Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6091B8CF80C11EFB8FE0B4C762E951A.roa
File: D6091B8CF80C11EFB8FE0B4C762E951A.roa (raw, json)
Hash identifier: w3oq7CqmlqsgxnIl8Nwzq0u6XIAyAEOl9Wv8+MkG6ig=
Subject key identifier: EE:B6:A1:D6:EE:34:6D:6C:AD:93:22:23:71:D7:D9:A5:32:85:31:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0140E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6091B8CF80C11EFB8FE0B4C762E951A.roa
Signing time: Mon 03 Mar 2025 08:52:29 +0000
ROA not before: Mon 03 Mar 2025 08:52:25 +0000
ROA not after: Wed 23 Apr 2025 08:52:25 +0000
asID: 203020
IP address blocks: 45.198.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82144 (0x140e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 08:52:25 2025 GMT
Not After : Apr 23 08:52:25 2025 GMT
Subject: CN=67c56dcc-7618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c1:e1:4d:6f:35:67:f9:01:35:ad:aa:6e:75:
3a:70:26:30:1d:35:31:24:e4:9b:28:2d:d8:b1:5d:
44:fd:25:ae:52:18:3a:a0:63:a3:1e:0f:31:0a:dc:
62:f8:96:8d:f8:d3:5b:b7:c7:27:67:88:aa:a7:5c:
08:56:1a:9c:20:8a:50:28:a0:c0:ac:dd:f4:51:d9:
08:4e:02:05:b6:73:7b:cf:cc:fb:a1:f2:67:73:6d:
8e:47:55:24:95:b6:2c:89:72:fe:f9:9b:9c:76:12:
ee:6e:6b:1f:51:e5:4d:55:9f:50:7b:d7:44:c4:83:
9b:48:ce:d6:b8:cc:3d:29:52:4d:02:f3:d2:ae:0c:
b8:ce:2d:ba:16:2f:ae:97:aa:4d:d1:e3:e9:f3:d2:
d0:93:86:ec:6c:45:2a:50:fe:8c:0e:4c:7c:7f:4f:
3a:ae:da:49:16:27:85:ab:ca:8c:bf:de:bf:32:dd:
87:02:2f:78:3a:38:d3:f0:c0:c7:bd:65:6a:c5:99:
78:55:94:e9:2c:83:74:ac:46:20:a5:a2:39:46:6f:
d2:91:5c:a5:97:72:14:cc:5d:78:a9:21:99:dc:c1:
cb:90:9a:bf:e7:91:2c:64:db:8a:f9:90:36:cb:ed:
41:64:36:e6:69:91:c4:fb:9d:55:cf:fa:80:3e:78:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B6:A1:D6:EE:34:6D:6C:AD:93:22:23:71:D7:D9:A5:32:85:31:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6091B8CF80C11EFB8FE0B4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.196.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:94:86:cd:03:9f:d3:1a:2f:b4:85:a8:d2:6c:0b:ac:78:23:
00:69:50:99:36:c8:5a:48:92:4a:bc:53:fb:e2:d8:53:b7:6f:
f7:af:1e:d8:8f:d7:fe:56:7b:c8:01:e6:25:d0:70:6c:40:19:
78:ad:e4:db:ac:86:1b:0e:ca:72:92:df:71:37:db:d9:da:17:
17:58:b5:f2:39:d7:ad:fd:47:64:d5:a7:2f:b0:ea:42:71:f9:
c3:61:b5:fe:26:4b:42:0f:f3:27:66:75:a6:fd:fb:74:d0:6a:
f2:2f:04:78:26:6d:e4:1e:eb:a3:74:4f:a9:f7:6a:e5:33:95:
20:db:f3:3b:7a:c5:35:d3:dc:e6:0b:72:5b:ba:7f:3c:f4:9c:
e8:d5:4a:58:2f:e8:32:1a:0c:de:db:a3:cc:96:44:be:f6:7b:
ed:ec:45:96:55:40:8e:01:a8:a5:fc:f4:74:2e:8f:4d:45:6b:
82:ff:b0:04:bf:e8:b3:11:02:8d:12:c3:e3:76:d6:80:5a:97:
53:62:7c:8e:52:d3:64:f2:0b:bc:ec:80:ca:ce:3f:82:88:6d:
a7:6d:d9:11:08:ab:07:83:f1:5b:3a:e0:0c:27:02:ce:99:92:
f2:83:ae:44:32:de:ee:f9:5d:b1:e1:bd:f6:2f:e5:d3:29:82:
f8:5b:73:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:07 2025 by rpki-client