Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BF17890FF2611EF934B817B762E951A.roa
File: 6BF17890FF2611EF934B817B762E951A.roa (raw, json)
Hash identifier: jCKX+m4XLZTftcXJAwwz0Pj9l5AYuQCsjyDAQLgHxqc=
Subject key identifier: 48:4C:C9:E8:B3:CF:81:4D:97:8A:3B:72:18:68:6C:D5:88:29:3C:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01452C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BF17890FF2611EF934B817B762E951A.roa
Signing time: Wed 12 Mar 2025 09:43:16 +0000
ROA not before: Wed 12 Mar 2025 09:43:12 +0000
ROA not after: Wed 30 Apr 2025 09:43:12 +0000
asID: 399195
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83244 (0x1452c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 09:43:12 2025 GMT
Not After : Apr 30 09:43:12 2025 GMT
Subject: CN=67d15734-fb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:29:96:fa:e3:5b:9d:b6:69:1b:7c:db:e9:
be:84:4e:81:32:d2:a5:04:ac:3a:64:3c:b2:47:22:
31:50:c9:8e:51:20:41:3f:44:de:e3:11:45:14:3a:
6a:82:68:f6:e4:8c:68:45:68:d9:13:1e:57:e5:d6:
19:6b:18:5e:3b:bb:77:64:0a:b7:37:53:5d:39:5a:
90:a1:ee:07:6e:6e:d6:5b:46:fd:e9:66:12:2c:cb:
4e:cb:3d:52:29:ed:cc:2e:d9:2e:68:18:4b:9c:6a:
9f:0d:7d:8c:36:8e:ec:c5:32:c1:fd:fd:09:b9:17:
1a:d6:9d:58:72:05:f1:1d:d9:46:c5:77:c7:04:79:
85:bb:fa:39:16:41:f8:30:f1:03:9c:8a:42:52:80:
b7:e3:a8:10:ff:df:3d:63:5f:7b:65:c2:52:18:6f:
38:cc:40:f2:28:15:37:93:8a:15:76:26:4f:01:bf:
27:e2:52:a2:61:0b:a7:fe:e5:60:b0:28:b0:42:96:
b2:cf:b8:23:27:64:df:67:12:77:4f:cd:e5:c2:04:
7d:70:2b:a7:30:00:ab:50:98:e3:72:0d:39:77:2d:
39:3d:43:22:b5:d4:c9:e8:05:d2:b1:a7:be:81:46:
49:88:d6:1a:17:96:b6:32:3a:03:7f:b4:71:a9:ae:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:C9:E8:B3:CF:81:4D:97:8A:3B:72:18:68:6C:D5:88:29:3C:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BF17890FF2611EF934B817B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
74:1e:8b:c0:c4:c8:af:09:a6:5e:16:9b:52:73:11:59:93:8a:
61:70:ef:23:fd:9e:f4:30:b8:c0:c7:70:d9:5e:28:45:16:a4:
54:a7:1c:82:64:7f:d4:94:39:ce:55:9b:b0:41:67:2e:65:4a:
17:2d:3f:ea:c2:69:0e:9a:dd:fd:39:cd:6c:51:6b:e8:65:cf:
b7:80:04:58:d7:7a:28:3d:4a:e0:09:ba:be:ec:a6:42:18:01:
fc:73:fb:3b:bd:89:bf:f0:d8:9c:3a:27:b9:94:b6:e4:44:01:
b6:4d:cc:56:24:0b:ce:a6:a3:26:bc:21:fb:52:80:65:36:dd:
ea:62:df:01:78:9d:4a:5c:9a:8e:f4:95:62:eb:69:e9:ba:08:
e4:26:48:f0:c4:10:7d:ad:f0:60:3b:a9:1e:69:0a:c9:f6:fc:
fd:2a:d5:ee:32:91:e5:89:57:18:c4:69:ae:da:fb:5c:aa:81:
24:14:56:0c:61:ee:b5:c8:63:a7:39:6f:2f:c1:a0:e1:fe:88:
72:fa:60:5e:49:09:d5:91:82:b7:9c:70:42:28:82:93:23:b1:
a2:1a:93:5b:42:e2:5e:18:a8:0e:32:8d:cb:8f:1f:fd:8e:a4:
1e:2e:ca:8e:a7:01:a2:43:d4:ab:49:17:ea:19:ea:45:f6:b3:
70:9a:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:25 2025 by rpki-client