Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/C00ACC96C8CC11EF91700A7F762E951A.roa
File: C00ACC96C8CC11EF91700A7F762E951A.roa (raw, json)
Hash identifier: LHuXmlGuuXmsJ9l75i8nvIbV2CvEHd+5K4lZ1ALOMUs=
Subject key identifier: 0C:57:4B:E8:88:FF:66:92:76:07:46:E6:07:D0:4A:C0:3D:A3:2E:AD
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0445
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/C00ACC96C8CC11EF91700A7F762E951A.roa
Signing time: Thu 02 Jan 2025 05:45:19 +0000
ROA not before: Thu 02 Jan 2025 05:45:16 +0000
ROA not after: Thu 01 Jan 2026 05:45:16 +0000
asID: 329007
IP address blocks: 45.221.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1093 (0x445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR
Validity
Not Before: Jan 2 05:45:16 2025 GMT
Not After : Jan 1 05:45:16 2026 GMT
Subject: CN=677627ef-6860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:cc:5f:49:cd:7e:4c:23:af:bb:2f:2d:83:
27:33:2e:7a:19:77:57:bc:6e:27:d4:df:84:bb:e3:
1c:ab:4c:c4:7e:7b:85:40:c6:5e:b6:e0:6a:f5:7b:
9e:2b:97:41:73:c9:42:3e:9f:2c:bd:d0:e7:89:98:
26:5f:c5:1d:61:84:b1:6e:51:e2:3f:51:97:6b:ce:
fc:af:39:03:1c:51:f2:df:e4:6b:1c:80:1d:7b:30:
bc:ea:26:b9:57:62:fb:da:85:cf:55:f1:d5:e1:ec:
3e:d3:17:03:b6:3e:cf:05:8c:c6:ca:5c:aa:6f:dc:
9a:d2:70:cf:1e:11:29:34:9e:20:13:65:eb:da:64:
06:f8:88:08:16:eb:0f:7a:ba:f1:5d:d0:3e:a6:3f:
00:e2:f5:17:d9:84:54:cc:9d:16:96:f0:ae:b4:5c:
4c:be:e4:cd:37:d4:57:c1:2c:51:d9:90:5a:d9:08:
0c:4d:ad:d1:7e:31:90:6c:dc:b4:3b:db:0b:4c:a1:
98:72:29:01:67:ee:b3:f6:82:30:48:2f:fc:b6:00:
f0:35:bf:54:35:73:30:46:72:9f:74:b1:6b:44:7b:
3e:73:2e:0a:30:f0:3b:39:96:af:de:45:3b:e1:bf:
2a:bb:23:c7:85:eb:b9:be:b4:7f:35:59:57:c5:af:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:57:4B:E8:88:FF:66:92:76:07:46:E6:07:D0:4A:C0:3D:A3:2E:AD
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/C00ACC96C8CC11EF91700A7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.71.0/24
Signature Algorithm: sha256WithRSAEncryption
78:eb:96:a8:c7:ae:7c:ae:2e:a9:0a:24:2c:5f:88:64:37:b6:
5e:e2:87:d2:f5:03:8d:0f:cd:d2:93:7b:da:97:e9:fe:2e:14:
33:7c:51:18:5b:ff:87:ee:22:f2:29:e8:d2:c2:40:b9:ae:30:
a4:2a:35:2a:d9:01:27:98:1f:3f:e3:e7:5a:ed:c4:7c:ae:ea:
a2:5e:f2:ac:00:26:bf:8c:b8:15:c3:a7:a7:dc:b6:e8:0b:71:
17:f4:27:e9:34:8f:dd:68:4e:81:41:2c:b7:33:eb:37:fd:be:
a7:b0:c1:9b:be:a8:e1:30:93:34:71:9c:72:4e:03:e9:af:9b:
a8:1e:39:6b:b2:e6:a4:d1:8b:f9:f3:4d:cc:5c:1c:37:14:78:
cc:c9:4f:dc:a3:56:24:3f:43:49:92:d5:55:58:2d:c2:a1:e6:
42:4c:0f:c9:3e:0a:39:69:0b:e3:92:7f:eb:ac:60:d0:44:48:
84:a6:98:00:75:7d:ad:9f:1b:7d:85:4e:de:2e:ce:42:10:e0:
ab:2b:78:72:47:7e:0d:ad:8c:9e:f9:86:33:ee:7c:bb:7d:3f:
d2:e0:6f:29:cb:05:fb:43:cb:77:5f:ce:c0:0a:ea:e5:ee:5e:
5b:e5:88:0d:c7:cb:14:d9:ad:71:46:bb:7d:eb:3a:5a:9f:a7:
7c:7a:83:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:41 2025 by rpki-client