Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/260D8684F47711EF8DF0E347762E951A.roa
File: 260D8684F47711EF8DF0E347762E951A.roa (raw, json)
Hash identifier: 0fo7gslxEo5+3DFVMJPar1RxUNybiUAkdWq+tRGB+Ns=
Subject key identifier: 1A:FE:85:91:0D:1D:31:8A:6C:C9:33:A1:CF:1D:64:56:4C:9C:00:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/260D8684F47711EF8DF0E347762E951A.roa
Signing time: Wed 26 Feb 2025 19:23:25 +0000
ROA not before: Wed 26 Feb 2025 19:23:21 +0000
ROA not after: Thu 19 Feb 2026 19:23:21 +0000
asID: 984
IP address blocks: 45.201.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79615 (0x136ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:23:21 2025 GMT
Not After : Feb 19 19:23:21 2026 GMT
Subject: CN=67bf6a2d-3576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:85:6b:84:56:94:78:78:32:94:46:82:30:
20:55:bb:ba:8a:d9:e5:7e:b7:63:05:c2:df:e3:32:
eb:42:40:23:e4:f5:5d:83:94:79:94:6f:56:b4:56:
ea:4d:a4:18:a1:40:41:50:eb:50:9b:bf:fe:0e:19:
1a:be:d6:88:4f:ea:24:a4:21:21:2c:2d:eb:aa:7c:
33:af:2b:8a:43:90:a3:d9:28:a0:62:87:b1:dc:00:
bc:8f:58:11:36:4c:9d:03:58:3d:37:e1:95:9d:0d:
f9:c0:3c:5a:d1:2e:af:e7:84:79:80:bc:53:15:e0:
80:ca:64:0a:a6:c6:4d:da:d8:11:0c:28:28:53:6b:
f0:61:8e:97:01:8a:04:4e:8f:e6:82:54:4a:ac:72:
49:82:d0:d9:e1:0c:d2:10:76:3b:81:ea:3c:4a:98:
57:7d:4d:06:12:03:49:fc:4d:48:c3:3d:d0:5a:e5:
c1:81:ff:d3:36:68:32:6f:1c:76:a0:53:57:26:bd:
9e:b5:58:d4:85:18:77:8b:fa:06:75:56:15:87:bc:
7c:16:b7:15:50:97:cc:56:df:c5:e7:7b:e4:45:36:
48:63:4f:84:67:51:18:bd:42:1c:f2:33:60:9f:9f:
15:1d:65:e1:9b:92:eb:3c:00:0e:55:6b:6f:f7:4b:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FE:85:91:0D:1D:31:8A:6C:C9:33:A1:CF:1D:64:56:4C:9C:00:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/260D8684F47711EF8DF0E347762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.95.0/24
Signature Algorithm: sha256WithRSAEncryption
44:29:c2:33:37:94:b8:8d:a1:68:36:cf:b0:9e:4a:ed:5d:7c:
80:da:fd:59:fd:e7:df:2e:a5:42:aa:90:d7:8c:41:a5:02:2a:
7b:7d:c4:ce:e1:58:82:4b:81:01:42:15:8d:57:93:bf:f5:b9:
e7:87:eb:2e:39:06:6a:63:9d:63:42:56:fd:79:75:36:73:f2:
17:a4:81:bc:bc:18:be:f1:98:36:f0:1c:18:18:cd:67:1d:68:
8b:64:c4:06:eb:87:99:df:40:76:36:f7:f8:3d:67:b5:3a:f6:
9b:39:0b:b5:10:b1:39:1a:62:ea:ed:c1:01:fe:c4:84:2d:d0:
13:99:60:2e:d1:5f:71:01:d6:22:9e:de:89:58:ae:ef:0f:f6:
b8:a7:94:e1:a6:7a:c2:3b:27:66:df:d0:c7:99:3b:bf:ce:a3:
39:74:3c:e0:1c:98:75:fc:22:c1:5c:42:d8:4f:c3:d4:9f:45:
a8:ab:7b:5e:e5:26:09:90:f0:54:32:76:e6:a9:64:6a:17:12:
db:38:1b:f5:fe:ac:27:8c:86:5a:df:22:49:2f:4c:d6:8e:4b:
b3:3e:eb:08:b5:0c:9d:78:ab:19:62:77:ba:be:ab:dd:af:16:
eb:fd:2c:25:ab:7e:d1:90:9e:95:46:09:90:64:a3:cb:19:e7:
08:07:cb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:31 2025 by rpki-client