Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D1239F8F46911EFB5954B66762E951A.roa
File: 5D1239F8F46911EFB5954B66762E951A.roa (raw, json)
Hash identifier: M/7Sq5lwkMDsQEDqk+fud8kGYwqXasi06V4XYu8KanA=
Subject key identifier: 30:C8:A7:E5:EE:E3:7A:E4:50:BA:25:0A:18:53:3B:D9:4D:B7:1A:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D1239F8F46911EFB5954B66762E951A.roa
Signing time: Wed 26 Feb 2025 17:44:44 +0000
ROA not before: Wed 26 Feb 2025 17:44:40 +0000
ROA not after: Thu 19 Feb 2026 17:44:40 +0000
asID: 984
IP address blocks: 45.201.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79312 (0x135d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:44:40 2025 GMT
Not After : Feb 19 17:44:40 2026 GMT
Subject: CN=67bf530c-e63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:bd:12:39:d8:66:88:4c:7f:24:28:51:5f:
21:18:4c:19:03:c6:15:ee:16:eb:91:c5:25:85:e2:
24:85:ef:17:1f:d1:b8:7a:a9:03:f6:81:25:cf:c7:
6e:0f:f8:d7:66:23:a7:84:5f:0a:08:46:78:07:1f:
14:34:b6:65:f3:e6:30:0e:a5:be:c3:96:bf:8c:08:
12:f4:a9:6f:47:73:21:e8:52:81:68:f0:d6:9e:f8:
68:5b:de:65:b6:2b:06:a3:85:81:f2:6c:2a:23:a6:
85:0a:46:69:41:44:bb:c6:a0:8e:a6:61:15:64:88:
88:6b:16:d2:6f:f3:c8:c8:9b:92:1a:b9:d2:67:6c:
10:15:6f:d0:27:26:05:70:01:82:36:2e:e0:da:84:
15:61:06:d5:4e:1a:9e:a7:02:14:6c:b7:49:07:28:
38:ad:cb:3e:7f:ca:a6:3c:c0:a1:4b:df:90:ab:cb:
bb:76:d1:f5:1b:0e:88:2d:5a:6b:6e:85:83:53:9b:
95:32:46:36:99:a6:0c:42:57:f8:3f:a8:a6:a8:5a:
99:bc:92:aa:a5:a4:e4:c9:99:81:3e:03:c0:37:2e:
b9:e9:bc:93:e9:2e:19:ea:52:1e:c0:8d:0c:60:1e:
a1:a6:1b:9d:63:ea:df:ea:5c:5a:95:64:c6:7f:30:
e0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C8:A7:E5:EE:E3:7A:E4:50:BA:25:0A:18:53:3B:D9:4D:B7:1A:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D1239F8F46911EFB5954B66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.51.0/24
Signature Algorithm: sha256WithRSAEncryption
56:4c:b6:d5:4c:c8:6e:66:0f:e0:d1:f1:38:19:89:69:8d:c9:
23:18:eb:3f:0e:a4:46:02:9a:b3:8f:23:56:3a:be:c4:60:34:
0f:76:c5:b8:3b:78:6b:e0:9e:bc:84:00:6f:0a:8c:30:51:36:
8c:17:77:5a:69:c3:2e:62:c9:0d:d5:7a:2e:e3:cb:4b:ff:05:
d2:e9:15:43:d5:27:16:6d:24:ea:af:7c:b6:dc:e7:fa:a2:99:
10:5f:35:0d:9a:4f:a6:d5:06:aa:13:3c:8b:42:5a:28:37:4c:
e1:63:99:c9:02:b5:20:e2:07:bb:fc:d4:3c:6a:95:d5:97:ad:
6f:42:4b:aa:e4:77:09:b2:38:6f:b6:3e:9b:a9:65:4f:aa:93:
28:68:f8:ca:8d:1f:d0:ad:25:38:c6:48:31:d0:f9:53:48:42:
70:de:4c:d0:8d:c9:17:9a:4f:7a:6d:7e:1e:32:d2:3a:2d:7f:
5b:50:8b:1e:6d:f7:a2:69:46:ca:9d:5e:54:6a:4a:a0:03:74:
a5:80:96:5e:fb:ef:56:0a:4b:16:22:e3:1f:cf:79:df:cb:67:
e6:87:0c:bf:c2:03:9b:6d:f0:e6:d5:28:1a:eb:83:fd:bd:c9:
6c:17:a7:f5:5f:1b:5f:6e:68:99:26:9c:1d:6b:ca:fe:a6:ef:
65:3d:ca:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:58 2025 by rpki-client