Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22D72554F4A111EF95C79662762E951A.roa
File: 22D72554F4A111EF95C79662762E951A.roa (raw, json)
Hash identifier: Vy8PHt3Qc8RYp1zHgW1Q+oVGWoCv/H+RYUdwwWmGmCU=
Subject key identifier: 61:36:DA:29:D3:5A:DB:1A:EC:E2:33:0F:06:E7:6C:EF:85:F3:75:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01386C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22D72554F4A111EF95C79662762E951A.roa
Signing time: Thu 27 Feb 2025 00:23:58 +0000
ROA not before: Thu 27 Feb 2025 00:00:54 +0000
ROA not after: Thu 19 Feb 2026 00:00:54 +0000
asID: 984
IP address blocks: 45.201.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79980 (0x1386c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:54 2025 GMT
Not After : Feb 19 00:00:54 2026 GMT
Subject: CN=67bfb09e-4e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:53:15:60:bd:f8:a5:ad:84:f9:c6:6d:ad:
16:f4:77:da:14:f6:fd:0d:3c:08:75:d5:cb:a7:e2:
05:72:78:70:aa:b3:24:e5:9b:3e:03:ca:0e:87:00:
9f:76:ff:cc:5b:1c:29:c4:13:47:e9:12:42:9e:d6:
82:3d:4c:a3:c2:c8:f2:2d:98:2b:2e:c4:d8:e0:6a:
fc:15:a4:67:b6:47:34:4d:f2:1b:83:cf:d6:09:74:
40:bb:79:15:1d:c8:31:80:1a:6d:11:1c:0c:92:8a:
d6:3a:af:e0:20:6b:02:b2:9f:23:6e:e0:1b:63:25:
da:70:bc:ae:43:ac:dc:44:fe:f0:ce:51:06:b3:08:
a7:a6:95:66:7d:01:eb:02:e5:b8:26:ed:c1:b8:d9:
31:9a:ef:bc:d3:5e:03:02:39:99:cd:0f:bf:e7:b9:
c9:0c:a2:15:1b:58:86:84:d0:eb:93:e9:dd:aa:11:
86:00:6b:71:dd:9b:51:a6:e7:83:e2:ba:3c:1a:4f:
98:87:8d:58:6a:d8:30:0b:9f:c7:ac:69:21:2a:71:
ed:98:ac:c5:7b:c9:fd:cf:75:ac:ee:d3:f3:b3:01:
4a:22:ca:03:e2:39:ee:d6:e2:87:84:1e:3e:fc:af:
72:18:a3:fc:1f:57:38:cd:67:32:77:ef:65:95:04:
8a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:36:DA:29:D3:5A:DB:1A:EC:E2:33:0F:06:E7:6C:EF:85:F3:75:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22D72554F4A111EF95C79662762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.126.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f2:0d:57:7a:fb:bb:88:d0:17:62:44:c0:da:43:67:44:cd:
fa:c4:c6:64:a6:ae:3a:86:8b:75:92:9b:bb:42:b8:c1:e1:d3:
54:a8:e6:f9:6e:eb:0c:9c:33:a4:e6:e1:bc:6c:76:d2:a5:6c:
aa:d6:a3:0e:d0:23:30:41:58:91:97:fb:ae:49:9b:4e:73:2d:
8d:03:a7:25:20:87:db:42:f5:52:f0:e3:6c:de:7c:4a:c7:7c:
e0:3b:a7:5b:01:83:d0:6d:77:61:f5:57:30:86:ff:08:60:66:
14:a3:11:e6:15:70:4d:e7:49:b7:48:69:f7:17:b5:c8:22:cc:
8d:bc:a4:f2:fc:ed:71:d8:6f:36:54:75:28:28:ed:e3:b6:40:
a8:77:4e:c6:ee:34:30:f3:6d:55:86:d5:da:36:03:e0:10:00:
54:0d:fc:8e:08:c6:ea:df:11:e3:ee:81:16:2c:25:4a:e5:be:
ca:7c:7a:b6:ee:08:49:9e:23:ff:22:42:b4:37:19:e3:a1:8e:
99:d2:ec:cc:27:34:01:6f:fc:2f:05:08:5e:f3:94:4d:ff:91:
5a:86:62:be:d1:9c:b8:ed:bb:61:69:93:1c:79:87:db:97:40:
71:08:38:15:86:4f:31:09:55:80:44:db:38:8b:9d:a1:bf:a4:
2b:a5:ff:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:24 2025 by rpki-client