Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6AAEED6E55511EFA040C8B1762E951A.roa
File: D6AAEED6E55511EFA040C8B1762E951A.roa (raw, json)
Hash identifier: 4x/KhNr5lLO+Ouc2BArBrXvu5peIwrkjvyJq/ssyOAI=
Subject key identifier: AC:4A:0D:D1:6D:66:0C:A8:B1:FE:61:11:A9:CB:BE:6B:B9:D0:19:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6AAEED6E55511EFA040C8B1762E951A.roa
Signing time: Fri 07 Feb 2025 13:17:11 +0000
ROA not before: Fri 07 Feb 2025 13:17:07 +0000
ROA not after: Wed 21 Jan 2026 13:17:07 +0000
asID: 984
IP address blocks: 45.195.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73134 (0x11dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 13:17:07 2025 GMT
Not After : Jan 21 13:17:07 2026 GMT
Subject: CN=67a607d7-a6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:7f:5a:ea:e2:72:5a:00:ae:76:fe:a3:3a:
4b:ef:02:72:8d:ec:3e:f3:6d:0b:4f:9e:5f:6c:13:
33:c8:75:94:31:cf:06:df:17:8a:8b:22:0a:e2:01:
77:ed:cd:64:d2:b8:d2:68:54:7f:29:4c:08:28:68:
0f:57:5d:cc:4f:bb:75:2d:a7:b1:2f:6c:ab:44:87:
e6:1c:01:c1:a9:73:0d:30:4a:8b:38:7e:72:75:cd:
d0:51:e1:34:ce:c9:3d:a5:3f:79:7b:f0:aa:24:6d:
31:9c:72:09:c6:14:d6:e3:8b:73:07:0a:a1:da:62:
72:f2:be:0d:57:85:16:c3:c1:b8:7a:4f:82:6e:2c:
39:59:77:46:81:25:9c:ef:ba:7b:26:7d:ca:a1:5d:
a5:84:b4:4e:cf:7b:3c:31:17:eb:5a:97:0a:66:db:
5d:b7:48:68:82:5c:1b:b5:49:41:f7:99:75:0a:fb:
c7:9e:4e:33:3c:3d:72:64:db:81:7a:37:7f:e6:19:
a9:68:3a:fb:f7:44:42:dd:ba:48:fb:0b:ea:bc:a8:
1d:62:57:2f:2d:64:5f:43:84:68:09:3a:4a:c7:b9:
82:d0:fd:54:e0:8e:76:22:03:a2:a2:57:19:a9:01:
03:16:a1:76:96:46:e8:13:2c:f9:3b:8c:c8:dc:65:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4A:0D:D1:6D:66:0C:A8:B1:FE:61:11:A9:CB:BE:6B:B9:D0:19:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6AAEED6E55511EFA040C8B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.149.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:98:35:f6:fb:29:4e:94:0a:35:07:c8:08:41:4f:98:f6:d1:
8a:42:f1:c5:aa:27:0e:42:15:55:4b:13:30:9c:0c:d6:a6:3f:
f5:12:d9:3b:73:e6:b0:b1:e1:33:60:49:ac:49:c7:18:e5:3b:
34:4f:12:81:a2:9e:90:0f:db:be:bf:f4:03:86:ab:4e:83:b6:
d4:49:0c:8e:f5:db:6c:16:80:e7:df:ab:fc:dc:79:f8:59:4d:
55:a9:40:c5:13:d2:b9:63:c2:85:c3:9d:d4:af:f8:56:1e:c1:
7e:18:a1:ce:55:fd:bb:10:e4:26:64:0f:1a:2e:e7:87:42:3a:
24:cd:22:3a:04:a3:9b:aa:cc:d1:fd:4c:18:0a:54:69:3d:66:
1b:3e:7c:4b:c2:be:4a:0e:53:4a:5d:04:54:94:51:f4:71:15:
d4:df:bc:b6:da:a4:f2:9a:5c:c4:90:61:25:da:5e:03:9b:1f:
3a:90:1b:80:11:84:15:20:e7:50:a4:06:8b:68:f2:2d:3a:f1:
08:75:12:f7:50:c9:90:71:27:50:65:81:12:2c:9e:f4:55:f0:
0e:8c:e2:2c:a9:00:d4:05:c8:7f:b2:28:86:20:28:e8:f2:7d:
67:4d:26:6a:f1:84:76:8f:f7:23:b6:8e:3f:0d:ac:f3:71:77:
1e:dc:5f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:54 2025 by rpki-client