Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DC42188F43E11EF8F3C8DB6762E951A.roa
File: 1DC42188F43E11EF8F3C8DB6762E951A.roa (raw, json)
Hash identifier: MtrpDLmYKyBKaikICqxit3kYhYPoSpJ/WONd/d6UAj8=
Subject key identifier: 6E:E9:CE:F6:46:61:7F:C6:EA:D5:33:75:73:05:CD:5E:71:5A:A4:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01328D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DC42188F43E11EF8F3C8DB6762E951A.roa
Signing time: Wed 26 Feb 2025 12:35:10 +0000
ROA not before: Wed 26 Feb 2025 12:35:06 +0000
ROA not after: Thu 19 Feb 2026 12:35:06 +0000
asID: 984
IP address blocks: 45.206.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78477 (0x1328d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:35:06 2025 GMT
Not After : Feb 19 12:35:06 2026 GMT
Subject: CN=67bf0a7e-7cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:1e:8a:cb:77:48:f1:4d:cd:5c:f6:fb:4f:
a2:47:74:7c:e9:b0:43:9a:f7:2c:92:3d:73:07:e9:
9b:dd:dd:23:29:2c:cb:a3:ef:16:cb:5f:90:af:d4:
0d:06:b8:78:10:a1:86:b2:b4:a1:0f:a0:81:a6:67:
85:c9:20:42:db:a2:1d:5b:bb:e1:9a:38:9d:8e:39:
ba:90:9f:6f:6d:6c:2a:1c:7d:a6:07:db:29:2c:f2:
cd:73:b6:25:70:55:0f:8c:38:b0:95:11:b5:4a:bf:
16:be:bc:19:66:85:b1:c0:dc:84:43:e7:9c:fe:00:
69:72:c2:ba:70:e9:a3:f8:99:4d:4c:7b:85:5c:42:
b3:dd:c9:b9:23:f4:c0:b1:97:7b:e1:ea:d0:1e:4a:
b7:c4:ff:76:49:11:28:5b:bb:2f:2b:50:a6:5f:52:
78:9d:bd:09:b6:d6:1c:33:00:5d:d7:06:d7:83:05:
fd:05:75:c9:22:74:69:84:48:09:9c:de:ae:df:71:
6d:b8:b6:66:d1:06:65:ee:0f:2a:60:04:81:bd:96:
d5:0d:e5:59:1a:4a:15:b1:bb:38:15:a6:cd:69:c0:
d8:2b:af:cd:00:96:26:7c:f2:fd:2c:ec:a6:b4:d4:
04:ae:79:77:c3:94:62:fa:1d:13:42:44:93:9c:f2:
84:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E9:CE:F6:46:61:7F:C6:EA:D5:33:75:73:05:CD:5E:71:5A:A4:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DC42188F43E11EF8F3C8DB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.16.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a5:67:23:5c:67:96:2e:a4:7e:ab:81:52:1d:b2:b6:70:e6:
bc:23:91:a8:f1:ab:44:6a:9f:36:f0:53:cb:25:57:91:f1:21:
c3:9f:10:2a:61:84:11:61:81:3b:59:a1:2a:fd:a4:24:bf:95:
6b:0e:9a:fd:cc:f6:eb:b5:5e:6b:40:74:bc:68:ce:47:6a:db:
f0:76:f0:a4:eb:17:68:52:96:2d:2b:d7:f6:22:d6:20:92:2a:
56:d8:de:8d:95:02:b8:f6:d8:c9:d2:79:59:a9:be:90:2c:3c:
2c:6e:4c:f1:b8:1b:73:69:59:4a:52:85:5d:30:3c:06:45:f1:
0f:f1:33:7f:0d:39:f3:a9:f6:06:0f:14:ed:ab:3f:cd:8b:d5:
94:87:df:51:aa:ef:f8:0d:be:a9:27:33:65:a2:7b:b6:94:82:
bc:d3:6a:65:f8:94:ee:99:ed:91:f3:49:9f:9d:7a:8b:1e:6a:
e3:8e:24:d0:36:f7:b5:7f:29:2a:cb:ef:08:d0:a3:5a:72:42:
ee:26:41:1b:23:5d:09:78:56:fc:34:e4:fc:2a:64:fe:fe:fa:
61:5b:59:0f:88:ed:71:7c:f2:ab:cb:69:b6:07:90:0d:b9:17:
0d:e1:f8:1d:d1:05:fa:4d:76:50:ca:d2:3b:c2:92:eb:a6:74:
14:40:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:03 2025 by rpki-client