Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0EE56650F47911EFBEE3E455762E951A.roa
File: 0EE56650F47911EFBEE3E455762E951A.roa (raw, json)
Hash identifier: iwii9UVZ2yNKbvvtnvcbGX6/HUCssNOBlsx7tfHSe24=
Subject key identifier: D1:10:9B:B1:82:44:F7:FE:5C:BE:C9:B1:E6:C5:3E:11:09:3F:89:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01371F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0EE56650F47911EFBEE3E455762E951A.roa
Signing time: Wed 26 Feb 2025 19:37:05 +0000
ROA not before: Wed 26 Feb 2025 19:37:01 +0000
ROA not after: Thu 19 Feb 2026 19:37:01 +0000
asID: 984
IP address blocks: 45.201.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79647 (0x1371f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:37:01 2025 GMT
Not After : Feb 19 19:37:01 2026 GMT
Subject: CN=67bf6d61-58cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fc:a0:f9:17:4b:66:84:69:40:d9:a1:58:d8:
cd:e1:e2:4b:39:ed:4e:73:66:2a:52:23:50:95:dd:
73:f2:dc:9b:fc:1b:f1:a6:ec:e3:9c:ec:f6:6b:fa:
d7:28:eb:45:63:b6:1b:1d:65:d1:99:12:05:85:5e:
9b:04:b1:fa:b8:81:6f:21:51:27:45:4f:c2:57:6e:
d0:d1:c0:d3:61:e2:8f:0b:c4:e3:35:5a:77:e3:e2:
1e:84:23:33:46:74:47:be:db:9a:c7:3f:1d:98:66:
9d:ca:0b:12:f2:83:77:41:1a:3a:e0:53:01:b8:ce:
75:82:e6:d2:9d:5b:fc:f3:84:7a:6e:7c:75:fa:c0:
a7:f8:28:83:22:93:c3:99:4a:36:35:e2:56:2f:43:
ca:e2:fc:e7:cb:1f:11:a6:4b:ad:b4:54:b9:ce:57:
90:7f:42:d2:53:50:3e:5f:43:ca:a0:92:0f:c3:8d:
85:66:fb:cd:52:75:f3:f1:27:27:c2:a5:2f:d6:0b:
c9:ca:d5:a5:e2:b2:2b:84:e6:b6:f9:26:4c:cd:d7:
c8:30:7d:ca:1a:bd:51:50:a8:29:30:70:d0:23:68:
d0:ba:a0:52:2b:81:ab:20:4c:ce:25:1d:41:6b:8d:
48:de:6e:06:40:3d:2d:35:72:1d:cc:34:66:6d:6b:
c0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:10:9B:B1:82:44:F7:FE:5C:BE:C9:B1:E6:C5:3E:11:09:3F:89:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0EE56650F47911EFBEE3E455762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.101.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e1:f7:d5:02:b5:c4:74:8a:10:92:0a:0f:70:53:4a:49:65:
31:f7:02:d4:f0:5f:e1:8d:30:d4:63:99:e4:c6:5e:1c:fc:0d:
7d:30:e0:e2:c4:ae:fd:9e:62:5d:5a:a6:cb:b1:d9:d5:c4:0b:
e6:a5:e6:ba:88:51:f4:d6:07:55:eb:b3:7d:83:bb:9a:7c:38:
2e:9e:ba:34:c7:37:9f:ef:16:9a:c5:1a:5e:94:6a:9f:6a:98:
2a:6a:fe:51:f6:b8:1a:03:c2:df:cf:ee:46:3a:62:45:56:0b:
6c:a8:5b:8d:59:c9:29:75:30:5c:2f:73:5d:88:e5:77:38:46:
b5:0e:ea:2c:50:3a:8e:84:00:a2:95:0b:5a:5d:e5:77:b5:d8:
f9:77:90:db:9b:50:01:eb:bf:48:5a:a9:84:ba:71:fa:8d:6f:
c1:41:97:c3:1c:2a:bc:11:2b:ba:d5:21:59:a7:f2:b6:0b:b0:
91:29:0b:cb:0f:d6:63:35:88:ce:b4:10:cc:d9:f6:c2:de:18:
b2:e8:93:eb:5e:71:08:8b:34:c2:16:f0:95:70:9e:9d:4b:c7:
9d:22:cc:5f:c8:48:67:da:a2:11:69:ec:ea:3e:6a:26:80:cd:
8a:86:85:a7:26:8e:49:00:40:d2:42:4c:9d:e0:a7:6d:8f:93:
00:5b:b7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:07 2025 by rpki-client