Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BB8F052F36311EF8B074A5D762E951A.roa
File: 6BB8F052F36311EF8B074A5D762E951A.roa (raw, json)
Hash identifier: bpIIF7ciwd0su7S+EtR6FBOcXi+ozCXzP+0gcE3b0Q0=
Subject key identifier: CC:66:05:A2:AE:97:8F:89:A1:38:90:ED:E9:2C:0F:FC:6E:B3:A0:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E22
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BB8F052F36311EF8B074A5D762E951A.roa
Signing time: Tue 25 Feb 2025 10:29:41 +0000
ROA not before: Tue 25 Feb 2025 10:29:37 +0000
ROA not after: Wed 09 Apr 2025 10:29:37 +0000
asID: 63139
IP address blocks: 45.197.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77346 (0x12e22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 10:29:37 2025 GMT
Not After : Apr 9 10:29:37 2025 GMT
Subject: CN=67bd9b95-783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:2a:61:ec:5f:96:cc:5b:6b:bb:c4:c1:a5:
6f:d9:27:a1:1a:3f:ca:fd:2f:5e:7c:f9:ca:0a:cd:
99:91:22:42:8a:41:03:f0:16:84:0f:70:79:9b:73:
73:77:4d:1d:6c:a1:ef:02:da:fd:f2:94:24:2d:b4:
ed:f3:73:9d:3b:f2:13:73:08:6b:c3:fb:07:b9:7a:
6e:f1:ad:ae:bb:54:77:7d:a8:2f:63:83:ab:a7:91:
29:b4:a5:26:f4:d0:e8:93:21:44:9d:83:c4:34:70:
06:6f:fa:0f:71:70:b6:48:01:32:56:2d:f8:87:65:
1a:2a:99:f8:e5:39:2a:37:a6:be:60:3c:4f:36:89:
9d:76:f8:89:03:84:4b:c1:3b:81:f3:4b:b3:bc:8e:
67:50:1a:95:25:dd:86:18:0e:8c:31:91:2e:8c:0c:
e3:51:95:54:d2:02:88:25:76:3f:4b:37:23:b7:c8:
15:86:19:4b:24:9a:46:c7:03:aa:7d:54:a0:27:0a:
22:a2:3f:7b:05:c3:67:8e:92:43:0b:e8:64:b5:5b:
56:b8:44:83:a5:aa:50:eb:74:28:3d:28:b9:ee:c6:
1d:d2:f0:1c:27:5e:26:e1:4a:16:85:37:69:6f:89:
d6:69:8d:45:b1:8f:d8:4d:4d:7a:f9:28:9c:99:cc:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:66:05:A2:AE:97:8F:89:A1:38:90:ED:E9:2C:0F:FC:6E:B3:A0:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BB8F052F36311EF8B074A5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.79.0/24
Signature Algorithm: sha256WithRSAEncryption
80:75:95:93:fe:1e:33:29:55:37:3d:cc:3f:24:f3:e8:f1:ce:
7e:1a:36:06:e2:24:b5:da:a3:51:48:60:8e:1f:e1:e9:b5:c5:
e0:0b:99:0d:bd:05:f8:67:41:16:de:45:5c:b2:40:6d:bb:0f:
d2:fe:3b:8d:63:a9:88:66:42:eb:ab:96:be:8d:fd:1e:46:74:
91:05:9c:0a:60:55:54:70:2d:14:13:89:c5:03:bd:66:ba:e3:
66:e2:66:f9:9e:64:7c:62:95:dc:e3:96:e7:77:10:b7:8b:f1:
25:cf:77:d3:a6:4e:ff:50:f4:dd:ee:ca:f7:f0:e7:7d:12:be:
e3:1f:c7:7f:7a:48:2c:28:fc:ea:e6:b0:30:13:ce:f3:32:00:
7e:e9:78:5e:af:7e:15:62:5b:d7:a0:1a:fe:a8:88:ed:fd:a7:
27:2a:54:cf:9c:b1:6d:f5:da:f2:ef:9f:ec:69:42:e0:d2:4a:
90:3b:23:19:f7:db:de:6c:f5:59:bb:d4:b8:0c:f4:7b:97:57:
ad:44:b5:ea:6c:5c:9a:88:49:3a:aa:5b:c8:a4:70:aa:48:7b:
c4:83:60:98:57:db:16:8c:bc:85:48:89:fa:cb:85:1c:18:28:
da:6b:04:84:1d:df:59:d8:bb:0d:5b:f3:fa:b0:17:85:df:64:
b4:28:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:26 2025 by rpki-client