Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71257072F47D11EFB02EEE72762E951A.roa
File: 71257072F47D11EFB02EEE72762E951A.roa (raw, json)
Hash identifier: wB4AmzVos7cXXsfqYOG0+9Jv2hp6Qq51sCh4nIVLs+k=
Subject key identifier: A8:9A:4D:E0:A0:60:54:E3:A7:94:7E:7C:F5:3E:26:62:E9:A9:CD:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013761
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71257072F47D11EFB02EEE72762E951A.roa
Signing time: Wed 26 Feb 2025 20:08:28 +0000
ROA not before: Wed 26 Feb 2025 20:08:24 +0000
ROA not after: Thu 19 Feb 2026 20:08:24 +0000
asID: 984
IP address blocks: 45.201.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79713 (0x13761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 20:08:24 2025 GMT
Not After : Feb 19 20:08:24 2026 GMT
Subject: CN=67bf74bc-2167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:30:d9:39:10:5f:8f:1e:c5:eb:c5:a5:31:
ca:e1:40:5f:02:d4:78:98:ec:b5:81:01:ec:d3:69:
4b:2a:ff:07:ca:3c:eb:b5:45:18:6b:89:93:e8:53:
6f:95:78:10:41:ec:3a:0b:2a:3e:e6:15:ee:64:dd:
92:64:ea:f8:23:c5:04:24:71:3c:9b:29:c9:3d:00:
0f:2c:31:85:f2:2a:e3:fb:64:1d:e0:39:f8:7d:bd:
7d:72:3f:0b:0c:6a:91:91:83:df:f4:38:b9:5e:be:
92:62:b2:4f:54:87:1b:6e:3c:91:71:5a:7a:31:f2:
a0:02:c4:73:c9:db:6f:b9:27:20:f0:05:ac:dd:84:
87:bd:dd:8c:f4:76:c1:8f:49:9c:ed:a8:90:33:0e:
61:43:43:6e:44:6e:e5:48:29:a3:d5:9e:d4:2a:f5:
a2:83:e4:35:f5:13:43:db:0d:77:6e:9f:15:cd:9b:
2c:4d:ec:9e:5d:1a:1f:66:cb:c0:b4:09:35:cc:50:
90:50:21:c1:91:b2:0e:5d:27:59:4f:c4:28:d9:0c:
dd:19:ef:6f:f4:e5:1f:af:71:05:8d:c0:96:c7:4d:
45:56:86:a5:60:6d:a3:78:9c:fc:c3:de:ea:6a:7b:
51:78:0a:84:12:dc:5d:bf:96:2f:15:e3:dc:22:7a:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9A:4D:E0:A0:60:54:E3:A7:94:7E:7C:F5:3E:26:62:E9:A9:CD:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71257072F47D11EFB02EEE72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:97:d0:dd:e3:e4:93:da:60:ab:ad:95:e9:e3:fa:89:02:9c:
cc:44:70:44:55:d2:c8:8d:73:44:04:5e:95:cc:47:65:ef:ee:
2c:b2:09:d2:39:b2:69:45:30:bb:16:fa:da:53:c4:04:46:79:
9a:14:d3:c5:8c:be:ec:12:a3:9d:63:73:3d:9f:ff:40:2d:f2:
75:23:fa:82:2f:05:76:f9:b2:f1:d8:39:79:ea:73:76:28:e1:
4a:f2:05:74:b7:45:19:a2:9c:5e:05:05:d0:28:a0:29:48:ce:
44:77:65:9a:70:19:7f:d6:9f:ac:0b:44:4a:10:3e:e5:57:9c:
3f:1c:8a:45:33:0d:a3:e7:4f:a3:c4:72:4b:82:88:99:0e:79:
86:a8:2c:8d:05:24:34:07:fa:51:b6:09:05:4d:d8:83:2f:fe:
bc:74:f6:b4:3d:ae:f4:c3:16:85:37:c7:f5:bc:c4:e1:cc:51:
5a:00:0f:0e:cc:c4:77:54:2a:23:44:6d:07:14:9c:6f:51:ab:
a8:b8:d5:34:47:63:1e:80:f2:c2:86:7f:4e:78:8e:8d:34:14:
7b:72:ac:b1:9c:30:b4:7d:49:9a:02:b9:f7:87:c1:48:22:92:
b1:9d:b8:de:4d:db:16:0b:1c:9e:90:f7:98:d0:c2:16:7f:3d:
41:56:8a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:58 2025 by rpki-client