Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/670716DCF1D911EFA971D180762E951A.roa
File: 670716DCF1D911EFA971D180762E951A.roa (raw, json)
Hash identifier: tY+Vx/XUFCmb5wgZnmxBTSHAHX4sdHFH0RKnFzfwuTQ=
Subject key identifier: 43:E7:82:FF:88:AA:85:E3:A7:5A:BD:15:2E:66:60:14:77:20:E5:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012ABC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/670716DCF1D911EFA971D180762E951A.roa
Signing time: Sun 23 Feb 2025 11:29:14 +0000
ROA not before: Sun 23 Feb 2025 11:28:43 +0000
ROA not after: Thu 26 Feb 2026 11:28:43 +0000
asID: 139056
IP address blocks: 45.195.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76476 (0x12abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 23 11:28:43 2025 GMT
Not After : Feb 26 11:28:43 2026 GMT
Subject: CN=67bb068a-2a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:88:29:62:27:1e:ac:77:79:6a:9c:15:88:
91:b2:15:d4:8a:db:a3:53:b0:2b:b9:b5:ac:cd:88:
98:d2:f9:1a:f6:21:e6:c3:a3:b1:47:77:43:cd:7b:
99:34:46:6d:e4:ed:8d:6c:f7:f7:da:1a:bb:57:c0:
7b:5b:56:7c:e4:fe:d8:2e:1a:62:ca:c6:90:35:44:
8b:90:9a:93:b1:3f:f9:33:24:c4:c6:8f:40:2c:ae:
7e:9c:03:d9:f7:f1:7c:09:d3:18:9f:66:a0:8d:2f:
4d:02:f2:9e:22:3b:49:d7:e4:bb:a4:bd:78:e1:0d:
13:a5:6e:b4:72:da:7d:b3:e3:3e:e0:c9:bd:80:a3:
29:98:24:1e:50:5b:14:18:b5:f8:7d:58:4d:77:39:
6c:31:78:c8:96:fb:80:72:04:1a:ec:36:f3:be:31:
42:8e:8c:1e:ec:b6:87:e7:a0:d1:68:84:e3:21:51:
a9:76:0e:c6:3a:c6:85:d4:88:22:40:d4:81:7a:b7:
7c:18:fe:8a:76:90:68:46:04:ad:08:4c:98:a3:52:
99:50:83:c6:76:fd:4c:fc:6a:d7:18:e7:d3:8b:3b:
b1:d2:08:ad:a7:da:91:c9:5b:b4:bc:dd:e2:e1:c9:
79:f5:e3:d2:8c:cc:f5:4c:20:20:5f:5f:12:6a:40:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E7:82:FF:88:AA:85:E3:A7:5A:BD:15:2E:66:60:14:77:20:E5:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/670716DCF1D911EFA971D180762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.70.0/23
Signature Algorithm: sha256WithRSAEncryption
68:fc:03:d2:da:71:97:0e:fe:6f:cc:59:c4:c3:77:5c:25:75:
64:63:a6:2d:05:c3:fb:03:a8:d8:51:cb:92:78:0e:3e:0e:6b:
24:25:54:9a:20:f1:6a:3a:7c:cc:ee:a5:a8:ed:77:41:a7:22:
86:04:98:f9:be:56:df:cc:cd:e6:b9:06:7f:17:67:39:b0:d0:
52:6d:d2:92:a0:7f:32:d4:f8:6a:ff:6e:eb:29:b3:46:d7:39:
da:b2:25:bd:23:95:82:49:b0:74:a0:4d:92:78:47:bb:b8:a9:
4e:c0:0e:51:05:31:5d:1e:53:96:88:2d:2d:cc:8b:b1:3c:4a:
6a:86:fc:0d:46:32:fe:ad:23:1c:65:dd:16:fd:c2:4f:9a:c9:
76:ca:1b:9e:23:76:58:0e:4a:55:d7:38:64:78:87:cf:b2:dc:
4b:b8:38:5d:2b:97:05:ca:3c:7d:c3:8d:0f:c3:1e:53:32:69:
66:7f:98:89:f6:8b:92:22:f6:a2:f6:22:54:88:11:d4:1b:fc:
09:01:af:40:c6:42:ff:77:bc:9e:bc:cf:aa:0c:43:5b:d1:e2:
ad:68:16:29:fc:4d:ec:ca:a7:33:82:76:98:e3:68:bc:2d:cf:
3a:66:0c:0f:a6:33:7c:16:8f:32:1c:a0:0b:08:df:6d:f8:6b:
de:7f:c5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:20 2025 by rpki-client