Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB173B82DAE511EFBD64114F762E951A.roa
File: FB173B82DAE511EFBD64114F762E951A.roa (raw, json)
Hash identifier: 94plkue7jVBhyNiOSzedj3kscGj7+C9j+8cSmQQ53A0=
Subject key identifier: 5F:05:3E:9B:33:0A:8F:BD:4C:E0:E1:B9:D4:9A:E9:FC:8F:77:7F:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB173B82DAE511EFBD64114F762E951A.roa
Signing time: Sat 25 Jan 2025 06:31:17 +0000
ROA not before: Sat 25 Jan 2025 06:31:13 +0000
ROA not after: Sun 02 Mar 2025 06:31:13 +0000
asID: 14315
IP address blocks: 45.202.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69847 (0x110d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 06:31:13 2025 GMT
Not After : Mar 2 06:31:13 2025 GMT
Subject: CN=67948535-d744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:81:76:70:eb:0d:76:ea:02:07:53:28:25:
49:8c:df:7e:68:b1:0f:b6:5c:c4:93:e4:ae:20:27:
9e:49:31:1e:9a:d1:d8:ac:5c:30:b0:c2:84:bd:2a:
06:46:5d:b2:4b:7e:f8:fe:ba:77:fb:c1:d3:95:94:
66:31:13:78:19:b4:0a:c2:eb:f2:01:92:65:e7:02:
e3:9d:dc:bc:e3:69:6b:82:fc:59:1a:33:2c:0f:71:
7f:c5:2a:84:2f:d2:c6:36:fc:e1:c8:57:d8:a8:55:
6c:06:28:5c:6c:c5:ce:08:20:5b:7f:fa:c5:b1:3b:
89:5e:0b:f5:eb:28:be:be:b7:48:5a:fc:a1:24:31:
01:72:6a:f6:56:cf:d0:12:46:50:0a:c3:4f:73:ca:
88:86:03:3c:00:11:28:1d:ec:19:f4:47:b7:0e:9d:
ef:4e:29:71:7e:63:3d:af:ca:65:d4:a7:0d:4d:ec:
83:6d:a4:8a:22:7e:37:60:1c:9f:21:e9:5b:20:1e:
47:04:d0:92:e8:c4:d8:90:b3:dd:5d:11:a0:5f:e7:
ac:c6:ea:20:3a:4c:8b:4d:2e:90:43:1e:ba:b7:44:
8d:f0:96:47:ff:d9:ac:a1:5f:68:f4:42:1a:96:2e:
be:b5:6f:d5:77:bf:af:b8:de:57:b4:e4:18:6c:fc:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:05:3E:9B:33:0A:8F:BD:4C:E0:E1:B9:D4:9A:E9:FC:8F:77:7F:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB173B82DAE511EFBD64114F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.197.0/24
Signature Algorithm: sha256WithRSAEncryption
46:88:e6:7b:1c:6e:c9:ce:54:84:1b:82:71:32:03:19:b8:ee:
0b:d8:42:b9:46:08:9a:bb:27:d9:cc:44:8c:62:8e:15:cf:33:
55:04:fa:75:40:85:17:59:4d:7b:27:17:22:99:aa:c9:ef:ee:
e7:85:3a:5d:80:13:b9:c6:8f:e5:f5:da:4b:0e:60:00:73:96:
c9:a8:96:eb:08:0f:1f:94:ee:b3:35:06:0d:c9:63:5b:e0:a9:
a6:f1:93:ce:31:8d:bd:6f:9a:f9:99:63:32:40:ed:d4:89:f8:
56:b8:33:e3:8a:5b:e4:0e:2e:07:f7:87:94:bf:c3:b2:2a:33:
9b:68:d1:1a:58:48:c2:de:bf:4f:9d:44:a9:9d:0a:b3:fd:6a:
ed:2d:b3:ed:d0:7b:ac:e3:b2:40:36:a9:0b:c7:7f:d6:4b:0e:
0c:3d:44:ad:a3:30:46:e5:40:95:52:d6:93:8b:64:1f:42:2f:
96:35:75:74:48:d0:44:92:b5:6a:cf:ad:1b:15:82:d1:63:94:
26:e8:12:9e:24:f2:53:1f:7a:90:9e:75:bf:95:e5:2b:d1:12:
bd:83:57:85:ca:df:c0:b2:19:76:03:44:34:13:00:d2:4a:3c:
c2:f7:9e:c4:0b:48:db:71:c8:32:86:1e:e8:6e:cd:f9:61:06:
31:41:e9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:48:36 2025 by rpki-client