Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CACDAB8F4D211EF8D533F44762E951A.roa
File: 0CACDAB8F4D211EF8D533F44762E951A.roa (raw, json)
Hash identifier: cX930GMazkCpmvOT00AO+0ThYbTu1vc+8FlT85bqxmI=
Subject key identifier: 24:29:EE:D1:AA:C5:3E:05:E3:82:88:2F:89:F5:80:83:44:AB:9D:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013905
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CACDAB8F4D211EF8D533F44762E951A.roa
Signing time: Thu 27 Feb 2025 06:14:06 +0000
ROA not before: Thu 27 Feb 2025 06:14:03 +0000
ROA not after: Sat 19 Feb 2028 06:14:03 +0000
asID: 17561
IP address blocks: 45.204.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80133 (0x13905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 06:14:03 2025 GMT
Not After : Feb 19 06:14:03 2028 GMT
Subject: CN=67c002ae-4da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:d4:95:b4:e6:8a:b6:1a:0d:fc:82:ec:61:
cf:41:30:70:44:42:c5:70:14:55:23:3b:1a:c4:22:
4e:bb:2f:e9:27:d8:c3:58:46:0e:6a:04:02:14:09:
af:da:37:bc:a0:c7:31:56:fe:97:f2:2c:05:e0:18:
49:11:d3:2d:4c:04:8e:e8:7c:5b:51:e6:c0:58:a6:
e0:27:31:8b:e2:3b:4d:c0:c4:e8:57:43:f5:ab:4d:
eb:ad:f1:7a:83:6f:69:d5:f0:f5:fe:d3:40:77:de:
7b:55:38:35:0f:b8:5d:17:35:f2:1b:4e:2e:3b:10:
de:3b:f6:4b:ea:a9:d9:f7:2a:f4:7e:10:3b:be:da:
80:5a:71:30:c6:07:6f:62:a0:27:69:ff:63:ad:3e:
8a:a9:c3:6e:98:e1:61:52:dd:40:bf:a5:90:50:bd:
cb:f6:a1:5c:96:53:fa:3b:61:99:2a:d8:ff:55:14:
4c:15:59:6a:1f:91:ff:8f:7b:90:42:34:ff:3b:47:
19:30:ad:73:5e:14:a7:c2:da:31:3d:78:5a:a3:07:
40:6b:5e:c1:5c:bf:3b:5d:bc:9a:5f:98:31:7a:bf:
cd:10:11:94:9b:f8:d0:88:63:50:32:d7:ef:1a:7e:
9e:af:50:fd:7a:9f:13:83:bd:d7:e9:71:7f:28:47:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:29:EE:D1:AA:C5:3E:05:E3:82:88:2F:89:F5:80:83:44:AB:9D:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CACDAB8F4D211EF8D533F44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.86.0/24
Signature Algorithm: sha256WithRSAEncryption
33:81:4e:cd:a3:c1:7f:2e:b4:c1:5b:56:e9:bc:ba:83:b0:45:
02:89:be:05:64:59:a8:73:0f:05:0f:4f:ae:3b:a3:c4:5f:dc:
cc:c1:11:8e:21:10:38:ba:9d:e2:51:54:57:22:7d:51:9f:0f:
ad:54:7a:cd:3c:3c:07:12:73:d4:8c:59:7e:d5:97:a3:a3:96:
61:e9:cf:8b:5e:ed:e2:f7:8f:56:88:c5:7e:da:e4:0c:ad:ea:
d7:4d:5e:98:30:22:07:a4:53:0b:4c:75:35:1f:2f:dc:5c:fa:
c9:c3:25:17:7e:e2:cc:38:1d:67:f6:1a:10:11:8c:6d:17:e3:
a4:f0:6d:3e:7b:0b:eb:cf:cf:0b:58:36:28:3e:ec:f0:22:6c:
e1:6d:b3:45:c0:39:05:6a:56:54:cc:cd:42:0e:fb:d3:6e:d5:
cc:4b:17:13:eb:7d:8c:42:3f:ed:bb:62:1d:46:a7:f0:14:fe:
3e:16:7d:40:ca:f0:7c:c3:a1:3f:9f:50:0d:cb:2b:4c:d8:52:
f3:1c:ce:9e:85:95:5f:67:79:48:55:75:b9:35:ea:29:77:42:
51:8b:69:d0:e0:11:c8:79:ba:e7:87:6a:f7:84:a1:67:21:10:
e1:47:87:50:a7:6d:fe:57:06:3f:11:41:f7:ba:04:bd:18:e4:
7a:e5:8c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:34 2025 by rpki-client