Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6006FBAE058411F0B77A4272762E951A.roa
File: 6006FBAE058411F0B77A4272762E951A.roa (raw, json)
Hash identifier: 1NUVC8Ceo31vkTKQcNg+BTJDW91xwQNzdTp0/tf9bEo=
Subject key identifier: AC:E2:CD:22:8C:45:A0:71:51:DF:16:FB:93:5D:1C:10:13:BE:AF:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014755
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6006FBAE058411F0B77A4272762E951A.roa
Signing time: Thu 20 Mar 2025 12:10:55 +0000
ROA not before: Thu 20 Mar 2025 12:10:51 +0000
ROA not after: Sat 26 Apr 2025 12:10:51 +0000
asID: 202662
IP address blocks: 45.196.248.0/24 maxlen: 24
45.196.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83797 (0x14755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 12:10:51 2025 GMT
Not After : Apr 26 12:10:51 2025 GMT
Subject: CN=67dc05cf-22f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:9f:b2:ea:58:05:74:cc:f1:7a:63:df:02:
44:49:84:9b:b8:d9:36:3c:3b:26:4d:f9:0f:fd:a9:
54:21:79:c4:16:bd:96:50:e2:57:06:72:eb:6a:98:
6d:9f:1f:14:e8:d5:50:0b:cb:a0:18:db:9e:1d:cc:
9c:6d:d7:9a:4b:67:40:cf:b1:29:f2:10:e7:08:d5:
ed:eb:3c:dd:58:d0:6a:6c:18:f6:49:98:c8:f2:1f:
f7:b3:73:b9:9e:29:35:73:14:f6:34:0f:1c:18:ff:
d7:01:63:8f:89:14:16:d0:ee:14:6c:1d:1e:8e:69:
3c:a9:b5:8c:71:96:1a:ab:0d:d1:a4:e1:ad:81:37:
ed:17:22:74:dc:5c:1e:77:7e:c0:69:a8:d3:6a:26:
29:6f:34:47:7e:75:b2:cf:8b:e5:15:38:a8:26:b6:
61:72:e1:79:c8:5e:ef:2a:2b:10:a6:71:e1:fa:65:
1c:02:ae:58:5a:80:bc:0c:62:55:fd:31:8f:a3:50:
ff:a1:5a:09:40:bb:6c:31:30:f0:b5:b0:8c:17:06:
7b:d9:04:52:f5:ac:84:41:a3:6f:42:97:8e:2b:b6:
b2:2f:ee:11:08:e1:c8:54:9a:aa:37:b0:fa:bf:4c:
3d:47:9d:5b:75:a3:a7:9e:d5:d6:fc:65:39:8f:e3:
88:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E2:CD:22:8C:45:A0:71:51:DF:16:FB:93:5D:1C:10:13:BE:AF:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6006FBAE058411F0B77A4272762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.248.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:2e:b9:43:de:bd:34:a6:38:06:c8:e1:f3:a8:6a:bf:a2:7d:
87:99:51:66:9a:95:c2:f0:76:ae:3a:6e:12:f1:31:d5:aa:e1:
6f:fd:cd:a5:bc:f2:54:79:20:94:45:04:9e:27:92:6d:7c:41:
f1:41:1c:51:6f:c5:00:2e:56:72:e9:62:2b:53:39:68:2f:18:
93:41:e9:3b:8b:b9:d2:48:8a:1d:c4:40:63:85:d6:62:1e:88:
4c:8c:88:76:bb:75:8c:0d:24:59:db:5d:c6:10:5c:bd:2c:a7:
6c:38:24:fc:37:29:55:d8:1e:a4:e0:c1:c5:ba:97:5e:a4:22:
df:5a:a8:c9:e3:7e:69:05:af:f9:99:96:ee:22:32:0c:5d:0a:
47:87:5e:9f:5d:7d:a1:a4:e5:8e:07:6b:4b:da:22:df:30:ad:
fc:8e:44:b8:82:06:3c:74:74:f4:d9:22:78:dc:d8:c6:dd:5d:
35:78:78:db:3d:df:7c:83:38:86:f4:ea:18:a8:6d:22:e2:d0:
92:1a:4c:a5:b9:48:a6:64:be:36:12:99:65:18:d9:7e:71:63:
45:5c:f8:9b:f8:94:73:37:2b:7a:19:8a:92:b0:e1:66:d1:05:
89:48:1c:b9:f4:1f:19:9d:64:1b:df:57:bc:6f:a2:d1:2e:ec:
ea:f1:b6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:25 2025 by rpki-client