Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2165FA3200B911F08E054298762E951A.roa
File: 2165FA3200B911F08E054298762E951A.roa (raw, json)
Hash identifier: jMtzECcrZdH3eMQ7i3TJKIJq+LaD7p1xEI1f/dIHK8Q=
Subject key identifier: 92:AD:D2:22:1B:07:D6:4F:A5:1C:3D:42:A2:55:2C:3E:EF:26:8C:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2165FA3200B911F08E054298762E951A.roa
Signing time: Fri 14 Mar 2025 09:45:58 +0000
ROA not before: Fri 14 Mar 2025 09:45:54 +0000
ROA not after: Sun 20 Apr 2025 09:45:54 +0000
asID: 61112
IP address blocks: 45.196.233.0/24 maxlen: 24
45.196.234.0/23 maxlen: 24
45.196.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83404 (0x145cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 09:45:54 2025 GMT
Not After : Apr 20 09:45:54 2025 GMT
Subject: CN=67d3fad6-1975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:df:89:9b:ed:92:d9:08:b8:04:61:f6:f0:
b7:b6:2d:84:59:a9:a3:e4:02:e8:e3:9e:23:b0:04:
02:be:84:b6:22:7c:d7:8a:36:af:4e:ee:bc:02:be:
c2:5e:b2:d6:7b:3b:9d:5f:15:30:9e:67:94:88:53:
6b:75:c4:ec:e1:2c:d3:e9:73:34:7c:01:bd:1b:37:
b6:9c:bb:4b:f4:ac:f2:78:19:e3:92:93:17:24:24:
88:46:46:18:68:0a:44:68:3e:bc:04:3a:98:32:f1:
63:e8:af:f9:7a:4e:ad:0b:46:4b:6d:0a:6c:d3:2c:
28:66:39:cd:df:d3:58:90:1a:69:c4:19:af:01:0a:
54:1e:95:c6:72:b7:44:f0:72:06:a0:9b:76:41:5f:
d6:c9:0d:d8:0d:15:ca:56:99:cb:af:09:bd:a1:85:
28:e3:0f:5d:26:e1:4a:25:bd:31:62:c0:13:fb:44:
ca:47:e8:68:82:be:15:7d:47:ce:d3:c9:fb:9e:9a:
c5:42:fe:3b:ab:c9:b4:9e:56:4b:4d:90:39:8b:48:
83:85:08:f4:45:4c:c6:d6:8d:31:f7:24:09:37:98:
66:3c:d7:8d:81:07:63:0a:6f:51:08:0d:29:3f:9a:
3b:a7:89:a1:f2:27:86:53:83:59:5c:ab:49:24:48:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AD:D2:22:1B:07:D6:4F:A5:1C:3D:42:A2:55:2C:3E:EF:26:8C:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2165FA3200B911F08E054298762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.233.0-45.196.235.255
45.196.240.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b4:5d:4f:c2:f5:5f:72:0f:f8:b6:90:34:fe:14:4a:2d:f8:
91:e2:0a:16:55:96:fc:d6:ca:01:7e:18:61:6f:e0:58:09:d5:
f9:ed:22:37:73:66:a6:23:99:40:6e:16:9e:e4:af:6e:53:c4:
ca:41:02:cb:ec:bc:87:b0:48:92:7f:54:8a:4b:46:12:a2:64:
87:e2:ac:29:b4:06:20:d5:68:53:59:1b:c5:80:ff:ce:e7:5a:
31:dd:b1:f7:24:24:05:ba:c4:12:16:c9:54:32:b0:1d:3b:08:
41:e6:ad:71:11:52:c5:f1:c3:8d:c0:3d:4c:60:07:5c:0f:7d:
e4:20:a4:c5:58:db:d8:1b:4e:40:e5:2b:88:81:ab:98:7a:c3:
5b:43:88:dd:ca:8b:93:55:4d:f4:e0:6f:f8:77:59:92:b5:72:
ee:48:45:02:eb:c8:1b:56:55:12:b6:b5:4f:b4:86:50:f3:76:
0d:c7:e4:cf:14:ed:2b:d5:26:b3:89:df:44:b9:e6:8b:04:5c:
99:02:41:4c:ac:2c:cf:14:6f:b5:11:6b:49:94:3b:f6:4d:27:
05:09:01:4f:dc:16:01:4a:cc:eb:93:b8:52:13:8d:6f:83:82:
07:f2:a9:cc:6a:af:e2:16:c7:e5:e1:ae:e5:d8:d8:26:21:ba:
d6:92:4e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:01 2025 by rpki-client