Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/391817F6FE5111EF9686C8A0762E951A.roa
File: 391817F6FE5111EF9686C8A0762E951A.roa (raw, json)
Hash identifier: 6vobkMXIuGq/3Thiz/aVneXaIqNVDXUNeBH6jbiUfGQ=
Subject key identifier: 1B:DD:74:46:D2:2D:55:9E:E3:10:0E:A9:D0:95:9F:61:D0:AC:E3:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/391817F6FE5111EF9686C8A0762E951A.roa
Signing time: Tue 11 Mar 2025 08:17:08 +0000
ROA not before: Tue 11 Mar 2025 08:17:03 +0000
ROA not after: Mon 14 Apr 2025 08:17:03 +0000
asID: 54252
IP address blocks: 45.199.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83169 (0x144e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 11 08:17:03 2025 GMT
Not After : Apr 14 08:17:03 2025 GMT
Subject: CN=67cff183-d7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:64:8c:48:c1:6d:03:c4:66:61:82:50:70:9c:
0b:c3:1c:47:ec:53:ac:59:11:9f:1f:80:66:0f:ce:
63:34:95:fe:55:f8:1b:b3:ff:e4:01:08:cb:e3:71:
4d:31:c0:72:47:59:3d:40:18:9b:6a:92:56:f3:d9:
64:cd:47:65:29:a9:cd:9d:16:d3:a1:72:c3:dc:2d:
45:9d:d6:14:4d:f7:16:57:8d:b3:b0:60:17:52:69:
74:7f:1f:db:5d:a2:92:a3:11:05:8a:d8:19:6e:bc:
e4:19:0d:0c:10:85:95:1d:97:f6:35:ea:fe:c0:7f:
c2:60:24:76:7e:2f:20:d8:ae:95:fc:8d:a0:d7:d9:
ee:7a:d4:f5:a5:4b:ad:e4:5a:3d:f5:d9:36:8b:a6:
8e:bd:8c:d5:88:3b:ae:a4:68:24:a1:2f:39:bb:6b:
90:9a:ef:c8:2b:24:d9:46:13:5b:0d:e5:2f:4f:81:
f9:27:77:75:42:0e:2b:ad:94:92:71:b6:03:57:71:
88:8f:6d:23:5e:4b:a8:01:6d:4e:fa:db:0a:6f:0e:
bb:b3:16:d8:c2:d6:a8:9a:1c:0c:f5:af:24:9a:0c:
d9:0a:9a:74:b1:d5:93:69:0f:44:32:cb:de:b8:fd:
5f:8f:d4:11:0f:1d:d4:ef:1c:a2:16:21:9f:d7:25:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DD:74:46:D2:2D:55:9E:E3:10:0E:A9:D0:95:9F:61:D0:AC:E3:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/391817F6FE5111EF9686C8A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:23:b7:0c:dc:cc:fc:47:95:ce:1a:dd:9f:c7:5b:90:e6:39:
9b:6e:61:3d:47:42:74:3b:f5:63:18:c4:1f:4a:b5:3e:51:fe:
2b:d9:30:3e:e5:27:65:47:f5:a8:39:8f:6b:32:c0:68:62:70:
61:69:df:46:b4:ce:cd:03:45:a3:31:04:29:17:51:7e:45:71:
37:4e:23:93:ba:27:45:44:92:93:ad:ae:53:a9:de:80:b7:40:
a4:f8:07:e3:ec:51:e1:69:0d:fc:f2:1d:08:f3:34:04:c7:ab:
56:74:79:7c:d8:60:ae:d1:27:9c:c4:8d:e3:ce:3a:f7:df:63:
e2:96:5d:08:c8:5f:dd:87:5f:df:6b:c0:f1:f6:3b:9b:25:ca:
cd:ff:e6:96:fb:f2:68:4a:3f:ad:7d:22:af:d5:77:86:c7:a7:
28:55:68:c8:a7:bf:eb:dd:7d:1a:6b:a2:5e:63:86:8a:35:30:
12:71:e3:58:d5:3a:47:3f:1b:f3:87:d5:e6:73:7e:7e:ce:b5:
c7:ba:81:91:f1:1a:4b:20:c6:b5:ee:90:cb:68:6b:69:3e:8b:
b1:95:9e:34:93:d1:15:02:06:85:29:a7:00:63:ea:55:c4:01:
94:7c:f8:82:be:8e:ad:af:78:a6:4b:65:c9:21:8b:3d:43:dd:
f0:f8:98:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:58 2025 by rpki-client