Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A02838AAD3F311EFAE18B853762E951A.roa
File: A02838AAD3F311EFAE18B853762E951A.roa (raw, json)
Hash identifier: 8LHQ4PLFQ+UdNvfVEiY6oNg6liZzzfcvTCIrPXIBrQk=
Subject key identifier: C6:5A:DF:03:7F:99:FC:2C:F7:1A:38:E1:F0:8E:B8:D0:1F:65:76:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A02838AAD3F311EFAE18B853762E951A.roa
Signing time: Thu 16 Jan 2025 10:21:19 +0000
ROA not before: Thu 16 Jan 2025 10:21:15 +0000
ROA not after: Sun 16 Mar 2025 10:21:15 +0000
asID: 17561
IP address blocks: 45.195.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67834 (0x108fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 10:21:15 2025 GMT
Not After : Mar 16 10:21:15 2025 GMT
Subject: CN=6788dd9f-6074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ff:9c:04:ca:43:5e:06:f1:ae:31:58:d9:fb:
41:9a:2d:ec:6d:d7:85:6e:08:2e:a8:43:dd:24:b9:
8b:3e:a5:e5:8c:f2:96:05:9a:d4:74:22:28:07:d9:
6c:27:7a:f5:6f:e4:c2:10:78:6c:90:ed:43:7d:e8:
c3:94:6b:80:a3:0b:fa:d5:dd:83:36:72:76:62:53:
c1:40:a1:3d:d2:e8:84:d2:fc:fd:32:13:ff:0e:df:
45:fe:19:92:4b:94:74:2e:ec:4d:ff:f3:c5:77:a8:
10:f4:47:2f:c7:ee:a4:71:af:49:73:54:26:d3:0e:
d1:e0:bd:63:1a:bb:91:24:1d:55:06:83:8a:6b:47:
87:3b:6c:04:a5:74:5e:41:83:f2:a0:d5:56:18:d6:
77:28:f0:93:27:1b:01:18:9c:db:45:b2:89:55:ff:
78:a0:5c:57:e4:05:1f:22:64:8e:81:78:58:f1:f4:
6f:c2:e9:4b:13:e2:5f:5e:df:07:cc:68:3a:01:10:
ae:7c:4a:d1:31:13:d5:61:e7:15:25:8a:0c:18:6d:
ec:cc:2a:10:a5:77:15:74:a3:82:05:3c:c2:0b:9e:
46:01:ff:91:94:a6:39:d5:4c:63:ac:76:1b:a4:8b:
13:a1:ea:be:03:6f:c2:39:f9:d2:9a:ab:49:84:f8:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5A:DF:03:7F:99:FC:2C:F7:1A:38:E1:F0:8E:B8:D0:1F:65:76:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A02838AAD3F311EFAE18B853762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.204.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:75:c2:6e:6e:46:2a:1f:51:04:68:59:13:2e:7d:7b:be:44:
94:f9:66:af:60:8b:e9:77:6a:29:e3:29:dd:27:00:5f:39:2a:
ef:05:1b:1e:7c:81:84:ee:2f:26:e1:3e:b9:85:5b:76:53:89:
2b:cc:2c:ff:cd:a2:fb:64:ac:d7:a6:99:d2:a8:69:d1:cb:fa:
b8:91:ff:64:22:e4:a1:de:ba:b5:41:3f:73:61:bc:33:7e:b7:
32:be:fd:4c:e9:a4:d0:c5:92:7e:c2:15:bc:dd:d1:2d:28:8b:
bc:cc:a3:6e:8a:17:43:34:04:bc:6e:3f:6f:56:3e:b8:55:11:
42:61:f9:f2:6b:2f:03:6c:31:ea:65:40:57:f4:90:e0:62:14:
26:1b:63:25:f7:21:6b:aa:32:ca:15:2e:08:f5:4c:87:10:ee:
7c:58:ef:2c:c9:c6:07:47:b6:b1:d8:2c:8b:c9:4d:7e:8d:89:
c4:e5:8c:32:cb:25:a2:c5:ab:63:b1:77:11:00:f5:0b:77:a5:
2f:02:4a:42:1e:f7:a3:c4:7a:39:d9:55:2d:87:6d:76:21:c8:
5d:6f:7f:09:6e:5b:d5:c3:d2:6a:c9:8b:44:d6:79:da:7f:16:
ed:ad:ae:68:69:6d:0f:e6:b8:ae:54:b0:35:32:7d:04:2a:7d:
10:32:ab:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:41 2025 by rpki-client