Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87899D68D72A11EF8AB2E960762E951A.roa
File: 87899D68D72A11EF8AB2E960762E951A.roa (raw, json)
Hash identifier: FhTX9P9ryJtzw09cNBTjATmn9t6D4gLmPWptQCRLTOE=
Subject key identifier: 16:F5:B0:69:DA:0D:07:98:BA:00:58:10:F3:AC:CC:2F:D1:37:D6:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87899D68D72A11EF8AB2E960762E951A.roa
Signing time: Mon 20 Jan 2025 12:31:53 +0000
ROA not before: Mon 20 Jan 2025 12:31:49 +0000
ROA not after: Sat 01 Feb 2025 12:31:49 +0000
asID: 6079
IP address blocks: 45.205.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68733 (0x10c7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 12:31:49 2025 GMT
Not After : Feb 1 12:31:49 2025 GMT
Subject: CN=678e4239-3e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:8b:0d:5d:78:e1:7c:5b:ed:e7:52:09:3c:
9d:94:16:07:aa:4f:1d:e9:38:ef:25:c1:8b:f2:67:
5c:f8:c8:80:34:d9:3c:1e:ee:e6:55:6a:07:58:27:
e4:f6:35:51:16:55:35:53:eb:98:64:f0:d7:1a:15:
cc:0c:09:cf:21:f5:e0:78:4b:38:63:46:3c:13:d4:
7c:11:d4:2c:36:89:e6:bb:ed:1d:d0:d6:86:c8:da:
11:97:82:c2:c5:84:36:24:b4:ac:9c:c4:bb:f0:4f:
05:3a:55:b7:58:09:aa:63:bc:74:09:cf:75:8b:f7:
f6:10:ca:8f:95:91:ff:ca:67:04:ed:a4:9e:64:e0:
de:3b:8d:56:33:c8:98:49:38:8e:3f:e9:95:40:e7:
0f:7c:37:45:19:a5:6d:0f:5d:b5:97:64:82:bd:6d:
e3:8e:76:4d:8d:4b:d0:96:2b:e0:0f:9e:36:e5:1c:
d6:86:92:7f:e6:0c:9d:8c:8c:dd:f2:5f:89:70:e8:
28:dc:15:61:f9:71:e9:76:d4:96:ea:f4:3c:ea:ec:
8d:6c:5b:14:e9:31:37:b8:30:ca:a8:e5:06:7e:bc:
26:10:ef:dc:25:9d:e5:b2:4a:d1:47:74:b9:56:5b:
3b:ae:23:72:50:cd:b6:70:83:3a:b4:33:dc:f4:1b:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F5:B0:69:DA:0D:07:98:BA:00:58:10:F3:AC:CC:2F:D1:37:D6:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87899D68D72A11EF8AB2E960762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.85.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a4:f5:14:9d:a8:bb:9d:f9:7c:08:a8:e5:9f:3b:25:67:b2:
f1:47:be:c9:04:81:81:11:a3:cc:e1:bd:a3:fd:6e:ee:c6:6e:
f7:0f:cd:6a:ff:d1:e3:53:60:8a:ff:63:38:81:ae:ac:d1:f0:
a2:2c:b5:62:7e:17:3b:3c:95:32:2d:d3:d2:ea:dc:62:e1:2d:
ba:5a:eb:85:88:18:fb:db:ca:87:77:75:2b:40:30:37:4a:15:
92:ee:90:f3:35:75:c7:c6:8f:fc:fc:5f:e4:91:4e:0e:c9:14:
10:c1:e4:cb:ca:a0:df:4f:03:03:7b:24:ac:5b:03:0f:16:56:
3b:f9:49:1f:7d:1b:ee:e9:79:d2:00:ce:94:46:79:90:db:10:
ab:49:5b:ee:d4:36:ad:b8:06:16:84:0d:b9:20:63:29:70:2a:
5a:ed:b2:2a:95:50:ba:c0:46:ad:bb:09:1d:1b:38:66:fd:bb:
70:3a:1e:33:ee:e5:6a:58:cf:81:9d:cc:1b:6c:4c:79:a4:da:
ed:16:2c:e2:03:1e:de:e5:e6:c3:89:26:10:4f:93:ca:87:fb:
ce:3b:6e:b0:7e:11:19:e2:79:a1:9c:7f:ff:c2:d2:33:40:89:
d5:af:b4:1a:a7:94:68:a5:17:1a:68:e6:6c:2d:9d:4e:fb:bb:
5b:3a:60:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:59 2025 by rpki-client