Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C74B8DCF42011EF9DF8FE68762E951A.roa
File: 7C74B8DCF42011EF9DF8FE68762E951A.roa (raw, json)
Hash identifier: 0t+fU++U8gygM0+XJEdyvKUOzt6XBR5cAGtR7epVf6k=
Subject key identifier: 1D:CE:8F:EA:3F:0E:D7:06:95:24:58:B5:21:BF:55:7D:96:4A:7E:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013042
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C74B8DCF42011EF9DF8FE68762E951A.roa
Signing time: Wed 26 Feb 2025 09:03:04 +0000
ROA not before: Wed 26 Feb 2025 09:03:00 +0000
ROA not after: Sat 19 Feb 2028 09:03:00 +0000
asID: 17561
IP address blocks: 45.202.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77890 (0x13042)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:03:00 2025 GMT
Not After : Feb 19 09:03:00 2028 GMT
Subject: CN=67bed8c7-88df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:ed:81:47:a8:3f:3d:6a:01:4e:ac:87:26:
cd:08:ab:0c:f7:bb:04:30:9a:b5:0a:52:67:c4:6c:
d3:95:b5:2c:38:13:1b:0b:65:36:57:b2:1b:fb:b3:
65:a0:66:5d:4f:ca:85:e0:42:12:14:d5:32:e2:27:
a6:70:fe:48:02:7c:f0:c8:00:3f:c0:ea:39:8a:20:
63:07:60:39:ba:50:21:f0:a8:d4:25:23:2b:eb:c4:
8d:86:89:df:e7:08:3c:66:af:ab:c3:75:19:fd:98:
c3:98:25:c1:95:7a:53:28:00:5b:e0:d1:84:fa:1c:
22:df:d9:4d:ca:2c:17:4e:1c:ac:49:59:42:bf:35:
1f:87:06:25:7e:fb:ce:f6:ac:80:36:3a:38:29:21:
c7:8f:71:6e:97:f8:39:c8:a9:a0:85:a3:f2:52:02:
da:b8:7d:b9:c3:5e:23:2b:63:f2:4a:61:0d:43:99:
e8:c1:bf:7f:a0:26:81:f5:7d:2d:a0:82:a7:35:f5:
42:c3:16:c9:57:c1:09:a7:46:3f:52:f5:ec:7c:15:
b0:8e:be:e9:49:d3:34:8e:e1:14:32:11:27:b1:75:
b5:41:ae:bf:b9:b0:f5:fb:12:66:34:bf:9e:63:cb:
7c:81:fb:82:89:a4:b3:b3:ca:8d:9d:77:15:76:dd:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CE:8F:EA:3F:0E:D7:06:95:24:58:B5:21:BF:55:7D:96:4A:7E:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C74B8DCF42011EF9DF8FE68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.202.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:7a:02:93:4e:d4:35:83:59:45:35:92:29:9f:65:ef:df:bc:
47:92:60:75:94:33:78:d0:eb:0f:4f:a4:9a:4a:83:df:48:c7:
12:79:dd:7d:ad:c9:47:f7:59:c1:ba:ba:47:c7:d0:f4:4d:98:
ec:a4:70:92:d0:e3:25:ad:32:ea:b3:2e:f4:84:6f:49:b1:d2:
7f:f6:8a:1a:f2:54:ef:3d:60:d7:96:8d:0d:dd:7c:cb:d9:c1:
8c:00:08:e7:e5:d1:2e:77:5f:3c:ac:ce:7b:35:c1:6c:a7:f0:
99:4b:b4:4b:0a:85:50:2a:5a:59:65:df:89:91:7a:62:5d:f6:
d7:5c:2e:5c:3e:4e:66:17:72:35:28:c8:87:73:7e:c1:51:f0:
6e:9f:6f:21:3a:7e:3d:4a:b4:5b:3f:b1:b0:e7:a5:e2:45:48:
74:2b:3e:9b:f6:98:da:c3:76:17:7d:d7:0b:b1:17:42:6a:99:
f0:ba:a2:28:c7:3a:ea:ae:24:bb:75:8b:95:51:cd:33:08:7c:
86:1b:39:91:11:cb:25:36:a7:66:b7:e1:b0:bb:94:f4:21:80:
45:1a:13:e0:04:2e:df:40:a0:0b:8d:ad:50:49:19:0a:20:6b:
11:6d:c2:dd:33:4c:da:12:64:b1:d1:5f:bf:45:f1:ad:3a:af:
97:99:c3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:54 2025 by rpki-client