Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBC68364F43C11EFB7CFEEAC762E951A.roa
File: BBC68364F43C11EFB7CFEEAC762E951A.roa (raw, json)
Hash identifier: eTy3C70eZgrjcb/RFU+HmoqzO5IvBhMRfLIL0T4tGu4=
Subject key identifier: 1A:A8:41:90:91:E0:E2:4D:5E:29:8B:0A:5C:F8:56:27:73:DE:4D:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013268
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBC68364F43C11EFB7CFEEAC762E951A.roa
Signing time: Wed 26 Feb 2025 12:25:16 +0000
ROA not before: Wed 26 Feb 2025 12:25:12 +0000
ROA not after: Thu 19 Feb 2026 12:25:12 +0000
asID: 984
IP address blocks: 45.206.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78440 (0x13268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:25:12 2025 GMT
Not After : Feb 19 12:25:12 2026 GMT
Subject: CN=67bf082c-7204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:69:94:23:ea:f7:3d:2b:45:1c:6b:60:9e:
ac:38:35:1a:29:5f:a0:d3:cd:ac:57:f8:ec:7c:ae:
5b:19:d5:01:ac:e6:e9:92:3b:04:02:0a:80:cb:4d:
d4:eb:2a:7e:06:6f:89:43:f1:1a:fc:93:f7:a2:a3:
56:ac:af:16:c2:7a:b8:3b:6f:1d:44:dd:45:9b:4c:
33:d8:e4:65:b9:00:da:06:2d:63:cb:b9:e4:ee:c3:
82:56:e4:42:2b:41:c7:ad:40:a0:8d:06:05:9d:58:
c4:a0:4d:4c:8f:d4:ca:5a:9d:97:03:6c:e0:2e:10:
8a:d3:f0:ec:97:5e:30:1a:e3:0a:65:be:17:65:04:
4d:82:d1:c1:c1:24:2f:1e:3b:ea:8e:e9:d1:f9:f1:
42:62:f1:4a:74:9a:9b:ab:9b:8e:2d:64:f1:9f:38:
b0:20:5b:ff:b0:b9:09:0e:84:4f:2b:a1:fd:68:9b:
72:17:1f:cf:ce:42:53:7f:13:83:35:71:1d:e7:cb:
9b:6b:59:e6:a6:fc:9d:8f:d2:5c:54:1a:1f:aa:85:
28:ac:ed:99:86:37:b5:d1:32:cc:65:da:bc:42:3d:
0c:0c:b1:65:37:04:54:f8:ad:62:37:0c:79:07:72:
52:52:f8:28:fb:60:9e:db:c2:29:6d:c0:d1:1f:ea:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A8:41:90:91:E0:E2:4D:5E:29:8B:0A:5C:F8:56:27:73:DE:4D:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBC68364F43C11EFB7CFEEAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.10.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ef:a9:54:f6:c3:0f:8b:1f:28:bf:ae:95:93:8f:c0:35:b8:
3d:3b:8b:e6:d2:b7:0e:31:df:9e:2a:84:ac:1c:de:42:da:da:
61:86:78:09:ed:43:c8:85:4f:4a:ed:3a:81:a9:b4:85:43:e2:
43:5d:57:1a:81:5a:0d:ed:f5:e5:79:08:2a:59:21:6d:2d:fe:
cb:d3:8e:41:be:93:ce:79:51:c4:63:49:37:37:b0:32:29:48:
a2:4b:ad:5e:77:7b:52:2e:53:ae:40:cf:d7:75:f1:5e:08:6e:
28:4c:ac:4d:68:1e:1e:4c:5f:59:a5:ff:71:df:d4:fc:98:07:
77:96:74:b1:60:84:0d:53:8f:1a:38:b3:94:ff:fa:c5:e9:44:
bb:98:fc:a0:be:54:04:a2:51:23:f1:de:6e:af:6b:46:39:31:
f3:ee:78:97:b7:72:87:ea:28:1c:ed:1c:e1:df:a1:2d:b4:cf:
bb:1b:a8:95:16:08:7d:61:76:13:65:2f:76:32:07:49:00:11:
aa:9c:b9:5b:fa:ae:44:fa:29:74:ac:ef:0b:72:6e:28:84:cd:
92:8e:47:c3:2c:95:5a:13:59:9d:bc:44:69:75:9c:e1:51:4a:
d1:3f:0d:ef:b5:82:3b:8b:85:03:66:6d:9e:37:41:d0:a7:d1:
6e:7d:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:43 2025 by rpki-client