Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08339D3EF39011EF99A32F88762E951A.roa
File: 08339D3EF39011EF99A32F88762E951A.roa (raw, json)
Hash identifier: yOmxBgRW6K1P6w7tDXbPKvsInk1dMUejNcOZ6JE9s0U=
Subject key identifier: 24:99:E2:A8:B5:71:7E:13:8C:34:F8:82:8E:1C:C4:17:DA:CA:0D:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E7B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08339D3EF39011EF99A32F88762E951A.roa
Signing time: Tue 25 Feb 2025 15:49:01 +0000
ROA not before: Tue 25 Feb 2025 15:48:57 +0000
ROA not after: Wed 09 Apr 2025 15:48:57 +0000
asID: 63139
IP address blocks: 45.197.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77435 (0x12e7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 15:48:57 2025 GMT
Not After : Apr 9 15:48:57 2025 GMT
Subject: CN=67bde66d-a2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:0e:86:84:5c:8f:d2:be:dd:32:31:99:28:
01:20:a8:5b:1c:b3:e5:a7:1a:a2:d1:90:be:5f:79:
48:64:e6:17:d1:7f:b9:a9:89:11:c9:b4:eb:5e:6e:
19:02:21:03:2a:80:b3:9b:95:05:af:4b:24:99:0b:
25:20:6a:1e:8d:3a:91:00:e1:06:8f:b4:7f:f6:18:
8b:6c:b1:1c:56:09:d3:f9:e2:4b:0c:c4:eb:c3:1e:
5d:b1:a8:3f:99:8e:39:0a:50:0e:28:37:f1:59:86:
50:a6:c5:a4:e7:63:d4:ea:18:e3:1a:c6:97:63:71:
65:0c:dd:a1:ec:2b:dd:8b:4e:a9:41:e7:c0:41:eb:
8b:23:16:aa:06:95:f2:c0:35:80:1e:03:68:2e:e5:
42:e0:2d:6c:d4:e1:d2:c1:4d:1d:d0:9d:13:25:f4:
46:62:dc:45:e6:b6:61:f2:70:c3:3e:97:ca:3a:4c:
64:48:da:22:a7:a3:79:18:97:99:9d:b3:7f:38:7a:
05:3e:c2:ef:19:9c:64:e6:f9:c6:3b:16:95:54:06:
ee:cd:a0:7b:70:c3:4b:67:46:34:91:6b:7a:a0:b1:
f9:f3:52:f2:92:4b:95:ca:08:e2:50:e4:ca:c9:f1:
20:b3:76:de:57:c9:3a:f4:55:23:32:67:3a:b8:92:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:99:E2:A8:B5:71:7E:13:8C:34:F8:82:8E:1C:C4:17:DA:CA:0D:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08339D3EF39011EF99A32F88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.105.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:dc:1c:c0:f3:ed:35:6c:e2:c2:87:c9:07:77:d9:05:33:16:
bd:5b:62:65:c2:80:b3:1a:88:bd:71:5e:88:fa:20:87:7b:71:
5e:89:40:ef:89:80:73:53:fd:1e:35:ce:83:38:6e:09:71:ee:
67:aa:6a:24:cc:2c:8f:eb:cc:0e:f9:77:27:aa:c0:3c:c0:34:
6a:ab:99:11:33:20:c6:1a:45:17:fa:1c:35:1f:3f:c9:7a:7b:
4a:3a:e9:04:bd:fe:9e:2d:fc:cf:0d:de:9a:3c:35:5f:2d:12:
5e:5b:11:89:68:be:ff:ad:80:27:56:63:7a:c3:e2:5d:e0:9e:
bf:76:f7:48:f6:1a:12:3d:90:b9:fc:62:03:3b:d3:f3:bf:95:
e2:59:89:fb:e1:ee:37:26:42:f2:ae:65:11:1c:52:3c:20:ce:
9b:12:2e:d2:53:6c:73:21:0f:a9:c1:9a:1d:8c:c8:a8:26:a9:
9e:6d:d5:3b:0e:f9:7e:b2:69:fa:e1:ea:8a:ec:e4:71:3b:e3:
41:df:db:73:75:04:55:f0:ee:c5:0a:dd:5c:71:33:74:d1:66:
cd:89:66:90:a1:f6:e6:9f:f0:db:98:c4:7c:22:cc:c1:d2:16:
3b:fa:b5:8a:06:2a:94:74:66:17:f8:5a:1f:09:03:78:f8:ba:
6c:c7:2d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:40 2025 by rpki-client