Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9E75830F42011EF80A39E69762E951A.roa
File: D9E75830F42011EF80A39E69762E951A.roa (raw, json)
Hash identifier: YUwtDO5iNRbtbVQ//TiMSe8DXbJe0JNositeavMQ28A=
Subject key identifier: 1A:4F:00:21:65:83:E4:6E:DF:E3:BA:51:D6:88:0C:7F:E4:EB:1A:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013046
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9E75830F42011EF80A39E69762E951A.roa
Signing time: Wed 26 Feb 2025 09:05:40 +0000
ROA not before: Wed 26 Feb 2025 09:05:37 +0000
ROA not after: Sat 19 Feb 2028 09:05:37 +0000
asID: 17561
IP address blocks: 45.202.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77894 (0x13046)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:05:37 2025 GMT
Not After : Feb 19 09:05:37 2028 GMT
Subject: CN=67bed964-d72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:54:89:80:dd:68:03:49:a8:7c:31:46:8e:
9c:5e:59:e2:02:32:1a:54:68:d8:d0:44:67:88:ea:
bd:ff:1f:71:d9:1b:72:79:cd:63:00:f1:09:50:06:
aa:16:9e:7b:31:2e:f3:ba:f0:ad:1b:53:21:38:22:
0c:0b:f2:09:e3:3c:ff:78:06:ab:71:2a:54:b8:ab:
c8:f9:84:61:10:c2:2c:fd:6c:fb:67:25:7d:e8:04:
27:77:9b:5b:ee:25:2c:02:fc:37:cb:20:60:b0:37:
a8:82:95:73:0f:5b:3c:17:ae:5e:82:14:95:d0:43:
f5:dc:e5:74:e3:98:e6:53:43:eb:de:79:f0:d1:87:
ad:f1:07:df:f9:fa:3b:df:9b:3e:f0:94:e0:db:48:
c9:c2:a1:e3:ef:18:bb:f4:f0:b9:40:a9:6d:c2:f5:
94:d2:5a:43:ee:53:95:79:25:1b:e0:7d:09:6f:6e:
41:e9:90:5c:e8:46:d6:2f:bb:a5:b6:57:01:2d:67:
b8:c3:94:26:bd:d9:f4:0d:f9:53:33:0d:b8:e1:83:
a1:3a:98:c6:b8:68:d9:d1:d2:e1:de:cb:b5:49:8a:
04:38:5d:88:c5:ed:dd:8a:bc:45:a1:5d:f4:72:56:
58:53:b0:c7:48:d7:cc:5d:82:23:82:c5:40:0d:df:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4F:00:21:65:83:E4:6E:DF:E3:BA:51:D6:88:0C:7F:E4:EB:1A:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9E75830F42011EF80A39E69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.205.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:71:8a:57:6b:6d:66:ab:00:e2:48:cc:f7:59:6d:54:71:47:
78:a5:00:7d:e5:fc:e6:fe:60:cd:ba:79:ec:e4:35:a4:72:1e:
8f:12:5b:15:bd:33:17:b1:a2:a7:81:f8:49:b9:77:73:b9:ac:
63:5a:68:db:30:d8:b3:cd:c2:86:9b:e2:14:c9:0d:50:f8:7c:
18:c5:9d:ed:08:e7:1b:1f:d5:f7:a3:4a:78:1b:6e:11:37:82:
c6:32:11:75:ea:bb:d1:99:1c:4f:99:af:8b:ff:cd:45:46:1f:
c2:6b:31:7a:2e:69:70:99:1f:2b:32:12:aa:1c:47:3c:d3:e0:
71:43:93:3b:18:c9:ad:06:3f:20:3a:2e:69:43:3e:1b:08:c6:
8c:a1:a8:d9:0b:58:9b:13:ea:0e:ed:c5:05:0e:5b:f0:c2:ea:
fe:d8:ff:15:fe:72:e6:70:e8:59:e7:49:4a:72:84:1a:66:1a:
54:b9:94:85:6d:97:8f:e9:77:4a:11:ab:40:64:07:6d:7a:9e:
76:11:e5:5d:54:9b:d7:b8:ee:6e:22:23:6f:f9:cc:85:30:ac:
b2:d9:8f:43:65:9f:c2:45:9d:2d:8a:f8:49:fa:4e:29:f1:00:
84:47:52:64:7a:c4:48:61:54:92:a6:2f:6b:ae:6c:b8:04:6f:
b0:47:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:32 2025 by rpki-client