Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8F23CFA02F711F08408758C762E951A.roa
File: F8F23CFA02F711F08408758C762E951A.roa (raw, json)
Hash identifier: pvqDJ7k7u/mEOsl4Vah8SQZijfu/kXlA86x6wR2iKDE=
Subject key identifier: 1C:33:9A:7C:29:5D:0C:B7:F4:9A:28:25:D4:B1:F5:7B:3A:98:C1:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01466A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8F23CFA02F711F08408758C762E951A.roa
Signing time: Mon 17 Mar 2025 06:20:51 +0000
ROA not before: Mon 17 Mar 2025 06:20:46 +0000
ROA not after: Thu 24 Apr 2025 06:20:46 +0000
asID: 6079
IP address blocks: 45.203.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83562 (0x1466a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 17 06:20:46 2025 GMT
Not After : Apr 24 06:20:46 2025 GMT
Subject: CN=67d7bf42-81bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:99:21:67:92:07:42:06:c3:dc:19:7e:a4:
c2:8d:24:4f:3f:4f:2a:6b:aa:91:23:94:42:69:75:
18:f1:fc:61:78:49:d5:c1:39:b7:2a:34:1d:ef:dd:
df:27:ca:50:e8:9c:05:f3:1d:df:d7:60:1a:64:a6:
5b:a1:9d:ca:0f:06:f3:32:35:78:3b:db:07:b6:6c:
41:af:5b:49:75:48:1b:e8:19:2b:8f:bb:fa:fe:ad:
6b:95:f1:6c:55:af:f1:94:43:cf:96:5a:5e:fd:fc:
b5:6d:57:79:cb:3d:87:5f:05:bd:51:1d:40:82:42:
37:ff:3e:8f:f7:74:76:9a:ac:14:b8:5d:e8:74:6b:
1c:2e:9a:c9:d2:0b:ee:a8:16:17:bc:67:6d:1e:6d:
d9:39:d8:db:2a:e0:bc:3b:59:83:ef:b9:b3:8d:18:
2a:65:0d:ca:2b:c5:00:07:bc:ad:c8:e0:52:3f:47:
85:8a:ec:dc:8b:84:3c:56:7e:b0:0a:52:b1:f9:22:
41:f0:06:d0:b2:32:51:6b:7a:c4:e4:b7:3f:fd:e1:
a3:90:1d:c7:6c:ed:ea:c7:a3:fc:9d:43:10:9a:58:
5c:0a:4e:87:42:03:ad:9d:9b:e1:5a:37:65:2b:66:
32:c8:0e:5e:e3:6d:7c:26:0a:5d:3b:6f:e1:13:69:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:33:9A:7C:29:5D:0C:B7:F4:9A:28:25:D4:B1:F5:7B:3A:98:C1:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8F23CFA02F711F08408758C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.0.0/19
Signature Algorithm: sha256WithRSAEncryption
47:81:2c:39:61:2b:2c:2a:16:b4:d8:aa:1f:74:82:a8:66:eb:
74:3e:35:48:71:6b:d1:dd:6b:f6:c2:b1:4b:c7:8f:a0:18:98:
b4:80:27:1f:0c:ab:81:af:49:02:90:05:0a:8c:8e:36:fe:29:
87:63:88:83:ba:60:fa:66:6f:df:6e:82:cd:1d:86:1b:7f:bd:
9f:fe:fa:ab:6a:dd:bd:66:14:8d:be:05:32:ba:f1:91:9a:39:
00:ab:96:43:a7:42:a5:07:95:1b:53:12:c6:5e:fa:e8:51:08:
f2:62:b6:0f:73:20:6a:d3:32:06:6e:5a:97:dc:70:e5:d6:43:
86:5b:75:db:a3:88:c2:9f:2d:13:d1:35:b5:c0:0b:09:f1:fa:
8b:2b:eb:0c:50:cf:d5:03:d5:e9:48:ea:40:c9:12:41:4f:f4:
73:df:b1:fe:b0:91:0b:2f:5c:22:a7:e5:c8:dd:11:2a:2d:31:
41:60:5f:b0:59:81:37:e9:f4:97:23:6b:cb:89:4d:81:53:70:
48:94:d0:cf:c7:76:52:77:ce:b2:9f:8c:7a:d5:8f:b8:bc:d6:
2e:84:e9:58:07:a5:30:41:4a:a6:61:73:74:4c:63:c5:43:54:
6f:b6:b3:bb:8c:16:97:6a:f6:e0:7b:b8:d3:d1:6a:fb:55:e4:
4c:47:7d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:58:38 2025 by rpki-client