Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E823E90E93C11EFB846C193762E951A.roa
File: 7E823E90E93C11EFB846C193762E951A.roa (raw, json)
Hash identifier: usECl+IRP/9jbBbwg54ZDgNh/OhMnRY8jU92hB/5/lY=
Subject key identifier: 65:2C:96:3D:1B:E6:26:BD:35:7F:4B:F7:6F:4C:37:3D:03:F2:17:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012199
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E823E90E93C11EFB846C193762E951A.roa
Signing time: Wed 12 Feb 2025 12:25:50 +0000
ROA not before: Wed 12 Feb 2025 12:25:45 +0000
ROA not after: Sat 14 Feb 2026 12:25:45 +0000
asID: 20473
IP address blocks: 45.203.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74137 (0x12199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 12 12:25:45 2025 GMT
Not After : Feb 14 12:25:45 2026 GMT
Subject: CN=67ac934e-6d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:31:95:4b:60:f0:b1:ce:06:06:93:1d:53:
ed:66:10:57:ce:72:2f:e4:6b:ad:4c:9d:8c:21:f4:
28:1d:7b:95:17:b1:1a:86:a1:5d:4b:4f:16:88:dd:
ab:69:bb:a6:df:86:61:9f:79:c7:d2:7e:7c:d8:27:
16:63:5e:d3:04:c9:a7:b9:a2:b7:43:8a:8e:a8:6e:
c9:21:c9:1b:15:13:9c:92:ca:d6:a9:de:08:c4:e4:
50:bc:a1:40:70:d8:f1:74:8d:52:c5:24:87:f2:7b:
90:79:38:1b:60:5c:f4:08:62:8e:7a:d5:cf:cf:b5:
8c:c7:a7:1f:af:fc:58:ab:89:37:f7:05:d7:75:fe:
82:af:61:b3:8a:7d:4b:05:64:55:3d:54:2c:c5:16:
36:ab:1f:72:7c:77:ce:e3:f9:77:9e:47:f0:4f:79:
44:e5:d9:07:6f:2c:ef:10:88:c5:d2:7d:e4:e7:86:
8f:3d:0a:49:b6:00:aa:ae:59:ba:fc:ac:ea:b5:3b:
93:c7:cc:d6:ea:3c:1c:c3:69:11:1a:0e:2b:6d:0e:
f8:4f:62:4a:e2:8b:ad:1d:7f:9b:25:0f:da:1c:e1:
84:63:d6:25:90:f0:bf:2e:7f:e4:94:55:86:98:be:
1b:c1:02:5e:e4:22:c8:84:c6:ed:af:b8:2f:a1:1c:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2C:96:3D:1B:E6:26:BD:35:7F:4B:F7:6F:4C:37:3D:03:F2:17:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E823E90E93C11EFB846C193762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.32.0/24
Signature Algorithm: sha256WithRSAEncryption
58:57:01:d0:f8:18:9e:6b:7d:e0:3f:97:59:8f:7b:cd:2b:62:
1c:f4:1a:fb:62:4a:47:19:8a:7b:14:50:80:a9:7a:c8:ac:a8:
b5:49:05:6b:17:13:1d:33:5d:28:9a:eb:c6:39:dd:39:bf:98:
c5:69:11:ca:08:ee:12:23:00:78:80:85:a7:7a:ea:4b:ad:01:
99:88:09:47:d3:d1:f5:3e:29:da:97:a3:53:66:d0:be:e5:81:
95:41:41:0b:7e:43:d7:c6:d1:58:e3:79:5b:dd:c1:ee:8e:95:
e2:54:99:56:e0:f5:e4:c5:1d:7d:8a:0a:40:42:22:f6:c6:4f:
3f:2b:b0:fe:cc:90:41:11:c5:ee:c9:04:9e:32:33:e1:86:5a:
46:9e:26:16:d2:27:17:57:be:6a:54:97:7a:f4:f0:8f:8c:ed:
0d:aa:ad:3e:15:26:a3:7d:e6:9f:2d:8d:ad:cc:c4:d2:8d:a8:
79:9f:c9:13:3b:4d:5a:f2:78:96:c3:3b:be:2f:d5:04:40:54:
3c:1d:ac:5d:d0:00:4a:89:10:fb:4a:2d:9d:3b:14:38:6f:ce:
89:c7:ac:10:d8:27:07:e9:70:51:c8:63:3e:49:97:45:6c:6f:
f3:67:47:86:42:d1:7a:3c:fb:d6:d1:4e:c4:93:a6:ae:16:36:
b3:d0:1a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:44 2025 by rpki-client