Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/155C25FEE54D11EFB1E17F77762E951A.roa
File: 155C25FEE54D11EFB1E17F77762E951A.roa (raw, json)
Hash identifier: ydL34RIe9QYIAy910BF/Gi4bdCBRrpn70EG3KyZ6wy4=
Subject key identifier: C3:A2:2B:71:E2:42:8F:C1:AE:AB:15:33:DE:B8:82:FD:6D:D5:CA:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D5D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/155C25FEE54D11EFB1E17F77762E951A.roa
Signing time: Fri 07 Feb 2025 12:14:31 +0000
ROA not before: Fri 07 Feb 2025 12:14:27 +0000
ROA not after: Wed 21 Jan 2026 12:14:27 +0000
asID: 984
IP address blocks: 45.192.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73053 (0x11d5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 12:14:27 2025 GMT
Not After : Jan 21 12:14:27 2026 GMT
Subject: CN=67a5f926-0c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:ef:05:17:f7:e0:d5:05:36:e7:d5:7b:81:
8e:4c:dc:3a:4f:16:2d:d8:64:17:94:6a:f5:89:86:
c0:94:d7:50:c0:aa:0d:f5:62:06:59:99:33:ff:26:
b9:c4:90:a2:7e:bf:1c:ff:8e:98:e7:d8:ff:06:bc:
71:90:81:10:84:31:b9:9f:7c:8a:c4:92:74:03:aa:
9c:27:e6:d1:71:b9:5b:cb:2a:1d:cb:85:79:89:20:
8b:64:01:e5:9f:1f:22:7e:9a:90:e9:49:81:89:ff:
54:b9:97:cb:71:2d:8e:94:52:60:e7:8c:bb:1c:b8:
12:f2:3d:ca:c9:56:51:6d:27:ea:0e:87:61:95:c9:
a6:40:d3:4e:6f:60:b5:74:dd:84:12:bd:f1:ad:d2:
ab:0f:18:31:d0:29:9e:53:0c:09:f1:0f:e1:74:00:
a1:d4:bc:37:64:f8:2d:15:f0:9c:37:0b:e8:80:fe:
c1:4e:43:79:80:f9:13:87:ba:ee:82:c2:d8:3a:42:
bd:d6:7a:e9:92:31:57:ee:19:f4:92:bb:7e:9b:14:
16:ca:a9:2a:37:9d:85:60:16:59:75:11:fa:62:a4:
ec:0f:c5:8b:33:35:ff:d7:b5:59:c5:0e:86:85:41:
91:5f:5a:a3:6e:7b:a5:c2:db:f8:09:21:d0:ac:c7:
43:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A2:2B:71:E2:42:8F:C1:AE:AB:15:33:DE:B8:82:FD:6D:D5:CA:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/155C25FEE54D11EFB1E17F77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.17.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d3:d4:05:6f:69:fa:a4:dc:42:f4:e8:69:a7:fa:e1:f2:b8:
7e:66:fc:b2:05:c6:1b:c7:ef:3f:57:fa:90:fd:10:94:68:f5:
1f:56:67:79:97:89:6d:4e:17:39:e1:74:f8:c7:4d:19:00:8f:
7e:1a:50:8e:78:da:96:54:84:d9:ab:71:5c:77:35:1c:e7:b1:
a5:2c:8d:f5:fb:40:82:28:cb:ee:a0:6d:94:4b:2d:f0:e4:c5:
7a:d2:51:38:a1:a8:30:aa:3c:0d:14:e7:9d:ee:ec:46:93:38:
d2:34:e2:f6:86:55:2d:69:40:2c:aa:26:4b:1c:3d:c7:66:77:
da:d6:af:8d:c4:e2:7f:b8:a4:03:46:4e:a6:36:02:73:af:87:
cc:ad:31:61:f5:ab:56:88:b1:bb:d1:0e:3e:02:ba:54:6a:0b:
97:f1:d7:35:be:19:bc:17:66:b9:6c:14:f0:00:69:29:ef:44:
df:f3:21:e5:dd:c8:fa:03:e2:b2:f8:f2:21:d9:38:f6:25:9c:
cb:be:cc:ff:73:8c:67:c2:19:05:ea:82:22:f0:38:e9:4f:bb:
ef:ac:e8:15:69:84:aa:f5:d6:2b:9b:78:57:c4:05:d5:1a:b8:
0b:8f:72:cf:cf:cb:c1:73:b1:70:bf:e0:10:80:e3:9b:7b:07:
30:a0:65:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:02 2025 by rpki-client