Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A2D4D96F47511EF8E54EEB7762E951A.roa
File: 2A2D4D96F47511EF8E54EEB7762E951A.roa (raw, json)
Hash identifier: PoCWUdfAk+X2i+hExw1lWcY5gRY5RDuBd1adc4crJBk=
Subject key identifier: A5:48:DC:29:4E:FF:7F:10:25:4F:62:CD:1C:C4:6B:67:81:3F:74:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A2D4D96F47511EF8E54EEB7762E951A.roa
Signing time: Wed 26 Feb 2025 19:09:13 +0000
ROA not before: Wed 26 Feb 2025 19:09:09 +0000
ROA not after: Thu 19 Feb 2026 19:09:09 +0000
asID: 984
IP address blocks: 45.201.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79583 (0x136df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:09:09 2025 GMT
Not After : Feb 19 19:09:09 2026 GMT
Subject: CN=67bf66d9-712a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:f2:df:71:27:4a:7a:68:0c:f5:96:1a:7a:
77:91:72:cd:87:7d:cd:76:75:cd:fe:d0:fb:fc:77:
76:55:c4:d6:dc:d0:a3:8f:6d:5e:b7:00:2d:69:6d:
b1:35:5c:d2:f7:00:7f:5f:60:3a:8f:77:b7:49:31:
e8:ac:bf:f4:06:4f:93:ae:72:61:39:91:e1:70:07:
97:e4:14:5f:9a:ec:6e:b4:26:9f:f9:d7:7a:8c:56:
ed:99:60:d4:d5:3e:23:18:77:c9:35:98:08:e4:b4:
b2:c8:9d:41:96:07:62:65:38:e0:c7:f6:84:21:af:
3e:bc:ac:0d:dc:01:b1:ac:bd:7a:f2:55:11:e0:19:
66:40:d1:05:b2:2a:be:82:1d:5a:c1:a4:61:f8:69:
cd:5a:88:52:b6:2e:70:84:26:da:8f:91:d1:d9:cb:
22:cc:fe:88:b2:22:38:e4:69:73:8b:a8:6e:4a:5d:
dc:d3:47:1f:11:a6:a0:6e:8a:d0:e3:e3:fe:4c:f1:
53:84:e1:6b:6f:ff:5c:76:48:73:96:2c:b4:b9:12:
36:b0:23:58:e2:7f:da:fe:b2:b0:58:e6:9a:cd:f9:
86:c1:6f:7f:ab:45:e2:a5:2d:75:41:b6:2b:08:a9:
9f:cf:41:ff:67:5c:de:82:31:62:82:c4:a4:78:93:
d6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:48:DC:29:4E:FF:7F:10:25:4F:62:CD:1C:C4:6B:67:81:3F:74:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A2D4D96F47511EF8E54EEB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.88.0/24
Signature Algorithm: sha256WithRSAEncryption
15:57:a8:72:1f:10:3c:59:38:fb:41:a2:5f:35:87:da:d6:9c:
f0:13:0b:93:69:a9:0f:f1:b5:3d:4d:87:0c:5f:b0:26:67:85:
d8:a4:97:dd:40:e0:65:bf:88:1d:3d:3f:97:8c:45:db:60:4b:
b4:cc:2c:f2:26:b3:f6:e2:67:4f:16:d1:c5:c9:de:f7:da:23:
9f:5b:7c:c9:af:ff:5a:27:6b:0d:e4:20:c1:d9:50:db:7a:89:
c9:1c:d3:51:be:26:74:3f:83:79:b4:1b:5e:bd:e3:24:15:db:
5f:3b:5a:37:87:a8:6c:82:c9:b0:4a:ee:1f:a9:07:f6:6b:df:
c5:1e:89:f4:c4:ba:73:e9:e3:7c:10:f8:a4:ac:f3:b7:c9:c1:
54:35:c9:88:63:1c:74:f0:34:be:87:c6:28:66:0a:80:29:23:
b3:2e:28:c5:3c:ea:d2:f0:8e:62:df:04:bd:2d:f0:f6:3b:b7:
19:49:91:f3:1d:76:bf:11:5e:9c:dd:fb:9c:98:30:93:c9:b9:
24:ba:e6:39:76:d4:5c:6d:2a:f0:e7:9e:81:95:bc:2e:d6:6f:
cc:3c:08:3f:c6:d7:e1:33:e5:e0:9c:9a:13:c2:c6:85:7f:f0:
9f:c3:47:9e:2a:d7:f3:b7:b5:34:47:40:e8:69:3a:76:13:34:
0d:f6:ed:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:00 2025 by rpki-client