Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB495698F43D11EF9260DEB5762E951A.roa
File: DB495698F43D11EF9260DEB5762E951A.roa (raw, json)
Hash identifier: bOmBkzxQ5Kr0OpAU49hw4nAh1yJ0vBz/6HigNjyR184=
Subject key identifier: D7:BF:BD:C3:43:C7:E2:B0:61:FC:74:2F:C2:87:64:D0:93:2D:4F:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013286
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB495698F43D11EF9260DEB5762E951A.roa
Signing time: Wed 26 Feb 2025 12:33:18 +0000
ROA not before: Wed 26 Feb 2025 12:33:14 +0000
ROA not after: Sat 19 Feb 2028 12:33:14 +0000
asID: 17561
IP address blocks: 45.198.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78470 (0x13286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:33:14 2025 GMT
Not After : Feb 19 12:33:14 2028 GMT
Subject: CN=67bf0a0e-73ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:c6:e7:44:13:85:1d:a6:50:fa:db:b0:d5:
4f:42:42:46:5f:2b:36:a1:cd:ec:97:ad:c2:7f:30:
b0:d2:42:74:1e:b2:20:48:5b:a6:57:74:a7:64:88:
e3:41:7f:ee:35:4f:20:6c:ff:43:a8:aa:41:b4:b6:
a9:c2:47:9b:78:ed:34:a8:d6:eb:09:1c:0a:c4:f4:
09:e5:1d:1b:91:4b:db:a1:47:94:38:d9:ab:dc:16:
99:79:e9:90:97:6c:eb:f4:d8:8d:eb:95:32:b0:7c:
1a:1c:8d:9d:61:7b:2c:1f:b0:67:6c:df:af:54:46:
4d:7b:de:5c:b6:48:0b:14:2a:e3:c9:8d:9f:4d:9a:
21:2d:af:f2:fa:47:7b:85:e6:51:50:0f:4a:d2:fc:
d6:1b:1b:38:06:d4:ee:aa:b1:02:b6:72:d5:9d:ca:
1e:11:51:a5:82:87:65:1e:1e:89:08:ed:0f:c9:99:
e7:25:15:84:12:e6:ba:48:e5:5d:7e:ef:8f:67:f5:
b7:5e:19:c9:b9:37:5a:af:29:83:b0:96:0f:c9:fa:
ec:92:91:97:2b:dc:b4:37:39:8a:d8:92:72:0c:69:
d1:9b:3d:f7:fa:81:d5:b8:7c:85:db:a2:c7:0b:22:
d5:da:f8:b0:ad:7c:7d:fd:14:ca:d8:ea:37:47:16:
8d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BF:BD:C3:43:C7:E2:B0:61:FC:74:2F:C2:87:64:D0:93:2D:4F:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB495698F43D11EF9260DEB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.250.0/24
Signature Algorithm: sha256WithRSAEncryption
88:d3:fa:73:71:76:fd:fa:2c:a4:24:7b:6a:d1:2d:81:b8:39:
91:8e:ff:e7:44:95:0c:46:37:c7:18:36:c5:0e:2a:f2:da:3d:
2a:67:1e:11:22:c0:d9:42:fa:64:5b:96:59:cc:50:7b:19:35:
5a:78:6a:80:f1:05:71:66:6f:b3:39:e7:b7:f3:9b:54:5b:80:
df:39:dc:de:57:6b:c3:ae:4c:93:02:c0:db:4f:ce:e5:b2:da:
25:4f:7f:9a:f6:a8:33:e8:07:b5:e6:e6:b5:fc:72:16:6d:c8:
89:2e:94:4e:c5:83:28:39:f2:2e:1e:de:e3:bd:36:96:f1:7c:
8a:43:47:29:b1:f3:35:8a:db:fe:1b:2b:c4:d2:c9:28:c3:28:
2d:b2:bd:3d:d4:3d:18:e6:58:4f:3d:13:43:22:01:5e:5c:76:
d8:a2:bf:43:f5:ff:bd:8e:dd:e3:bf:c6:e1:2a:7a:a8:0e:91:
7a:a2:f1:ba:b7:cb:6f:a6:4e:8d:6c:e0:c0:54:d4:41:0e:b5:
c2:bc:07:3c:92:cc:62:55:7f:d2:34:e0:fd:d7:14:bf:bf:ab:
6c:2e:80:28:d6:48:a4:a5:c5:8c:f5:0c:b4:d2:dc:c7:e9:7e:
00:8a:06:b9:19:6b:32:28:9b:77:20:44:9f:fe:04:11:5f:5f:
f3:d4:52:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:45 2025 by rpki-client