Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92D6FC0EF80B11EF9129D442762E951A.roa
File: 92D6FC0EF80B11EF9129D442762E951A.roa (raw, json)
Hash identifier: Um8iMcwA09EcKbwF/z4RTxJSR/JN3N6RtKx+q8QaJ2g=
Subject key identifier: BE:86:6D:A1:EF:BF:F7:7E:44:DC:AB:6C:B8:CE:5D:70:11:A7:9F:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0140D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92D6FC0EF80B11EF9129D442762E951A.roa
Signing time: Mon 03 Mar 2025 08:43:26 +0000
ROA not before: Mon 03 Mar 2025 08:43:22 +0000
ROA not after: Wed 23 Apr 2025 08:43:22 +0000
asID: 203020
IP address blocks: 45.198.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82132 (0x140d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 08:43:22 2025 GMT
Not After : Apr 23 08:43:22 2025 GMT
Subject: CN=67c56bae-55e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:3c:07:36:20:73:4f:23:56:43:70:c5:44:
8a:7d:33:01:70:d8:b7:0f:e9:09:6e:65:1f:c6:e4:
5b:35:b1:9c:b2:0d:17:7f:fb:78:83:11:4b:37:90:
76:db:34:04:c3:2e:05:d8:cb:3e:da:1f:74:aa:b2:
12:14:84:04:39:db:c5:ae:a7:1c:fa:19:66:c2:ad:
d4:a9:55:26:29:76:56:07:c4:72:23:9d:38:50:d0:
4e:32:45:7d:95:51:95:85:b8:80:df:32:eb:a2:18:
82:7a:27:87:38:14:07:0c:13:50:af:4a:32:ba:31:
82:75:54:d3:46:f9:0c:a4:22:d4:81:17:7d:e7:e4:
f0:4b:2d:c6:9a:24:d4:57:d7:e4:97:04:3b:c6:7b:
3e:5d:3b:d9:3c:7e:8c:a2:b6:e6:fe:b9:e6:ea:51:
9d:b6:8a:27:c3:3f:74:f0:d7:07:5f:cd:0d:38:6d:
33:86:eb:4f:16:46:35:fc:44:0a:cd:b7:01:cc:94:
58:09:72:71:e6:de:ac:61:87:37:ea:a2:d5:25:89:
a4:9e:03:df:bf:d6:cf:54:c5:62:93:a5:63:ce:6f:
66:76:c1:c4:cc:f2:5a:45:33:80:ae:e8:63:03:5c:
a8:a2:86:12:8e:fe:86:0d:5e:50:11:63:6d:c4:a9:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:86:6D:A1:EF:BF:F7:7E:44:DC:AB:6C:B8:CE:5D:70:11:A7:9F:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92D6FC0EF80B11EF9129D442762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.208.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:f1:94:80:21:67:a0:05:af:15:f1:53:a1:6e:4c:28:eb:ae:
8e:12:9c:d1:c2:65:ad:d5:4e:2f:3d:b3:4e:f5:06:0f:00:07:
5d:46:68:fa:55:b1:2b:45:28:9d:14:3d:db:79:8d:67:31:aa:
df:bf:9c:d1:84:40:d8:9d:8a:de:5c:af:86:4a:62:a0:b0:5a:
78:a3:69:36:de:ab:11:2f:43:0f:eb:be:a9:8f:97:7a:64:43:
e0:4c:3f:78:4c:98:9d:10:f2:87:67:9a:f1:01:18:7c:fd:13:
d1:75:62:12:47:1a:f4:91:e1:c4:42:44:89:a2:7c:6e:58:38:
99:71:9c:9d:2f:6e:b4:7a:83:f1:75:a0:a2:05:cd:fd:e5:41:
bd:77:ee:b5:d8:25:6c:2f:53:99:b4:4e:31:6c:46:8c:e3:05:
78:df:b6:e1:3c:77:cf:92:c4:fa:53:63:6b:b6:51:db:c6:ed:
f6:e9:2b:50:91:9c:48:64:fa:21:01:b1:eb:e8:74:32:cc:c1:
0b:bf:d1:40:66:c5:8f:39:c5:94:2f:0d:e5:1a:66:90:cd:f9:
2f:22:2e:74:72:66:2a:14:c6:98:e6:7c:b0:6d:1e:0a:fa:6d:
07:6f:f4:45:d6:27:f9:e4:79:3a:d9:8d:af:48:4c:48:af:6c:
2e:83:65:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:29 2025 by rpki-client