Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25BEAF70F42011EF92CAD664762E951A.roa
File: 25BEAF70F42011EF92CAD664762E951A.roa (raw, json)
Hash identifier: V83KN9vOH6be1MGzZO0zAb4VZOxlr30FmC/Mv7IaGuc=
Subject key identifier: 86:E6:E0:9E:F3:D8:D4:72:21:4E:1B:DF:ED:1D:15:06:C1:07:FF:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01303E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25BEAF70F42011EF92CAD664762E951A.roa
Signing time: Wed 26 Feb 2025 09:00:38 +0000
ROA not before: Wed 26 Feb 2025 09:00:34 +0000
ROA not after: Sat 19 Feb 2028 09:00:34 +0000
asID: 17561
IP address blocks: 45.202.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77886 (0x1303e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:00:34 2025 GMT
Not After : Feb 19 09:00:34 2028 GMT
Subject: CN=67bed836-117e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:3c:71:74:16:28:cd:5f:f5:cc:70:20:4f:
6e:d9:85:bb:31:d3:40:eb:93:e1:ee:83:09:8b:ba:
cd:90:17:42:22:dd:30:d3:2a:12:ac:33:cd:50:05:
a3:d0:33:2b:a8:fc:a9:bf:3f:11:a1:4e:2f:4e:14:
ae:e1:e2:34:f7:da:90:5d:29:61:65:14:ec:96:ec:
59:92:8c:0f:f7:e3:cd:db:a9:a4:0a:02:bc:9d:45:
e7:da:ff:fd:4e:84:54:79:3d:14:01:81:61:40:8e:
f9:11:b9:16:c6:1d:13:a6:a0:21:62:31:68:ed:5a:
36:58:12:fd:b0:eb:96:0b:ed:5a:c1:a1:39:70:57:
c5:7c:3e:bb:64:32:50:2f:ea:f2:b9:6b:09:fe:f7:
c9:a5:5a:47:f0:a7:bc:12:10:c3:75:35:9f:db:1c:
b4:5c:f6:0c:c2:e6:f3:2d:ac:f6:56:e0:48:8b:a1:
aa:dc:0b:f3:ea:37:32:06:54:37:f9:b5:3f:8a:82:
51:2e:90:a4:a6:f1:d6:9b:5a:4a:ff:24:91:90:9a:
7e:12:31:55:eb:46:0b:26:38:86:78:60:ac:9a:88:
21:4b:19:49:62:47:4c:28:d3:4d:bd:0d:33:fd:ce:
3a:23:79:16:68:09:ce:91:20:2a:18:1f:0d:3e:3a:
13:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E6:E0:9E:F3:D8:D4:72:21:4E:1B:DF:ED:1D:15:06:C1:07:FF:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25BEAF70F42011EF92CAD664762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.201.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ef:f6:89:b1:4c:71:92:28:9e:72:df:78:44:43:48:94:63:
d6:d5:3f:c4:09:6c:2e:cb:18:5b:be:c6:a9:ab:15:8f:81:dc:
65:cd:f8:f7:eb:bb:2f:af:5b:85:f0:9c:dc:a5:0b:e1:0f:93:
11:44:1a:25:4f:5d:15:9b:53:fb:61:13:7a:78:f8:a1:32:6e:
ba:f8:03:1b:ef:1d:b5:f8:72:e5:3d:8c:48:d9:51:4f:4d:11:
6f:03:44:7f:e2:72:a1:4e:43:90:f1:bd:bb:f8:6e:c6:b6:ff:
6f:60:89:b1:02:45:3c:45:47:db:a1:e3:87:f9:82:81:04:84:
68:12:0c:ba:34:45:0f:73:19:c8:03:25:3e:51:5e:d2:30:a4:
cc:fd:07:38:70:9d:35:72:b4:20:f8:0c:bb:89:d0:0d:5e:87:
0c:f5:9b:85:3b:95:dc:6d:7a:03:0e:7b:ee:8f:64:03:bc:f1:
35:8d:d2:b4:10:51:18:68:c3:f7:36:d1:74:0a:23:0a:23:b0:
95:55:59:1e:5f:32:57:0d:d2:5c:69:34:f1:5f:8f:0f:84:62:
7a:7a:72:cc:d9:33:7f:73:3d:fb:9a:b9:7a:fc:1f:22:97:23:
91:07:4e:55:b2:81:ac:c5:59:61:c1:e4:cc:ac:9c:8b:80:0c:
51:73:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:04 2025 by rpki-client