Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8CF8B6AFD9811EFBC155B4A762E951A.roa
File: F8CF8B6AFD9811EFBC155B4A762E951A.roa (raw, json)
Hash identifier: YhDlqlwdd7/jJug8JdqmFewVfxEC3gifGHLDm/w/Aj8=
Subject key identifier: 8E:1F:0C:11:A5:FE:9E:D4:94:D4:C9:07:25:C5:64:E2:7B:4A:8E:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8CF8B6AFD9811EFBC155B4A762E951A.roa
Signing time: Mon 10 Mar 2025 10:18:12 +0000
ROA not before: Mon 10 Mar 2025 10:18:08 +0000
ROA not after: Mon 15 Sep 2025 10:18:08 +0000
asID: 18233
IP address blocks: 45.199.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83114 (0x144aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 10 10:18:08 2025 GMT
Not After : Sep 15 10:18:08 2025 GMT
Subject: CN=67cebc64-5e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:ad:65:84:58:cd:04:52:59:d2:a0:61:0f:
a1:af:24:09:8f:5c:e2:84:d1:24:20:6e:f9:56:8c:
e5:c1:dd:de:02:67:bd:67:21:fd:0e:b6:e8:fc:72:
a9:81:8e:33:54:ce:9e:6c:60:84:ab:0a:3f:c6:d3:
fc:13:09:e8:b2:ec:11:da:f9:cb:4c:1b:27:e0:d1:
49:41:a0:7a:eb:d1:78:92:99:0d:f1:25:eb:55:8f:
d2:7d:6b:67:51:3f:5c:ad:88:be:cf:32:60:4b:88:
86:d9:da:cb:51:30:d9:de:34:cf:1b:e3:b7:dc:db:
66:49:d9:90:b5:8b:da:ee:b3:8a:a7:98:d9:13:87:
20:7a:09:bf:50:ba:f4:93:dc:6d:38:44:30:fd:1c:
51:45:17:c4:40:e7:fe:47:57:89:2b:74:69:53:54:
46:44:97:ae:51:ed:f5:b3:04:d3:85:8e:23:c5:78:
1d:03:04:87:69:27:87:74:68:0a:8f:5f:18:cb:79:
c2:5c:e2:f9:1f:33:79:5e:b3:58:5c:49:be:6f:65:
05:bb:bb:78:46:14:dc:b9:63:bb:ed:79:8f:c2:fe:
d7:c8:cc:01:d6:cc:1f:6c:64:c9:34:8a:98:83:fa:
c9:7f:29:da:20:f6:d0:31:8c:ea:97:42:8f:c1:74:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1F:0C:11:A5:FE:9E:D4:94:D4:C9:07:25:C5:64:E2:7B:4A:8E:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8CF8B6AFD9811EFBC155B4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.177.0/24
Signature Algorithm: sha256WithRSAEncryption
24:27:25:f4:0a:a6:8e:a0:4d:a3:0c:0f:c8:87:6e:97:a3:a1:
c8:d5:a7:5f:80:5c:0b:a9:00:35:86:74:3b:6b:5b:45:2d:9a:
e1:2b:2b:8e:a7:a0:61:e7:53:d3:4d:e8:81:2c:37:c3:ad:cd:
13:96:84:97:36:83:39:0d:10:0e:24:25:9c:e2:86:9d:30:b3:
b5:ae:a9:e7:8f:4d:ed:3d:f4:80:ca:7e:56:5b:3e:e5:ff:7b:
f9:93:b0:b2:81:e5:71:12:c2:c1:72:f2:a6:81:39:6e:7b:5f:
c5:21:62:3f:5e:43:f2:95:6a:5b:84:6d:0b:cf:70:12:a2:32:
7d:c9:27:3a:bd:3b:cb:17:42:e1:9a:ef:a1:a5:38:8f:c6:60:
38:67:ba:37:69:f3:c7:c5:2f:94:2a:9c:99:3a:90:69:04:97:
89:f1:36:dc:f5:bb:31:44:af:38:9f:ce:61:ab:a4:20:54:f5:
15:47:52:61:b5:53:f0:8b:fa:e7:5d:5d:6a:cc:ed:2c:5b:f5:
29:94:3b:02:06:04:e3:2b:a3:77:16:6c:ea:c3:37:19:3d:d8:
0d:c6:1e:96:7e:8d:00:58:ba:c1:2d:35:16:ec:e0:4a:f8:5d:
ad:ba:6a:12:c7:c1:f3:6b:74:b7:a5:ad:0c:b7:72:af:aa:9a:
3a:65:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:57 2025 by rpki-client