Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAB19BA2058111F0844AA661762E951A.roa
File: BAB19BA2058111F0844AA661762E951A.roa (raw, json)
Hash identifier: TpsWQfuIjrobQ6kIXGz7pYmo6ntukw2L0gAs9195cMc=
Subject key identifier: 15:9C:EF:50:11:B3:9B:E6:FE:70:A7:7D:4E:B0:A1:39:22:74:88:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014744
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAB19BA2058111F0844AA661762E951A.roa
Signing time: Thu 20 Mar 2025 11:51:59 +0000
ROA not before: Thu 20 Mar 2025 11:51:55 +0000
ROA not after: Sun 27 Apr 2025 11:51:55 +0000
asID: 9304
IP address blocks: 45.196.250.0/23 maxlen: 24
45.196.252.0/23 maxlen: 24
45.196.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83780 (0x14744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 11:51:55 2025 GMT
Not After : Apr 27 11:51:55 2025 GMT
Subject: CN=67dc015f-ba60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ca:d5:57:02:55:e5:48:80:3c:f5:a3:74:da:
a0:c7:0d:23:cc:f1:a1:2e:97:3b:cd:07:f2:b1:0b:
62:fd:16:59:b3:26:cb:f3:9e:e4:46:4a:e2:3c:27:
cc:4a:7b:81:d4:07:c8:85:f6:df:b3:bc:8e:0d:51:
62:16:79:c0:b5:7f:76:1b:cb:3f:10:82:93:6b:19:
33:c7:34:29:b5:5d:d3:1d:d8:e3:72:93:d9:44:01:
d0:97:e4:39:f0:b0:98:18:ec:04:2e:11:55:23:67:
d1:ff:23:92:7e:65:10:a6:cf:aa:d9:c9:fa:c4:2d:
75:49:27:79:f4:ea:f8:ca:3c:ca:eb:60:69:a8:ca:
bb:b8:fb:79:f5:36:9e:2b:52:ea:7c:1d:b0:11:46:
ca:8b:0c:b7:e7:bd:e6:d9:3a:4b:64:ed:8f:f6:bd:
d6:1c:df:6d:2e:d4:3d:cf:ce:25:a9:82:19:51:b8:
8b:ad:f7:55:03:ff:fb:d5:64:f5:29:1a:a9:70:8c:
fd:c5:90:a0:1a:f4:bb:bd:4f:93:4b:dc:6a:48:c3:
df:09:96:69:80:96:36:7c:b9:83:f8:66:23:ae:f0:
d4:c8:ee:86:5e:d9:38:28:77:72:a3:1c:b0:08:14:
85:c5:e9:19:fb:b6:90:97:d7:56:4f:7e:9a:cc:7b:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9C:EF:50:11:B3:9B:E6:FE:70:A7:7D:4E:B0:A1:39:22:74:88:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAB19BA2058111F0844AA661762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.250.0-45.196.255.255
Signature Algorithm: sha256WithRSAEncryption
39:2d:b0:f3:c7:0b:d6:a1:7f:d1:b2:67:33:22:e1:96:cb:7c:
63:7a:02:e2:ed:43:88:f1:b1:c0:ac:c4:a2:8b:88:f6:ab:d8:
bd:0c:f3:31:bb:9d:ec:a6:95:78:79:87:7a:66:f6:52:b8:9f:
cb:5f:46:9c:52:6d:c3:1d:72:87:90:86:c7:47:fa:60:eb:61:
6e:b9:fa:6d:4a:1d:05:a2:39:27:96:48:03:a7:78:99:a3:13:
fd:93:eb:d0:36:cc:e3:0d:3e:07:81:9c:f6:f2:ca:72:94:5b:
1a:ce:59:3f:32:ef:a8:2f:db:42:f0:05:42:ab:e5:7b:46:4a:
66:67:a2:a2:47:ef:c2:a9:83:5f:c5:09:a8:db:02:16:d8:bf:
dd:d4:8b:67:2a:d3:18:53:6e:3b:39:b4:d3:d6:81:50:97:f6:
be:5e:42:e0:0a:2b:c6:78:a8:ac:c4:80:d3:4e:4e:72:14:92:
e3:20:0d:d9:34:52:86:5f:ea:75:f2:85:56:c7:ef:a2:d7:9a:
f7:7c:8d:f9:54:60:45:2c:b8:2c:0f:76:49:4e:16:b5:79:fb:
95:d5:69:ed:7a:a3:83:cb:e9:e5:54:ca:15:58:8a:86:7e:e2:
be:75:d0:1e:6b:75:dc:96:79:de:7d:5c:e3:e1:58:0a:e3:0c:
50:93:c1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:57 2025 by rpki-client