Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/A54FDC66C8CC11EF88D7067D762E951A.roa
File: A54FDC66C8CC11EF88D7067D762E951A.roa (raw, json)
Hash identifier: 0elhWFNEdYzl5hHoTcP+hSIKUJUwdYpHkAAKB+z0tu8=
Subject key identifier: AD:90:34:7D:4E:77:B2:93:73:57:01:54:2D:83:44:1B:EA:AD:CA:02
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0443
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/A54FDC66C8CC11EF88D7067D762E951A.roa
Signing time: Thu 02 Jan 2025 05:44:35 +0000
ROA not before: Thu 02 Jan 2025 05:44:31 +0000
ROA not after: Thu 01 Jan 2026 05:44:31 +0000
asID: 329007
IP address blocks: 45.221.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1091 (0x443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR
Validity
Not Before: Jan 2 05:44:31 2025 GMT
Not After : Jan 1 05:44:31 2026 GMT
Subject: CN=677627c2-f21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:a7:e1:8e:d7:3a:cf:ed:ef:12:dd:14:e6:
d2:43:4b:5a:b6:62:4d:71:51:8d:0f:57:74:77:d8:
4e:34:b1:1b:b1:ab:96:c2:ba:f3:f8:de:4c:76:ea:
b0:37:a0:57:a9:08:67:d8:3a:38:9e:0b:75:fe:bf:
b2:37:c0:9b:8b:dd:e4:96:00:47:e6:f2:3a:cd:9d:
94:7c:af:36:c2:76:67:7a:40:7a:b5:db:7a:1f:9a:
f2:1b:c4:0c:21:ff:05:58:9e:e9:0f:df:bf:8b:b6:
4b:a4:2d:83:d4:b2:b3:cc:7f:ce:03:7c:a4:aa:6e:
b2:21:ec:9d:7c:81:a7:26:6f:f4:ac:3f:68:11:31:
ef:4c:8f:aa:63:8e:f3:c4:58:ce:8f:d9:f9:ca:67:
37:40:9f:be:6f:72:f4:cc:02:d1:f2:25:0c:8b:42:
3a:c7:53:62:65:bf:5a:2f:bc:87:1f:d6:82:86:af:
17:d9:f3:81:5e:e2:e9:95:38:2f:85:c2:d9:1c:72:
e5:56:88:5b:4a:5e:92:a8:fc:af:0c:92:6f:cc:21:
0c:09:eb:a9:d4:a4:fb:86:34:eb:71:0e:98:eb:61:
2b:c9:9d:6d:ba:35:11:51:7b:63:19:bb:22:bb:e8:
7c:54:51:74:f3:c4:44:30:55:ac:ca:58:62:5b:1c:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:90:34:7D:4E:77:B2:93:73:57:01:54:2D:83:44:1B:EA:AD:CA:02
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/A54FDC66C8CC11EF88D7067D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.70.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ba:77:46:ff:eb:28:82:51:10:85:18:de:aa:ad:ba:34:b8:
7f:62:c9:6e:80:9f:45:88:db:bf:de:e1:cc:88:f0:fa:97:4c:
29:32:86:8c:14:26:a3:09:bd:40:92:ba:63:2c:c6:bd:70:0f:
7e:3d:ff:df:e6:a3:2e:f6:5e:04:ff:16:f8:b8:5a:72:dc:4d:
2d:1b:15:79:e1:e3:f7:b1:b3:a6:86:27:7a:ae:79:b7:9d:e2:
f9:ef:d0:88:16:92:23:a3:2a:65:c8:57:7d:82:27:ef:63:09:
d7:d9:aa:16:fb:73:d7:c4:5a:70:0c:b1:b7:fd:9b:3c:fc:4d:
d1:cf:c4:28:40:72:46:a7:bc:2c:8d:2d:64:2e:cc:1e:9c:d5:
a7:1a:d3:4e:e1:28:93:62:fe:c3:01:77:28:cf:03:5c:82:3d:
0b:4b:00:39:37:80:d0:2f:b7:1a:04:3e:f0:f5:fe:9d:06:a0:
eb:de:5c:03:0c:0b:41:4a:9c:08:84:2d:a7:00:ce:e2:50:41:
b1:d9:bb:fc:bd:2d:58:92:39:28:b2:c9:f4:f5:d2:24:bf:7a:
bb:89:16:77:3c:9b:d9:34:f1:cb:e7:89:88:1d:23:67:4b:5e:
1b:0f:c6:74:0e:59:42:0e:33:83:8e:3a:5c:e9:00:83:1c:a3:
96:81:e0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:53 2025 by rpki-client