Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3089DD22F87F11EFA446664A762E951A.roa
File: 3089DD22F87F11EFA446664A762E951A.roa (raw, json)
Hash identifier: ovoEqz96Rtmi9XisAuHCzwhkE+olC++p04B04F2f0us=
Subject key identifier: B8:72:85:3E:C9:C1:5E:86:25:AA:6B:8E:96:BC:CC:2B:83:CE:81:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014275
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3089DD22F87F11EFA446664A762E951A.roa
Signing time: Mon 03 Mar 2025 22:31:03 +0000
ROA not before: Mon 03 Mar 2025 22:30:59 +0000
ROA not after: Sun 15 Feb 2026 22:30:59 +0000
asID: 131618
IP address blocks: 45.200.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82549 (0x14275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 22:30:59 2025 GMT
Not After : Feb 15 22:30:59 2026 GMT
Subject: CN=67c62da7-28ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:87:49:08:01:48:a2:23:00:21:6a:36:80:
62:b6:6f:2d:f6:7b:d0:3b:98:2e:62:1c:17:c8:6d:
a0:2f:5d:ce:c6:79:d6:67:15:53:9e:35:f7:6b:82:
65:8c:5e:4a:59:c8:21:a8:b1:1e:95:94:25:01:cf:
e4:dc:2f:89:e5:18:f4:83:e3:b8:07:3d:ca:1e:11:
ed:65:fa:a4:7b:e8:88:d1:04:b9:3c:1c:6a:37:47:
dd:42:cd:a9:2d:ac:36:0f:8e:80:99:a1:36:d9:18:
3a:bf:1a:6f:2d:c4:4f:eb:b4:d4:64:90:8c:8d:f7:
0e:13:14:b5:d8:5c:a4:b2:77:70:2a:4c:f4:bf:28:
73:4c:9f:38:48:76:f6:d7:3d:51:97:67:0e:5c:2d:
9a:53:6f:a5:7f:c0:5a:fb:cf:45:dc:26:a0:58:c9:
28:6f:11:81:f7:0c:9d:4a:46:2f:71:e4:84:b7:7b:
55:4f:84:d2:a8:89:d8:b7:96:11:b9:e6:57:3b:79:
0a:98:fa:6e:89:76:c2:da:ed:fb:69:93:63:e2:c1:
e7:6a:6e:2f:2b:48:4a:ef:95:f1:a7:10:96:d0:b8:
48:bf:cf:52:39:9d:98:ad:af:53:89:38:b4:ff:34:
d1:78:d6:26:79:85:03:98:b6:cd:22:68:80:7d:ca:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:85:3E:C9:C1:5E:86:25:AA:6B:8E:96:BC:CC:2B:83:CE:81:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3089DD22F87F11EFA446664A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.132.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ee:da:10:f1:73:a9:9a:02:f9:b8:80:33:7d:7f:e4:3e:54:
49:41:1c:c6:87:a2:f6:f6:e3:30:0b:79:6b:69:f4:cb:69:8a:
4d:77:f7:09:db:5d:22:8a:a0:4a:e3:87:26:fc:1d:4c:af:31:
f7:5e:28:8d:70:f4:d7:31:21:cf:1e:65:56:81:52:5f:b0:48:
2b:d1:64:f1:8f:b5:91:7f:2f:fe:84:55:a9:a7:6a:67:fc:5a:
6f:51:52:a5:d2:65:ae:1e:5e:2a:b9:4c:06:b1:a5:2e:16:aa:
79:bd:cc:75:f4:d0:34:fd:76:41:08:9a:53:59:6f:7a:1d:e6:
94:62:d1:95:19:0f:67:12:97:8f:a1:8b:7d:29:b5:c3:8e:41:
19:d9:7c:21:03:f0:a3:f3:1a:ed:22:ed:91:24:a2:fe:88:eb:
b4:7c:1c:e9:b9:ef:40:02:e5:c0:2a:58:30:24:a0:39:c8:68:
15:f6:34:a6:50:5c:ed:78:da:5a:e3:1f:aa:f7:c9:99:13:56:
b7:30:21:26:d5:e3:52:54:6c:a1:fd:12:3c:f9:f7:ee:93:bd:
67:30:1d:5a:64:bd:21:a1:d9:e5:2f:5a:c1:79:a7:6e:95:20:
b3:b3:b4:ba:54:64:96:8e:ad:3b:26:08:45:5a:f6:23:8f:9f:
f7:3a:56:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:54 2025 by rpki-client