Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/311FD9CAF88511EFB4A7AD73762E951A.roa
File: 311FD9CAF88511EFB4A7AD73762E951A.roa (raw, json)
Hash identifier: KDgBdFVF1gjhy1YiFoet6oOvAw1XYOYr1x2H2A5+ATg=
Subject key identifier: B7:A9:94:0B:C6:39:D7:44:3C:29:3C:F9:C4:34:F5:0B:76:D3:34:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014281
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/311FD9CAF88511EFB4A7AD73762E951A.roa
Signing time: Mon 03 Mar 2025 23:14:01 +0000
ROA not before: Mon 03 Mar 2025 23:13:57 +0000
ROA not after: Thu 05 Mar 2026 23:13:57 +0000
asID: 138168
IP address blocks: 45.195.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82561 (0x14281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 23:13:57 2025 GMT
Not After : Mar 5 23:13:57 2026 GMT
Subject: CN=67c637b9-6f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d6:4a:a9:90:ca:f3:46:b7:e7:ae:f2:27:80:
79:88:6d:61:d7:46:e5:39:db:20:62:38:02:b5:d4:
89:82:b3:d2:7f:a9:1d:09:47:c9:07:84:d4:ac:7d:
21:62:9b:8d:5a:47:7b:3d:f8:79:7a:13:32:cc:80:
3e:b7:53:b7:49:a3:7b:2d:4a:d0:bb:c1:aa:aa:9c:
33:6f:ac:17:b9:9f:83:7a:61:29:06:f7:ee:af:f2:
a5:97:3f:42:75:08:02:0f:8c:8e:be:da:16:03:56:
3a:28:30:60:56:dc:10:e7:e5:25:35:9c:d3:86:ac:
ce:52:b5:6e:48:d0:01:06:8f:72:d5:1e:fd:91:67:
4a:73:63:80:57:9a:f9:dd:bb:62:bf:62:8e:dd:a0:
7e:16:94:86:71:b4:2b:24:fa:b5:27:30:6d:b3:ba:
ac:b3:41:07:84:00:fa:96:9d:ad:11:43:9e:80:3f:
fa:fa:f2:2b:88:05:dc:93:7e:99:a4:37:7a:6a:d4:
13:05:24:e3:81:1e:15:7e:b4:5d:c7:64:a0:5f:c2:
b6:c8:8f:ed:d5:76:00:07:78:a1:6a:71:87:15:63:
ef:3e:a5:cf:18:c0:97:f7:94:0d:89:2c:35:12:87:
a5:a3:bf:fe:97:b9:2a:b9:d1:15:1e:ba:99:bb:ee:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A9:94:0B:C6:39:D7:44:3C:29:3C:F9:C4:34:F5:0B:76:D3:34:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/311FD9CAF88511EFB4A7AD73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.81.0/24
Signature Algorithm: sha256WithRSAEncryption
70:73:5a:96:de:34:6a:5c:a6:96:86:84:27:9e:c0:f1:9a:0b:
9f:bc:d8:e1:0f:e6:d5:f5:98:b8:e1:c6:81:8c:93:52:ce:2e:
d4:8f:d6:cc:1c:64:7b:3a:8a:40:de:a6:51:f8:52:71:3d:9e:
ff:6f:7c:0b:2c:cf:84:aa:6a:e5:30:39:d5:6f:7d:71:67:04:
8f:34:fd:fc:f5:e0:21:ee:ba:3e:1b:59:8c:8b:9d:f8:3e:9a:
d3:ba:82:2c:fc:05:f9:aa:5b:9b:e2:f4:4a:cf:bb:5d:d9:47:
b4:ea:37:12:ad:ea:94:ce:e1:cb:5f:27:83:aa:ec:b1:34:95:
68:68:2c:47:56:b4:8c:fc:c6:c0:cd:fe:f7:76:24:8d:be:f7:
f0:94:46:82:5d:c0:51:ae:af:95:8c:82:32:3e:3c:47:27:5c:
3b:36:e0:02:f6:07:57:25:ec:0d:2c:f8:ac:7c:c6:cc:24:ad:
77:ff:24:6b:89:8f:3e:2e:7a:f2:30:35:d1:14:91:35:59:cc:
38:c8:91:61:bf:50:c5:df:93:9f:8a:68:28:e6:12:d1:d8:7d:
35:5d:31:3f:9c:6d:8c:70:f4:b5:83:b4:85:5b:de:20:0e:97:
54:27:41:8b:5d:39:ff:e8:b6:d7:e9:59:5f:b2:f3:e7:0f:3d:
19:7b:88:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:51 2025 by rpki-client