Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14BE4E18D72B11EFBBDF7B63762E951A.roa
File: 14BE4E18D72B11EFBBDF7B63762E951A.roa (raw, json)
Hash identifier: nF9/x0U+mADIv0IqWdCbbezieEk/0SkZjRn1HzkAvCk=
Subject key identifier: B5:C5:52:07:F2:F6:64:DB:59:F5:77:53:C5:0A:DA:A4:A8:6D:A1:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C81
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14BE4E18D72B11EFBBDF7B63762E951A.roa
Signing time: Mon 20 Jan 2025 12:35:50 +0000
ROA not before: Mon 20 Jan 2025 12:35:47 +0000
ROA not after: Sat 01 Feb 2025 12:35:47 +0000
asID: 6079
IP address blocks: 45.205.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68737 (0x10c81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 12:35:47 2025 GMT
Not After : Feb 1 12:35:47 2025 GMT
Subject: CN=678e4326-6f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:8c:59:e2:5e:d5:7d:f0:d3:64:48:14:e5:
1e:21:30:8d:8b:ee:d4:cf:8c:05:ad:99:31:10:24:
85:6c:ab:32:c5:2b:31:62:ce:18:7a:b9:cd:0f:20:
d5:d1:ef:9b:72:7e:ae:46:0a:25:d5:db:48:68:2e:
aa:fc:07:df:29:29:68:2c:15:73:8c:0e:f5:09:73:
a7:3a:11:f2:a7:ac:1a:82:41:2b:c8:6e:fa:27:8c:
2c:6e:e6:90:64:1b:d6:82:44:f8:d6:c1:bd:57:54:
57:d5:16:94:d9:0e:a1:6d:af:7e:d3:04:0f:c3:67:
46:89:9b:01:79:ed:4b:05:e7:c2:63:e4:a4:49:6d:
e3:b9:4c:d2:d3:d3:45:2a:43:00:45:38:cf:3d:ac:
ad:dc:16:68:3f:31:7d:9b:9d:b3:2f:52:34:74:6f:
fe:b9:af:e4:fa:d0:38:80:f8:25:e0:d6:28:1e:a2:
02:e9:7b:8d:8e:ed:8c:0b:40:f9:36:4a:b0:f7:91:
c2:0e:c5:73:b0:ff:bf:8b:93:a8:b1:07:22:e8:5f:
f8:71:4d:d7:b6:d0:42:e9:e2:4c:35:24:1b:ba:2d:
75:82:93:b5:a4:a6:69:af:db:b0:2e:c1:65:03:b9:
2f:c4:e8:32:22:e7:9d:2a:86:1a:37:10:66:a6:3d:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C5:52:07:F2:F6:64:DB:59:F5:77:53:C5:0A:DA:A4:A8:6D:A1:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14BE4E18D72B11EFBBDF7B63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.132.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:0d:c2:e8:c8:08:59:be:d1:0f:a8:da:ea:71:82:ff:4f:70:
20:3b:37:01:22:9c:ea:db:70:8c:c2:e3:0a:2c:5d:15:f5:48:
08:f5:ef:c6:41:9d:3c:9c:41:52:66:1f:be:75:94:00:79:3c:
29:33:d8:7c:32:2a:6d:4d:4e:84:f4:7d:38:93:49:2f:38:ff:
23:9c:36:29:d7:ff:9f:fa:5e:01:e3:e8:bf:1e:82:f6:e5:5f:
0c:6b:f9:85:68:5e:b1:bc:b9:4e:23:0e:dc:9d:5d:1d:8c:ac:
b6:a7:44:18:43:8c:21:94:36:65:88:4c:ef:e2:c1:57:3f:ed:
21:54:48:fb:c4:ee:5d:99:67:91:1b:95:11:1b:60:ca:67:e4:
6d:e3:7e:bb:b1:f4:23:5e:91:0a:a3:ea:81:3b:3d:d0:79:cf:
c2:07:52:2a:e9:27:0b:48:ab:23:e8:27:27:a2:ba:98:3e:92:
03:c0:86:c2:ad:45:80:c6:27:42:dd:33:76:72:34:a6:4a:13:
f9:ba:31:a7:c7:2f:a1:39:18:24:3c:fb:24:16:d3:48:ce:57:
85:a4:bd:dd:d8:8d:9a:67:66:5c:2b:0d:1d:29:6b:69:10:e5:
4c:a5:c8:cd:ea:98:51:c2:74:50:0d:e1:a8:4c:23:b8:34:c1:
89:de:fe:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:08:47 2025 by rpki-client