Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53B27D4EDB3E11EF885F909E762E951A.roa
File: 53B27D4EDB3E11EF885F909E762E951A.roa (raw, json)
Hash identifier: tsiBiy1bUHh5LTH/sEDAtUsO9KUrJnjCBFp4MMxYxUk=
Subject key identifier: 90:82:5A:89:CE:87:ED:19:B0:E8:F5:B1:E8:D7:7D:D2:F6:7A:44:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011297
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53B27D4EDB3E11EF885F909E762E951A.roa
Signing time: Sat 25 Jan 2025 17:03:41 +0000
ROA not before: Sat 25 Jan 2025 17:03:37 +0000
ROA not after: Sun 09 Mar 2025 17:03:37 +0000
asID: 63139
IP address blocks: 45.197.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70295 (0x11297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 17:03:37 2025 GMT
Not After : Mar 9 17:03:37 2025 GMT
Subject: CN=6795196d-7c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:39:50:6c:95:d3:29:a7:b9:e2:c1:54:7f:
c1:84:26:7b:26:fd:36:e7:3f:fd:29:e8:c1:95:0b:
39:cf:01:2c:6f:0b:1c:00:b3:fa:b0:50:d2:cb:b3:
4e:bc:d6:10:d2:c3:34:bb:04:71:7f:1d:0e:24:a2:
07:f6:2a:d2:64:59:a8:44:89:25:f5:4c:0d:b3:a6:
bb:97:44:57:79:f4:1b:cb:21:73:b4:d8:d2:53:8f:
c4:98:ca:f0:24:6b:d2:81:15:57:12:fe:c5:7a:aa:
aa:5f:57:d8:bc:ea:45:12:80:45:e0:25:e7:b9:2b:
9c:29:69:93:91:2b:98:7b:19:01:ff:7a:b6:44:c8:
c5:79:fa:05:d5:d2:03:4c:58:7f:cc:37:0d:d3:dc:
3a:89:0c:35:e1:ec:32:ae:d2:52:f9:9a:58:90:3f:
79:74:d0:0b:69:6f:06:ca:40:ee:5a:db:d9:db:77:
03:92:61:29:8c:66:db:bd:a2:65:45:db:ff:9d:61:
51:a6:a6:f8:5a:96:ef:bc:44:f9:5a:72:bb:e9:49:
f9:67:8f:af:ed:ce:f0:b6:7c:cb:f4:ae:9c:87:60:
18:ce:28:15:bd:aa:0b:2b:1e:ea:d7:97:97:03:b5:
b7:ea:3c:62:7e:66:dd:32:20:cb:b2:bd:f8:50:67:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:82:5A:89:CE:87:ED:19:B0:E8:F5:B1:E8:D7:7D:D2:F6:7A:44:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53B27D4EDB3E11EF885F909E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.66.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:78:b3:9c:4a:2b:46:58:df:82:2d:fc:45:03:55:91:1f:6c:
2b:4c:fb:60:f2:47:bf:ba:60:d7:63:94:5e:49:a7:9a:6f:16:
fa:4d:23:89:f9:ac:6a:80:6d:46:be:6c:be:dd:58:2e:44:92:
51:02:2e:6b:bf:63:89:be:4f:e9:b2:cb:83:3a:a4:7a:a2:21:
25:e6:5c:81:e0:58:54:2b:31:ab:d7:72:5c:2f:ce:00:b6:40:
ad:c6:7d:7f:fe:c9:ad:05:68:bf:df:0f:e7:13:3d:8f:5c:40:
f8:c0:b4:87:9f:ee:fa:18:de:43:a8:2e:97:25:09:2e:3f:f1:
15:dd:d9:0f:7b:78:0a:d1:73:f6:92:6c:09:fa:bf:29:40:1d:
93:94:09:52:09:18:36:96:f0:89:c0:95:85:6f:33:14:6a:41:
90:32:d5:06:f4:14:a7:ea:e7:f2:e6:40:d9:43:22:88:3b:17:
04:ab:94:e6:2e:21:3a:32:eb:93:67:03:79:a0:d5:63:db:04:
b9:05:76:d9:f5:99:9d:23:1b:52:2b:56:16:34:c4:11:8b:92:
e5:e6:87:0b:68:11:ad:90:9c:3e:8b:04:81:ea:58:24:44:07:
62:57:c4:46:de:68:3c:c1:7c:a9:2b:49:59:18:e7:05:e2:d2:
34:94:10:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:52 2025 by rpki-client