0b:ba:db:d8:3c:53:cf:45:fe:1f:93:cf:37:01:
36:a8:f6:41:3c:e9:e8:32:6e:2f:bb:0b:61:e8:da:dc:b1:b0:
c1:f5:67:f7:fb:9a:59:11:de:48:1b:5a:ab:e6:8d:51:cc:19:
9c:48:9c:c0:a4:57:5f:ef:d0:51:8f:5b:fe:bc:43:1a:be:9e:
57:08:10:0e:c8:cf:7f:9a:c5:f5:14:8e:35:8b:d9:6b:f4:2f:
2a:93:c1:73:49:aa:62:24:60:83:f9:69:d5:f8:a2:dc:2f:38:
6e:c3:13:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:42:50 2025 by rpki-client