Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A1665AADAE911EFA1C99065762E951A.roa
File: 6A1665AADAE911EFA1C99065762E951A.roa (raw, json)
Hash identifier: Rkp84aK1dbfzqrrAQ/B5cRMdh3NUcbNa0t39ux4mJkQ=
Subject key identifier: 33:38:07:3E:B2:AB:08:44:A5:D3:C5:3E:0D:29:55:EB:73:0A:2F:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A1665AADAE911EFA1C99065762E951A.roa
Signing time: Sat 25 Jan 2025 06:55:51 +0000
ROA not before: Sat 25 Jan 2025 06:55:48 +0000
ROA not after: Sun 23 Feb 2025 06:55:48 +0000
asID: 202656
IP address blocks: 45.199.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69869 (0x110ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 06:55:48 2025 GMT
Not After : Feb 23 06:55:48 2025 GMT
Subject: CN=67948af7-3b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:aa:59:a3:de:9d:ad:39:57:89:95:b9:09:
35:a0:70:ec:be:67:b0:aa:ee:b5:79:75:96:25:69:
08:cb:46:e9:e9:c9:89:b1:af:2d:0e:08:68:53:05:
14:a0:d7:11:60:34:2f:4f:6d:2a:bf:3d:65:71:cd:
a6:fb:cb:c3:fa:ea:3a:6a:36:89:58:a5:76:54:bc:
cd:2e:56:48:18:27:e5:42:f5:44:08:d9:6f:9e:fa:
30:d6:e9:29:5a:a6:84:a9:80:1d:2e:8f:d6:00:3f:
9b:ff:c0:22:b2:49:ef:8b:c3:da:68:7f:59:a8:c8:
49:15:55:7a:26:b8:cb:d0:3a:1b:e8:b4:03:87:79:
a8:ce:85:bc:d6:51:3d:fb:3b:6c:0a:32:f6:9a:1f:
38:0b:81:7f:75:2d:7e:ba:49:7f:ae:ba:e1:b5:1c:
bb:54:b4:70:0d:21:cc:b9:35:45:da:da:eb:7b:99:
c1:83:99:27:f4:a6:c6:45:a5:40:4d:5e:51:ae:4e:
a4:52:ad:af:43:6e:be:12:35:a5:c2:5b:7e:d8:aa:
12:4e:50:ee:9e:33:d2:94:33:52:8e:5f:44:cd:f2:
e4:96:84:69:01:01:40:8f:49:fe:1f:24:78:b2:25:
67:0d:4d:35:72:7c:46:b8:ba:94:6d:47:c1:82:3a:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:38:07:3E:B2:AB:08:44:A5:D3:C5:3E:0D:29:55:EB:73:0A:2F:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A1665AADAE911EFA1C99065762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.254.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a2:a5:2b:3d:86:5b:53:cd:fe:e5:be:54:5f:fc:90:d9:41:
b3:10:37:6c:2c:ad:de:3f:00:aa:65:c5:88:27:8f:92:34:26:
91:ac:ea:1d:81:50:22:bd:aa:34:97:d7:37:b6:e1:0d:67:ca:
dd:7c:bd:dd:a9:89:81:80:8b:0c:f8:6c:7f:d6:55:21:c6:04:
31:af:fc:fc:05:e7:2d:16:05:cd:f1:c3:e8:95:d9:49:4b:5e:
fd:c9:77:74:6d:ea:4e:3b:34:89:15:53:48:eb:1e:03:05:be:
f9:16:52:12:f3:40:bf:3e:4b:aa:cc:2f:b4:be:f4:e1:65:4d:
28:d6:60:ad:6f:3a:c1:dc:a2:ae:8d:85:10:6f:b5:0a:a4:79:
d0:07:95:5e:58:a7:82:19:d0:58:0d:a0:fa:5f:be:1e:ed:5d:
62:b5:d3:5e:b5:88:b6:7b:36:31:7e:f1:db:a0:0b:c8:31:04:
8a:bc:ba:ec:c9:c6:37:7f:da:16:95:f8:7b:9a:f7:81:35:a5:
85:bc:38:d2:a6:a6:a3:b6:9a:9d:6e:4c:36:fa:ae:33:47:84:
19:80:26:8b:30:a4:4a:83:c1:cb:24:7d:18:6a:d1:7a:6c:bf:
33:71:b4:37:c7:17:95:76:4b:4a:b3:c1:85:1c:09:5f:47:01:
c0:6c:2c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:36:21 2025 by rpki-client