Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCD98676D57D11EF97A62F6E762E951A.roa
File: BCD98676D57D11EF97A62F6E762E951A.roa (raw, json)
Hash identifier: rbTi3kd5aPhaCJ+Re0bNMEwJBOaP4g9lK7TtBa7Y3gk=
Subject key identifier: 94:5A:E8:63:F3:C5:B1:04:BC:C5:50:37:0D:85:8F:A7:EC:62:24:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCD98676D57D11EF97A62F6E762E951A.roa
Signing time: Sat 18 Jan 2025 09:22:29 +0000
ROA not before: Sat 18 Jan 2025 09:22:25 +0000
ROA not after: Sat 22 Feb 2025 09:22:25 +0000
asID: 202662
IP address blocks: 45.196.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68423 (0x10b47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 09:22:25 2025 GMT
Not After : Feb 22 09:22:25 2025 GMT
Subject: CN=678b72d5-78b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:5a:39:bb:6f:f4:58:9f:d3:7c:81:5d:13:
8f:8b:a9:5d:5a:03:42:c1:9a:f1:18:e7:d5:0f:06:
d0:01:72:fa:00:a7:ad:49:83:b6:fb:43:99:15:f5:
53:77:d3:0a:3d:88:3a:01:ba:68:ad:02:75:c1:64:
fd:06:b6:6a:b6:84:9b:6e:52:4e:1a:3a:8d:53:23:
95:dd:2a:10:a0:17:bc:aa:0b:94:00:7e:02:c0:50:
83:69:11:fa:f9:22:bd:34:5a:f5:4f:6c:08:4b:6b:
56:90:7f:c3:89:ee:78:07:1e:3b:33:dc:b8:13:67:
25:2f:73:d8:4b:a1:6e:9c:fc:f3:c9:2b:ce:9b:4b:
c7:12:f6:4f:c5:ad:a1:a0:12:f0:94:5b:ed:ac:ae:
94:27:4e:eb:5c:b1:fe:8f:ca:1d:3b:24:17:f2:03:
81:fd:94:cd:99:ce:92:58:8e:bf:56:ca:51:ce:63:
db:b9:76:99:89:31:84:a8:87:7d:a4:36:90:1e:02:
6c:b3:be:fe:49:e0:90:8d:09:fc:91:da:d4:2a:eb:
cd:55:06:58:e1:2e:04:d4:54:d1:18:f3:ee:48:89:
f8:b9:7c:92:1e:cd:1c:7d:73:a5:6f:42:d2:17:ba:
d3:d0:97:a1:37:e0:17:5e:08:56:75:0b:0a:f3:a6:
b9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5A:E8:63:F3:C5:B1:04:BC:C5:50:37:0D:85:8F:A7:EC:62:24:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCD98676D57D11EF97A62F6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.248.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c9:19:4b:70:71:6f:8f:7c:d4:0d:bd:61:c1:94:28:64:38:
af:6e:dc:9d:a5:31:47:fe:08:e0:18:ca:ac:c8:30:3b:7f:14:
57:fa:c0:53:3a:f0:4c:63:78:48:82:d5:be:0b:ee:ec:eb:ba:
98:8a:05:81:6e:e4:d3:6b:34:cc:c5:3d:1d:46:fe:c5:9d:94:
f2:0a:5a:2f:19:35:39:04:f8:ec:f4:ef:01:d2:7e:1d:7a:64:
7a:53:52:af:7f:e6:0a:d5:5d:e1:c8:7e:dd:4c:1e:4f:40:7a:
a2:59:d0:17:bf:8a:f9:09:96:c8:ca:99:c1:a5:bd:04:2c:db:
da:95:88:82:9c:59:73:31:6e:e7:c0:3d:a2:f3:37:95:e2:ff:
77:0f:04:c6:c8:00:c2:d9:f2:e1:b3:ec:07:64:84:ba:6c:e6:
22:38:ed:a4:23:63:73:69:a5:f9:6c:cc:dd:93:05:df:36:d8:
29:ef:80:06:30:11:d2:c5:99:79:01:a3:36:2e:39:f0:f9:88:
af:e2:3a:00:28:d0:7f:72:e0:b1:91:11:d3:3a:f7:12:a8:76:
9c:18:04:f3:55:45:86:1a:27:05:c9:3a:af:62:7a:6e:06:82:
b2:89:34:18:84:7b:39:3d:03:3f:40:04:ef:a2:eb:52:f9:b0:
fe:c0:7a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:47:56 2025 by rpki-client