Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3718828F5BE11EFA1270999762E951A.roa
File: D3718828F5BE11EFA1270999762E951A.roa (raw, json)
Hash identifier: H8Ml7SUSac07EeQF+scQ7YSDHz9dEnO9ESR5bNVxcXc=
Subject key identifier: 68:79:59:8D:72:16:EB:3D:9C:23:D7:51:EB:A6:AF:41:AD:6E:29:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013D11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3718828F5BE11EFA1270999762E951A.roa
Signing time: Fri 28 Feb 2025 10:29:01 +0000
ROA not before: Fri 28 Feb 2025 10:28:57 +0000
ROA not after: Sun 30 Mar 2025 10:28:57 +0000
asID: 138995
IP address blocks: 45.192.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81169 (0x13d11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 10:28:57 2025 GMT
Not After : Mar 30 10:28:57 2025 GMT
Subject: CN=67c18fed-0b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:4d:05:68:48:58:75:09:5d:0b:0e:d4:21:
df:6f:f7:c4:30:ce:7f:99:a4:d0:cd:9c:a2:99:9c:
5b:bc:ec:80:dd:b3:dc:76:b9:a7:04:7d:90:db:db:
76:97:30:d2:ea:a0:aa:89:8e:d1:bd:00:98:5d:18:
d7:e8:d8:11:17:b0:4c:2c:8a:29:e2:b1:7d:15:3f:
d9:65:4e:5d:a3:d4:c3:02:72:1f:0a:0d:a0:ce:0e:
70:8d:3d:62:2f:11:43:04:6c:4c:e1:6f:42:c9:87:
d6:7d:fa:7c:27:b0:a9:61:84:a6:e2:2e:5b:7c:05:
4d:e4:4d:57:d4:d0:29:05:50:89:41:73:68:be:a8:
f5:58:ea:14:ea:a7:44:16:ed:3a:d8:38:64:e7:9c:
9a:75:5e:ad:dc:6f:b0:ee:ee:d3:eb:9b:11:89:9e:
63:5a:16:43:37:54:6a:c2:2e:95:e8:72:4a:43:a0:
7c:f6:14:e0:76:49:5f:3a:81:7e:98:e8:38:3f:80:
7e:02:23:b6:eb:6c:4a:e8:48:a3:3d:cc:72:bb:c1:
89:f0:24:ee:b3:65:a0:50:58:d6:c9:9c:e1:43:6e:
dd:ae:b1:25:b5:5e:f4:0e:cd:23:4c:d5:09:f6:64:
20:8a:8d:67:94:6c:e1:4d:98:df:84:e3:9b:28:42:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:79:59:8D:72:16:EB:3D:9C:23:D7:51:EB:A6:AF:41:AD:6E:29:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3718828F5BE11EFA1270999762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
95:94:36:d8:40:55:63:b1:f2:36:66:41:1f:71:19:b2:9d:b2:
91:32:60:96:eb:6b:da:d1:10:48:9c:be:6b:45:48:56:37:56:
b2:9b:ea:ca:91:d8:c9:23:cf:09:a0:12:a3:b3:81:2f:59:b9:
7a:fe:1e:6a:61:ce:a0:00:f7:57:c9:bb:80:98:7b:71:09:f2:
12:a9:6e:ad:85:62:4d:e9:ca:37:39:a6:08:c4:5a:9a:fb:3f:
77:2b:93:b8:8d:02:25:80:d5:88:2b:81:46:f4:e0:93:06:7f:
be:6a:c9:34:e5:b0:4b:0a:48:4e:11:4c:33:cd:27:85:86:ae:
43:f0:71:01:6e:22:4d:15:3b:17:33:b1:e4:3c:5a:e0:60:6b:
ae:87:f5:e3:9c:73:32:a9:90:a9:8e:cf:8d:31:5d:95:36:df:
a6:e2:d6:c9:d3:6f:ba:5f:3f:ee:0a:74:ab:c1:8c:5f:95:fd:
f4:c2:7b:5d:fa:77:2d:e9:a3:09:ed:19:85:89:07:8d:7e:35:
61:58:2f:40:88:dd:99:d1:48:ea:7c:99:cc:98:a1:c9:93:b4:
14:a5:30:d1:c2:82:04:2a:57:9a:87:72:f1:8e:78:4b:91:dd:
7e:eb:f7:61:89:4f:b2:be:88:4f:77:f5:ab:b7:90:e6:a2:4e:
f3:72:e7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:19 2025 by rpki-client