Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6B50E08F38611EF86103A4B762E951A.roa
File: E6B50E08F38611EF86103A4B762E951A.roa (raw, json)
Hash identifier: R+aFfo9qfWHRvA8+Qy+0FoEEr6df+iycCk2mEdUzmWY=
Subject key identifier: 4A:B7:E7:F9:17:5C:BC:8E:42:47:D3:AD:39:3E:BC:8D:81:4E:23:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6B50E08F38611EF86103A4B762E951A.roa
Signing time: Tue 25 Feb 2025 14:43:39 +0000
ROA not before: Tue 25 Feb 2025 14:43:36 +0000
ROA not after: Wed 09 Apr 2025 14:43:36 +0000
asID: 63139
IP address blocks: 45.197.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77366 (0x12e36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 14:43:36 2025 GMT
Not After : Apr 9 14:43:36 2025 GMT
Subject: CN=67bdd71b-de9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:7a:7d:9f:c5:26:c8:78:8a:76:ad:ad:50:
43:ee:74:08:2a:62:47:96:df:d4:c1:e8:a8:16:5d:
4f:3f:0c:8f:cb:4e:a9:0e:02:70:8d:a8:88:74:01:
ef:d1:28:b6:b0:93:99:7e:c0:aa:d7:1b:58:03:bc:
f7:99:9a:3d:3b:65:dc:b8:2a:20:04:13:15:f0:67:
95:1f:7a:34:c8:93:fc:ee:77:ef:d4:41:39:b0:f1:
b7:76:96:a1:d7:c7:61:9c:a1:3b:1f:95:3d:a4:6d:
65:72:8b:07:73:d2:37:cc:85:06:c3:4b:69:79:4e:
3d:e9:bc:3b:96:ba:ce:cf:14:7c:cf:56:93:9b:96:
32:1f:f4:26:c2:a9:b3:7d:a7:03:79:de:2d:3f:56:
64:81:eb:d7:75:3a:a1:cd:04:24:33:1a:e4:a8:1d:
16:aa:5b:b9:dd:b2:a6:c8:a3:75:c7:6d:aa:79:38:
40:00:24:a5:c4:21:6b:a5:35:78:fe:d5:eb:4f:c0:
e3:66:c0:a5:a1:ac:5f:8f:ce:d4:80:a7:94:d7:ef:
54:3f:09:2e:f6:c4:7e:c1:44:c7:84:48:ae:08:c8:
42:f5:86:6d:0b:39:1f:52:a0:9f:ac:f6:2c:c0:63:
34:cd:6e:a4:e3:ec:1c:26:c2:bd:f0:d6:b7:b0:1c:
26:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B7:E7:F9:17:5C:BC:8E:42:47:D3:AD:39:3E:BC:8D:81:4E:23:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6B50E08F38611EF86103A4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.88.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:10:04:fd:db:b8:f8:41:17:e8:c5:a4:8c:db:12:b4:d2:09:
7f:96:f3:e3:8d:1d:b2:52:d3:65:5c:d8:5e:35:85:50:de:6d:
1a:d9:42:2a:b5:9a:1c:58:2d:6d:3c:39:a9:97:b3:b0:ed:b7:
94:91:03:a0:4f:8c:60:ef:02:86:9e:d6:0c:b7:b4:e9:e7:0b:
7d:02:ff:05:c7:85:5c:fd:ff:07:9e:a1:72:53:d0:89:eb:eb:
5c:26:02:2f:43:5d:73:1d:92:8e:97:94:38:5a:6f:6e:7c:9c:
57:f5:28:48:a2:e2:e8:3f:e1:fa:02:5d:45:b9:c0:19:6a:66:
ba:6f:8e:be:fc:9a:69:91:eb:1f:30:75:4b:84:32:65:74:6e:
ae:79:37:13:d0:39:f2:b6:51:b5:cc:f8:85:8c:53:6a:b5:39:
28:9e:6b:30:9a:b4:2b:9c:92:64:31:57:a3:f8:56:79:67:dc:
81:e7:f3:14:a9:65:16:40:d0:a8:6a:c5:e8:36:1f:22:00:14:
4a:ea:86:54:69:49:6e:09:58:f2:e7:35:ba:23:0b:ac:98:6f:
e2:c4:74:88:52:a9:c1:57:fb:fa:be:93:07:21:51:ae:28:a1:
fe:7a:e6:f1:57:3a:dc:01:ff:6f:f0:e2:ce:0e:58:d0:55:61:
27:d3:42:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:39 2025 by rpki-client