Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D265CE50F36411EF8C298B66762E951A.roa
File: D265CE50F36411EF8C298B66762E951A.roa (raw, json)
Hash identifier: CkDXlBgOq+3GdrvXie6BarbDGDG/4aD4rTXldE6Q404=
Subject key identifier: 7D:62:18:DC:83:5F:29:9B:BE:78:F6:14:82:9B:DA:19:A8:22:87:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D265CE50F36411EF8C298B66762E951A.roa
Signing time: Tue 25 Feb 2025 10:39:42 +0000
ROA not before: Tue 25 Feb 2025 10:39:39 +0000
ROA not after: Wed 09 Apr 2025 10:39:39 +0000
asID: 63139
IP address blocks: 45.197.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77354 (0x12e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 10:39:39 2025 GMT
Not After : Apr 9 10:39:39 2025 GMT
Subject: CN=67bd9dee-0a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:3f:5e:da:5c:5d:55:8f:3a:5b:ee:c4:9f:
96:d5:3f:e4:51:6a:6a:01:a7:17:4e:f4:2b:e7:ac:
e7:b5:88:a1:05:b1:a1:c2:45:b0:00:6c:e5:8c:c9:
17:7a:09:ae:a7:37:0b:5e:3c:7c:83:15:d2:68:91:
a2:65:c2:e0:c7:40:cf:15:46:43:0f:49:20:68:b2:
00:31:67:18:80:f9:9c:5f:31:14:20:72:ef:bc:19:
62:6d:67:9e:21:13:cc:a8:72:22:6a:1e:6c:67:52:
a5:0e:65:ed:c8:88:c5:b0:37:81:e9:a5:1d:b5:4f:
9f:c0:01:d7:64:34:7b:a0:64:51:14:04:cc:97:c0:
b2:fd:d7:ae:de:fd:f3:08:35:68:3f:3c:84:cf:f5:
87:86:d6:6c:98:f0:26:60:ee:13:b3:c6:e9:90:2d:
d0:c4:aa:4e:fe:e5:c2:4a:99:74:e3:4e:27:c8:18:
5a:df:ed:f8:47:a5:3f:fe:d9:c6:30:5a:26:6f:bd:
04:5f:aa:b7:df:d0:cc:f4:0a:ca:78:8e:2b:0c:08:
bc:8e:37:cb:58:07:2a:1f:47:a4:1b:5e:51:2c:c5:
07:04:8b:ed:f8:70:40:bf:2b:78:2c:86:e7:20:ce:
4e:2b:fc:7c:12:96:51:c4:ca:fe:83:8d:a4:52:4c:
97:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:62:18:DC:83:5F:29:9B:BE:78:F6:14:82:9B:DA:19:A8:22:87:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D265CE50F36411EF8C298B66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.83.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e3:2f:a3:33:cc:c1:70:3c:32:cf:e8:77:56:bc:66:9a:5f:
1e:73:e3:00:c3:a2:96:dc:c2:13:01:48:cf:3b:2e:f9:6e:46:
86:1b:c6:33:39:13:5d:fa:55:14:4f:a7:45:44:0b:88:b6:c8:
ab:29:e5:f4:c5:56:d7:44:6c:41:52:b0:d4:8c:97:cf:17:1d:
80:35:b6:41:29:a9:60:2a:4a:44:4c:42:f0:37:4d:89:85:ce:
5e:d1:f4:52:8a:9a:a3:b7:5b:34:77:a3:53:96:a6:bb:e0:dd:
a9:63:0b:d8:1c:32:94:83:7f:ee:98:90:07:15:b7:f8:3f:7f:
b6:01:f8:45:fa:1f:56:10:f4:f1:5b:58:a3:b2:25:18:5a:c4:
f5:1c:84:3f:bd:9e:ce:be:4d:35:08:17:d0:fe:94:4e:24:b7:
e1:fe:20:16:7f:ba:07:4d:03:f9:29:46:ac:9f:f0:1c:de:e3:
bc:35:52:f1:24:06:fb:34:2f:32:f6:a6:5d:f7:71:42:5e:0a:
cf:68:7d:0c:7c:e0:ae:6c:14:96:3c:b5:a4:ed:1f:37:29:5f:
32:81:d3:7a:05:cf:4e:aa:98:9d:c8:b1:47:10:33:63:b8:76:
0e:43:37:f2:51:48:9b:81:48:1b:bb:44:b5:7e:02:e0:22:5e:
2e:9d:3b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:31 2025 by rpki-client