Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02A844A0F8D111EFB598DD84762E951A.roa
File: 02A844A0F8D111EFB598DD84762E951A.roa (raw, json)
Hash identifier: kSUbeYRydf4RmnyihrN7SW0KaKJ/xm85NFnarHjMLj4=
Subject key identifier: 41:72:9E:D1:3F:86:2B:37:B4:A0:FD:82:B1:F0:58:36:93:90:C5:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02A844A0F8D111EFB598DD84762E951A.roa
Signing time: Tue 04 Mar 2025 08:16:45 +0000
ROA not before: Tue 04 Mar 2025 08:16:41 +0000
ROA not after: Sun 11 May 2025 08:16:41 +0000
asID: 3561
IP address blocks: 45.194.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82639 (0x142cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 08:16:41 2025 GMT
Not After : May 11 08:16:41 2025 GMT
Subject: CN=67c6b6ed-772c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:1e:37:f1:be:e2:dc:c3:9f:8a:c3:59:c9:
cf:22:5e:39:34:7a:2a:36:21:65:89:72:36:cb:3d:
8c:13:32:7f:f7:f4:8a:d0:0f:a3:ed:fa:40:0b:dd:
1d:d2:e1:42:15:ba:89:43:38:20:b6:5a:a7:2b:ba:
ec:28:c8:62:de:e1:b4:43:29:aa:49:7f:fd:75:07:
2a:e3:11:19:d9:b8:54:7f:58:27:0b:6f:12:5f:ed:
79:95:d2:02:c9:e9:7c:89:e9:79:26:42:db:05:c7:
6f:8d:ee:ec:b7:72:03:52:cf:68:e4:81:b8:06:f2:
60:de:51:94:66:76:86:71:58:b6:82:9e:90:51:8e:
5b:d1:ba:d2:4e:81:e5:5e:a4:73:e4:f9:3e:b4:71:
df:a5:c2:49:52:ba:ee:65:a0:64:84:fd:29:96:25:
30:44:ee:26:8a:4a:4f:18:1f:f4:6b:02:37:10:03:
4c:8d:e5:81:8c:bf:27:34:78:d5:cb:65:52:55:f2:
f4:39:9c:73:e1:f9:a2:9f:28:30:a4:c6:d9:91:5b:
f1:66:78:a7:bc:2e:1d:01:bc:10:ec:b6:e8:f5:a2:
af:f8:6b:8a:7c:b5:ce:d3:91:3a:1e:fd:82:76:6c:
e1:3d:90:04:06:59:c5:6c:35:e6:ce:f1:d4:18:40:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:72:9E:D1:3F:86:2B:37:B4:A0:FD:82:B1:F0:58:36:93:90:C5:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02A844A0F8D111EFB598DD84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.100.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:7b:bf:7f:fe:b7:a8:4f:7d:ba:18:65:2c:29:f5:3c:c1:2e:
23:26:6b:85:80:47:cb:67:64:c3:c7:06:53:bc:af:33:86:18:
c1:db:4a:58:d2:53:6c:b2:d6:34:3b:d1:8e:63:e5:3a:8e:e5:
00:88:77:b0:2f:35:88:73:84:11:37:5e:f4:65:c0:af:de:34:
d3:40:05:a9:fc:35:bd:4c:6f:32:bf:c1:4e:a8:49:5b:ef:14:
fe:42:af:45:09:ba:eb:12:af:94:58:1b:36:5b:5e:5e:4b:ff:
17:3d:46:00:b2:3e:ce:49:69:4f:79:1a:28:a3:c2:c9:ad:b3:
dd:53:15:55:fc:05:c1:fe:54:1f:1f:bc:ff:65:f3:15:43:4b:
c5:c9:bb:a4:6b:96:6b:b9:ae:00:35:67:8d:7c:cc:c9:e7:38:
81:bc:93:04:a5:3d:7c:43:5e:5c:e2:f9:18:1a:20:8c:0f:65:
62:f8:e1:b6:ca:09:1f:70:9e:2d:6c:6e:b8:1d:80:11:97:8c:
f4:7c:a8:aa:2b:b1:cd:20:b8:c5:ee:78:c6:84:56:8c:f3:77:
cd:84:6d:a4:4c:09:87:b0:47:bd:35:65:87:88:d3:45:c0:b3:
ec:5c:c8:23:29:40:97:58:23:ec:8b:21:e0:31:a7:43:8a:52:
57:7b:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:04 2025 by rpki-client