Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC99FE1CBE7411EF9B2B8B53762E951A.roa
File: CC99FE1CBE7411EF9B2B8B53762E951A.roa (raw, json)
Hash identifier: n9ETzn6MH6iRmxQpR1A9T81Y5HnUVMqkeIt4LUfU5oo=
Subject key identifier: 50:17:A1:8E:9E:EE:03:9C:B0:51:7F:A7:25:05:E8:9A:22:EF:9C:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E618
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC99FE1CBE7411EF9B2B8B53762E951A.roa
Signing time: Fri 20 Dec 2024 01:50:33 +0000
ROA not before: Fri 20 Dec 2024 01:50:29 +0000
ROA not after: Wed 10 Dec 2025 01:50:29 +0000
asID: 984
IP address blocks: 45.206.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58904 (0xe618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 20 01:50:29 2024 GMT
Not After : Dec 10 01:50:29 2025 GMT
Subject: CN=6764cd69-4785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:af:95:42:56:1e:fb:dd:11:c3:5a:a9:1f:
fb:b6:3c:3a:b1:2c:18:82:30:97:93:58:b1:99:08:
94:8a:e4:62:02:59:9a:de:3e:c4:51:37:66:ae:68:
ca:f7:9e:0f:16:0f:c1:41:6a:d9:ef:37:f8:ce:36:
9c:4c:51:96:4e:84:32:a8:e9:ba:0a:e8:20:e1:90:
92:89:2d:eb:4e:9b:ac:2a:b7:f3:c7:4c:96:cd:61:
6d:1a:16:52:05:e5:19:a2:15:37:1c:3b:79:e2:a9:
54:5a:36:04:3a:2d:a5:fc:5a:7c:a7:3a:11:d2:f9:
d4:89:2b:07:20:70:27:7b:f0:2b:c7:0f:ad:80:c7:
e1:fe:dc:c2:a9:b2:16:87:5d:13:84:b7:c4:05:1a:
d9:89:9d:48:7d:bf:ee:13:ba:b8:05:bc:56:4c:c7:
9b:6a:f3:5d:50:0f:40:16:a1:19:41:e3:bc:ec:58:
42:f1:c7:24:95:db:01:ed:b0:78:76:b6:cd:e4:69:
cd:b0:29:5f:1c:95:13:1a:69:1f:7f:d3:06:e5:95:
f1:92:09:c2:13:ef:88:fc:aa:c6:5f:b4:0c:e9:74:
ad:ba:6b:e6:c3:2f:1e:53:96:d1:bf:99:50:b2:78:
e7:05:9a:2a:b3:bf:9d:17:ba:cb:8e:1f:e3:d0:91:
d3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:17:A1:8E:9E:EE:03:9C:B0:51:7F:A7:25:05:E8:9A:22:EF:9C:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC99FE1CBE7411EF9B2B8B53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.139.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:f9:5c:aa:87:28:a7:89:b6:3b:06:a8:85:c7:2f:57:88:e9:
cb:5a:a0:ae:95:2f:f8:bb:92:17:67:be:1a:51:74:15:da:d0:
bf:c1:ec:a6:6e:53:d9:01:23:94:d9:71:12:6f:93:c6:4c:7a:
dd:16:62:1d:11:65:8f:fa:4e:64:cc:88:d7:a6:8f:84:15:16:
36:ff:1f:c2:e3:41:8a:2a:be:db:30:92:8a:31:bd:6f:cc:98:
85:b4:89:13:58:d2:24:20:2d:fb:b6:0f:c5:e5:e3:9a:39:73:
24:91:d2:d4:a5:41:d8:2c:ef:b1:25:df:80:45:5e:c0:6e:aa:
5b:48:50:76:78:be:47:89:a3:3a:a6:11:1c:8b:ee:3a:5d:29:
53:5a:48:02:e3:ac:d4:83:97:e1:2d:2d:b6:20:ae:7a:07:f5:
3e:62:78:95:29:2e:73:35:f5:d5:f1:7b:2f:8b:b1:6c:3f:3c:
6f:26:2c:e4:2b:5c:dc:2b:01:9f:c5:ff:f6:6a:f6:a1:c6:bb:
d3:84:5e:c4:62:3d:24:54:c6:9c:2a:10:cd:e0:70:28:4d:9f:
82:88:01:02:78:07:f7:58:f9:23:61:8a:0f:c7:f9:15:8b:dd:
85:b3:55:3f:93:ae:bd:12:73:6e:51:1e:0c:7a:d1:9b:fa:60:
30:11:ff:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:38:04 2025 by rpki-client