Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F53D4C4F43E11EF8E74A6B6762E951A.roa
File: 3F53D4C4F43E11EF8E74A6B6762E951A.roa (raw, json)
Hash identifier: tfghIY4ERdMlLDCVrp7u8VGPKW1WWJ8dZUgXnBcfq2U=
Subject key identifier: 76:95:5F:D3:BB:18:B3:30:81:1E:98:C2:49:F8:82:E3:86:95:64:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01328F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F53D4C4F43E11EF8E74A6B6762E951A.roa
Signing time: Wed 26 Feb 2025 12:36:06 +0000
ROA not before: Wed 26 Feb 2025 12:36:02 +0000
ROA not after: Sat 19 Feb 2028 12:36:02 +0000
asID: 17561
IP address blocks: 45.198.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78479 (0x1328f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:36:02 2025 GMT
Not After : Feb 19 12:36:02 2028 GMT
Subject: CN=67bf0ab6-7e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:ef:f2:2a:43:9d:bd:41:ee:92:d0:5f:c2:
3e:31:5b:3e:f1:f0:ea:61:36:c2:5a:a1:ff:66:e0:
ba:58:cd:95:d4:fb:65:32:97:40:e6:61:7c:97:f0:
6f:a2:af:50:ac:02:bc:60:bd:94:e2:03:7b:29:bf:
5c:b9:3f:95:94:6d:64:21:42:32:02:91:0f:1a:84:
ff:3b:ea:74:20:19:1d:83:cb:9a:33:32:dc:91:3a:
5d:0a:fc:28:86:7c:49:94:7a:a3:84:2f:eb:23:3a:
ea:e9:36:05:b2:fe:cb:9b:61:6a:bc:47:b8:e1:60:
6d:e0:41:c2:e1:34:a4:28:5c:d9:85:5a:8c:19:96:
78:fe:9c:0d:48:69:00:ed:b4:43:f5:e3:f1:b3:7e:
06:7e:36:e8:68:4f:1a:dc:68:d2:c5:d3:25:b9:72:
29:49:96:34:b3:61:24:c4:71:c9:75:44:2c:2f:db:
d3:b5:cf:e2:f6:3e:5a:a3:3a:e7:a5:02:ff:fa:c3:
86:4e:c7:94:6b:d4:6b:46:ef:76:1b:8a:7b:67:0f:
70:b2:f6:f4:69:45:0b:e0:3e:6c:55:d0:29:e4:b1:
bc:2f:5d:f9:30:8e:b2:f2:35:7b:9f:63:50:8c:36:
43:ce:8a:8a:4d:e1:d8:ed:8f:43:3e:cd:87:a2:ff:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:95:5F:D3:BB:18:B3:30:81:1E:98:C2:49:F8:82:E3:86:95:64:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F53D4C4F43E11EF8E74A6B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e1:ad:5d:9a:13:e6:2a:09:b2:c4:8a:21:54:94:92:1e:42:
ea:5b:dc:29:e0:e7:77:19:ee:c2:f4:a9:9e:45:9a:d5:ab:b7:
18:02:3a:d1:88:eb:2a:a0:75:d7:7f:bf:e0:9c:18:79:db:6e:
09:5e:77:a3:f4:7c:13:3e:aa:f2:63:99:bc:ac:dd:f5:46:02:
17:b7:ca:04:67:14:e5:39:b6:e1:c7:f6:d4:0d:3e:c8:72:65:
b0:4c:28:51:6f:47:85:62:67:41:63:d6:8b:09:d3:40:79:00:
74:2b:b7:27:74:b4:ed:fb:fe:aa:b9:b4:cb:13:72:a7:e1:ad:
c7:bf:4f:5d:7d:54:96:c0:e0:f1:69:ce:e2:8d:6b:ce:1d:fa:
85:3e:c0:a8:2f:63:66:9b:06:7d:b6:68:d9:e6:0e:ce:af:2e:
ef:73:ec:53:c9:cb:15:8d:9e:f3:a3:3e:f7:37:1d:bf:56:a5:
12:db:5d:66:21:28:49:07:63:55:4e:45:38:b3:e9:dc:65:fc:
aa:e4:c7:a3:4c:40:29:fb:d4:aa:fd:02:ca:95:a8:cb:3e:c9:
21:0e:2c:af:7e:e2:a4:3e:bd:db:3b:00:0e:e7:30:6b:96:94:
fa:b8:57:7d:0d:96:7a:34:c5:98:4b:fc:55:73:19:25:a5:56:
a3:52:20:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:27 2025 by rpki-client