Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/0CFB1476C8CC11EF9406B57A762E951A.roa
File: 0CFB1476C8CC11EF9406B57A762E951A.roa (raw, json)
Hash identifier: 7LfXwZMM3vdHGMI1mbDKYA1RsHJ3utJycapfbSUT6sM=
Subject key identifier: DD:80:AF:F2:B4:72:B8:0D:C9:6C:E5:BA:0C:60:1C:80:1D:73:6A:B7
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0439
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/0CFB1476C8CC11EF9406B57A762E951A.roa
Signing time: Thu 02 Jan 2025 05:40:19 +0000
ROA not before: Thu 02 Jan 2025 05:40:15 +0000
ROA not after: Thu 01 Jan 2026 05:40:15 +0000
asID: 329007
IP address blocks: 45.221.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1081 (0x439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR
Validity
Not Before: Jan 2 05:40:15 2025 GMT
Not After : Jan 1 05:40:15 2026 GMT
Subject: CN=677626c3-0943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cd:b6:25:a6:f6:be:b4:6d:0a:f1:9e:b5:a8:
f5:5a:a0:47:17:6a:be:81:a1:13:9c:5e:69:45:49:
d7:ed:d0:34:5b:64:f9:3c:94:50:01:60:86:79:6a:
64:79:89:18:7b:bc:0a:a9:07:dc:63:c0:24:c4:9a:
95:6e:a9:92:8b:79:e1:8c:cd:c2:32:e8:a6:fb:b2:
91:48:6a:8f:ae:30:2e:ee:e6:35:4a:51:d7:33:6a:
ea:5e:db:d3:6a:0e:df:37:23:d8:65:e7:82:ba:c4:
61:d1:c8:ff:73:d8:a3:c8:a9:ae:aa:d4:b5:3f:29:
b4:7d:f8:36:cf:01:99:87:b6:7b:d1:c9:38:5c:e6:
b6:83:a5:ed:31:4e:7b:2f:ac:2d:a5:14:0e:ef:20:
e5:97:78:43:50:80:14:39:03:bc:69:36:6e:f3:55:
02:78:44:e6:ef:b9:4b:e0:26:85:e1:3a:e8:2a:3c:
ae:66:55:a7:ba:e9:8a:e8:9c:98:73:a7:d7:5a:f0:
c1:d2:d5:1c:81:9a:ce:24:0f:8d:6b:10:16:04:dc:
10:d3:83:a2:58:31:92:d9:b9:90:6f:79:20:24:db:
c6:b0:79:27:77:99:e9:8d:6f:13:94:40:bb:88:8e:
ea:9f:15:9b:8c:0b:23:47:ee:89:86:bf:55:28:fe:
79:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:80:AF:F2:B4:72:B8:0D:C9:6C:E5:BA:0C:60:1C:80:1D:73:6A:B7
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/0CFB1476C8CC11EF9406B57A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.65.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5d:96:4f:d1:04:48:67:8f:89:88:91:07:e2:39:36:de:e8:
07:b7:99:25:86:f1:88:28:37:28:6b:e0:94:9b:0e:36:72:67:
ca:77:25:a3:4d:46:69:2a:4a:e2:16:17:a4:fc:4e:56:ca:41:
6d:c6:0a:cc:25:ad:b9:71:7a:4e:71:a3:96:c8:84:4d:0e:5b:
0f:82:5e:11:62:ae:1a:90:19:3d:e0:4f:f9:42:f1:d1:43:92:
41:f8:22:f5:54:fd:ea:48:f9:05:47:11:93:d1:23:57:47:ca:
d9:47:6c:51:b8:2c:54:1e:80:6c:c9:d0:9a:a5:23:c3:93:a1:
59:ff:9f:a6:21:fd:c9:fb:33:d0:c7:e2:f6:02:e6:04:7f:19:
ec:6e:e9:d5:7c:b2:a5:0f:9f:f6:0c:63:82:66:d5:ff:1d:33:
e0:7a:f5:8b:80:d4:ee:a8:ba:21:c4:78:e6:d0:c5:9a:90:aa:
1f:1d:8f:b6:e7:b6:ba:c0:59:f8:ff:a7:0b:dd:5a:12:4b:17:
86:37:7e:64:3f:01:99:19:2f:1f:41:12:b2:a8:2f:7a:38:d3:
28:33:e9:1a:84:be:84:18:0b:26:29:4e:7e:f9:de:3c:6d:d0:
27:39:11:4e:db:17:b9:3c:d3:2d:c7:a9:ee:08:44:87:5f:58:
1d:06:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:49 2025 by rpki-client