Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54C466D4F38F11EF82FB8683762E951A.roa
File: 54C466D4F38F11EF82FB8683762E951A.roa (raw, json)
Hash identifier: ZnT6gf/Upzr27mAzRhDEfOgGiK6PAwGtgeaZFtrRBSw=
Subject key identifier: B6:3F:F0:7E:52:0B:88:89:3A:98:C3:E6:BD:06:A4:18:49:5E:16:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E75
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54C466D4F38F11EF82FB8683762E951A.roa
Signing time: Tue 25 Feb 2025 15:44:00 +0000
ROA not before: Tue 25 Feb 2025 15:43:56 +0000
ROA not after: Wed 09 Apr 2025 15:43:56 +0000
asID: 63139
IP address blocks: 45.197.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77429 (0x12e75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 15:43:56 2025 GMT
Not After : Apr 9 15:43:56 2025 GMT
Subject: CN=67bde540-ba47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e8:c3:5d:88:f0:a9:68:fc:68:0c:3d:86:57:
28:b6:ac:85:55:80:b0:98:41:83:4a:f2:c8:06:3e:
97:49:97:64:32:19:45:26:a9:dd:f7:f5:c4:c3:fc:
10:be:8e:3c:f2:71:d2:70:89:a3:24:1e:6e:b7:be:
30:25:03:28:c0:e5:7f:54:21:de:4b:34:3a:cd:3f:
3a:c6:12:53:1b:9c:a9:46:44:78:fa:f7:3e:23:f4:
95:5b:30:91:50:28:1f:d3:a9:d0:ee:e9:33:27:be:
4f:47:db:5e:7a:5e:db:b3:3d:e1:c8:7e:70:36:e5:
78:09:52:ec:b4:ac:a0:5d:a0:c6:65:9a:7f:b5:46:
66:a5:9b:de:2c:ec:15:86:30:02:bd:70:19:fc:6a:
d2:ba:7f:1c:6b:4a:42:34:4c:61:aa:ef:d6:57:7b:
50:94:1b:83:31:f6:6e:79:f8:7f:42:c1:46:29:fd:
b2:4c:c7:e4:7c:9e:db:30:63:90:d5:36:c8:fb:f9:
da:5d:1e:a8:b4:b2:9d:bc:0b:15:98:c5:70:ef:a2:
f3:57:b3:ac:ea:4c:9f:d0:12:c1:48:79:ff:83:1d:
5f:82:90:11:61:1d:24:a5:1a:eb:f4:21:b5:82:94:
91:86:54:3b:83:01:3e:8e:fc:70:74:1c:e6:0b:b0:
5d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:F0:7E:52:0B:88:89:3A:98:C3:E6:BD:06:A4:18:49:5E:16:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54C466D4F38F11EF82FB8683762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.103.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ef:6a:96:d8:0b:0b:7d:11:2f:01:2e:18:2d:6d:85:91:7f:
23:4b:44:24:ca:97:62:0d:37:dd:5a:a1:0e:da:71:b6:84:83:
78:43:93:ac:fe:8e:3a:47:c6:6a:a2:83:64:db:73:51:9b:f4:
7d:a0:f0:0e:75:e5:e9:2d:3c:5c:01:44:b8:74:d8:0d:91:18:
73:95:79:85:db:c1:89:61:73:44:2e:bf:6d:95:9e:9e:9e:bd:
0c:e1:d7:23:1f:59:9e:c5:d4:fd:d3:8b:a2:ed:2d:9c:52:73:
bf:05:bf:88:91:38:80:a8:43:fd:27:b8:fb:0d:3b:66:29:a8:
31:84:71:ce:74:eb:22:0b:5f:30:80:56:ab:5f:dd:8b:57:a0:
e8:89:0a:40:46:a9:77:d1:28:d6:83:68:ca:88:64:7e:6a:4f:
97:ec:6c:a8:a0:f5:2f:de:46:09:40:67:e8:8b:1b:be:7c:8d:
be:00:00:74:30:b0:6b:90:58:4f:a7:f0:b8:f6:b3:54:a5:51:
54:83:66:97:ce:c3:60:bf:15:38:d2:a1:73:d6:e4:2f:96:35:
63:04:c4:73:07:eb:23:39:5b:a7:0d:ad:97:fb:f1:31:b2:78:
78:4d:32:67:61:71:18:c6:64:b1:eb:cc:8d:5c:56:a8:ef:19:
4e:eb:2c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:54 2025 by rpki-client