Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00A5E254D3DB11EF99426CB8762E951A.roa
File: 00A5E254D3DB11EF99426CB8762E951A.roa (raw, json)
Hash identifier: vpUC3f+l6498mDsKvCSQcPzs1xdYT2Mx/cG+bD6/hik=
Subject key identifier: 56:4C:F4:39:C2:55:FE:28:FC:65:69:34:E5:20:C3:98:1E:94:B4:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00A5E254D3DB11EF99426CB8762E951A.roa
Signing time: Thu 16 Jan 2025 07:25:03 +0000
ROA not before: Thu 16 Jan 2025 07:25:00 +0000
ROA not after: Thu 20 Feb 2025 07:25:00 +0000
asID: 142032
IP address blocks: 45.205.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67782 (0x108c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 07:25:00 2025 GMT
Not After : Feb 20 07:25:00 2025 GMT
Subject: CN=6788b44f-5266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:29:b5:4d:79:28:3b:83:81:83:26:a0:06:
3a:6b:2d:e1:70:65:7b:eb:19:38:5d:ec:2e:51:66:
ef:aa:ba:21:6c:58:bf:e4:9f:fb:2d:88:0d:ff:2f:
d0:04:d8:c7:d1:8e:a7:a4:bf:fe:0d:77:86:62:56:
70:b7:0c:54:1c:1d:df:d9:6e:2b:11:68:5c:f2:08:
c2:37:7b:d0:a0:37:42:12:f0:1a:2f:f2:ab:8b:9d:
b1:b4:f1:bb:34:57:80:e3:a1:24:f7:d7:50:0c:9d:
aa:5c:6c:61:95:fc:b6:54:7d:86:be:5f:b0:98:cf:
5d:05:7f:4e:4a:f4:8d:a0:a2:59:ee:d0:76:c6:fd:
5f:24:f2:60:03:04:17:db:b7:fe:0a:33:35:74:36:
06:fa:47:42:06:83:ac:92:9a:1a:b3:00:5f:e9:0c:
30:31:2c:a1:2c:45:a3:ab:2e:50:c2:a2:d1:a1:c9:
c0:cd:8b:a7:fa:b6:82:b4:6f:a6:a2:21:a1:91:20:
42:ec:0c:56:e6:9d:5a:29:ea:0b:15:b2:db:3e:d5:
9c:1f:1e:a9:0f:af:cb:b0:6b:5d:08:fd:ef:ce:1b:
68:60:a6:b0:92:36:0b:95:81:4a:58:49:64:89:2f:
02:db:e9:eb:a6:25:be:e2:a3:9e:6d:f3:d2:ed:f6:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4C:F4:39:C2:55:FE:28:FC:65:69:34:E5:20:C3:98:1E:94:B4:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00A5E254D3DB11EF99426CB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:71:b5:af:4e:3b:dc:53:1d:01:d3:2e:f3:06:3d:27:65:f0:
a0:84:1a:09:e3:27:57:af:3f:24:45:9c:96:29:86:bb:b9:ab:
ad:8b:8c:c9:10:4e:6b:42:e1:0b:2c:cd:85:c0:b7:b5:0c:59:
10:06:30:6f:53:5d:10:ce:0c:f8:e1:2d:2d:03:61:e6:69:c1:
cf:3f:d5:41:8b:5a:43:6c:a8:19:0d:9c:eb:f2:25:fe:6c:c0:
c1:4a:99:47:20:16:b0:09:e5:35:d8:0e:bf:79:16:23:af:e7:
ff:a6:16:bb:21:fb:cb:c2:39:2a:5d:fb:c6:65:05:3b:a2:7a:
64:eb:dc:49:7e:90:51:fd:f3:e4:10:a9:c3:4e:01:bb:a1:40:
ec:1b:89:24:ab:ac:da:f1:dc:78:f0:4f:fc:89:f4:fa:f4:40:
55:87:fa:3f:6d:94:1b:f2:d4:b5:f3:5e:4e:2b:b0:44:3e:71:
5d:eb:fa:c4:f4:aa:88:22:69:8b:b8:b4:7b:31:0a:f0:fa:3e:
fd:d7:99:58:40:a5:2c:c5:45:3f:ea:2f:5d:d4:6f:dd:f2:50:
5e:cc:ee:5f:dd:de:30:5d:14:d7:50:e4:b3:77:e1:0f:86:7d:
49:17:c6:5e:03:66:8f:e2:a5:ed:a7:70:64:2c:0f:27:8e:b8:
44:5c:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:00:48 2025 by rpki-client