Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C726C3CF38711EF8E48C74B762E951A.roa
File: 3C726C3CF38711EF8E48C74B762E951A.roa (raw, json)
Hash identifier: bWGbyEnTh//Jnd0p1B/pEtYWLf7EbM2dYDDF1BarLeI=
Subject key identifier: C0:B4:FE:43:5F:3B:79:82:32:D8:BF:88:F2:D7:10:99:F8:9D:3E:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E3A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C726C3CF38711EF8E48C74B762E951A.roa
Signing time: Tue 25 Feb 2025 14:46:03 +0000
ROA not before: Tue 25 Feb 2025 14:45:59 +0000
ROA not after: Wed 09 Apr 2025 14:45:59 +0000
asID: 63139
IP address blocks: 45.197.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77370 (0x12e3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 14:45:59 2025 GMT
Not After : Apr 9 14:45:59 2025 GMT
Subject: CN=67bdd7ab-7793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:42:f2:56:47:32:21:b2:2f:b6:21:89:06:
91:00:96:1d:dc:ac:93:c4:7b:ed:b3:16:f7:9c:6a:
2c:26:a4:19:7c:85:0a:c6:81:bf:28:c7:7b:73:aa:
87:f1:48:c0:6d:b7:5b:f7:87:d7:26:bf:e5:d8:0a:
ad:77:52:22:92:35:e5:9f:ce:4c:2b:40:dd:69:07:
8d:ca:5a:0f:33:83:74:80:4a:e8:6a:06:4a:73:ab:
7a:4b:16:57:02:ed:3c:34:32:35:5c:0f:c3:71:af:
3f:eb:46:30:6b:e3:2b:0a:ce:1a:a9:65:86:14:b2:
07:f7:17:59:f3:33:b7:7e:15:20:eb:fe:ac:17:4d:
26:6f:e8:55:3d:c1:bf:ee:aa:41:e3:ec:52:21:52:
ee:59:c3:7d:ae:b9:6f:22:b6:47:5d:d4:c6:a5:18:
d7:0e:6e:59:8f:bb:81:bb:bc:6a:61:4d:27:18:9c:
59:26:81:6c:7e:ab:b9:0f:c6:d4:d7:19:0e:87:10:
20:be:b2:fb:14:5d:6a:ef:c0:87:47:dd:a8:6c:0b:
b9:ac:c4:46:26:3f:cf:5e:a2:3f:04:d1:fd:64:85:
e3:90:a2:a0:74:49:0b:43:40:4f:01:39:57:1e:00:
78:24:2f:85:ce:21:50:eb:f9:0d:a0:6b:52:08:2c:
5a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B4:FE:43:5F:3B:79:82:32:D8:BF:88:F2:D7:10:99:F8:9D:3E:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C726C3CF38711EF8E48C74B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.89.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e9:90:34:b6:67:da:c3:81:6a:d3:1d:cf:90:07:61:6d:e3:
dc:6c:95:4f:e3:c5:3a:77:f1:8d:2d:1d:2e:cc:27:80:f6:25:
87:fe:a9:58:35:f6:fa:50:61:8f:76:31:f5:2f:b1:4d:8f:5c:
82:9b:14:9e:85:cc:39:53:c2:8e:e0:79:79:cb:d5:61:af:f9:
cb:56:69:1f:c9:b8:c9:b9:5f:1a:b1:8a:e6:5c:51:4c:46:d5:
54:cd:66:7f:4b:32:8b:e3:d4:03:12:2b:ed:0f:a8:c8:35:0b:
16:38:84:5e:f9:7b:09:9f:37:b3:ea:a0:4b:78:c9:84:1d:f2:
9f:f9:7a:0a:6d:f8:d9:75:44:e9:75:1f:8b:e0:6c:fb:39:6a:
7d:ec:03:9b:3e:f7:94:48:38:fc:18:cc:c1:f9:11:80:59:ee:
7b:74:77:dc:82:74:5b:62:7f:c6:14:76:7d:d2:ca:db:74:3e:
14:e4:25:42:eb:2d:7c:67:c2:51:7d:5c:2c:f1:7c:b6:fb:b5:
ec:d9:2a:d9:b8:d4:2a:e9:93:9f:3d:29:51:98:4e:6e:e3:49:
e3:31:81:89:f8:b3:2e:62:91:97:e1:93:fe:5e:5a:09:e7:eb:
5a:ce:55:33:58:6c:3a:09:11:fc:3f:ad:86:e9:1f:f8:76:0a:
06:19:5c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:09 2025 by rpki-client