Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E3EE4CAF8F111EF8EC26A5A762E951A.roa
File: 0E3EE4CAF8F111EF8EC26A5A762E951A.roa (raw, json)
Hash identifier: RSPfTehVWfvQoj8YuBC3tn9aZ2yzywXKznh6tWncuJc=
Subject key identifier: DA:13:0D:8D:CC:5C:3F:71:89:F6:65:C4:47:4C:C4:5D:70:99:8C:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01430A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E3EE4CAF8F111EF8EC26A5A762E951A.roa
Signing time: Tue 04 Mar 2025 12:06:08 +0000
ROA not before: Tue 04 Mar 2025 12:06:04 +0000
ROA not after: Sun 06 Apr 2025 12:06:04 +0000
asID: 214049
IP address blocks: 45.194.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82698 (0x1430a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 12:06:04 2025 GMT
Not After : Apr 6 12:06:04 2025 GMT
Subject: CN=67c6ecb0-a21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:eb:fc:18:b8:c6:fb:ea:37:a3:05:65:3e:f4:
77:b9:43:0a:e7:96:43:86:e8:6c:fe:b8:3d:b3:d7:
97:84:66:bc:48:ba:cd:6b:45:83:40:7f:46:dd:e6:
4d:7a:6a:5f:0c:34:67:36:81:b7:96:1b:6c:af:cf:
f3:56:59:7c:8a:65:31:ae:4e:85:65:ee:79:c7:0a:
e9:aa:90:55:96:81:2c:c9:f5:d7:c9:44:0c:a9:76:
c6:69:bc:ff:f4:13:49:71:35:d9:0c:53:4c:7b:1b:
0c:c1:7c:df:74:a6:92:63:46:53:50:7f:4b:30:66:
02:c8:6c:b6:93:dd:93:f6:0f:28:4a:04:94:e4:4b:
f0:32:9e:24:10:e9:6b:38:79:b0:01:7f:b0:e6:22:
44:16:fc:80:e0:07:27:b3:00:cc:d9:f6:94:d1:40:
3b:0c:98:36:1c:ef:57:33:d7:22:d8:66:73:01:db:
2f:c7:72:8d:5f:22:27:49:28:9b:64:30:09:f9:b8:
8e:f4:7a:e0:8f:97:a5:04:21:96:b9:9a:75:fe:47:
61:75:07:3b:69:bf:e6:7e:b6:0f:46:33:b3:e3:96:
ed:76:5e:d8:fe:76:c8:02:cd:53:a5:eb:d8:31:fe:
06:9e:3e:4f:e2:73:82:1f:0a:63:ee:f2:fc:31:f8:
49:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:13:0D:8D:CC:5C:3F:71:89:F6:65:C4:47:4C:C4:5D:70:99:8C:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E3EE4CAF8F111EF8EC26A5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:40:99:6a:e2:41:66:20:a0:5f:fe:3a:77:9c:4e:b6:f4:79:
71:d9:16:3b:39:a8:78:16:59:4e:10:09:95:e4:3d:aa:58:3e:
b2:90:fb:b6:04:c1:b0:db:41:c5:4c:b5:e8:09:22:be:0c:3e:
f4:d7:d0:0b:c9:9f:bb:dd:f6:3e:6d:6e:88:af:31:45:fb:d0:
c1:26:30:4e:9f:b4:36:e6:f7:79:af:54:6f:b1:b3:f6:5c:03:
1d:a8:06:8e:07:45:73:97:bc:5d:a8:dd:c9:a8:d8:89:a8:41:
f4:fa:fb:ef:2f:bf:10:e1:f6:a3:ee:6e:b4:92:cb:7e:29:75:
10:d5:4b:ae:81:b0:5c:b6:7b:49:57:b4:10:8f:3b:42:a1:ff:
a9:48:ab:ea:e0:cd:c1:5c:77:7c:1d:a6:e1:78:e7:e6:01:c1:
76:88:fb:c1:db:8a:98:1f:40:f3:0f:67:5b:ab:ea:a1:9c:8b:
5c:d6:19:d7:e5:fc:00:de:b6:dd:eb:fd:7c:a4:e8:f6:16:6c:
fc:f2:a5:aa:a0:04:45:ee:89:5c:65:0f:90:41:e9:18:40:01:
33:8f:a9:c2:bc:cd:b6:5e:b0:d0:14:af:48:f2:b5:8c:f7:20:
6b:23:8d:aa:5c:1d:07:00:08:df:28:27:5a:c2:10:00:71:e1:
90:9a:f1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:03 2025 by rpki-client