Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B693228F5AB11EFAB71A693762E951A.roa
File: 3B693228F5AB11EFAB71A693762E951A.roa (raw, json)
Hash identifier: 881/KUc//e8Hkg6E00IhLKLdHIlh0vPNy2fsbSNv+qs=
Subject key identifier: 14:E3:5D:7D:C9:96:A3:D0:13:CC:08:66:C6:03:C3:D6:D7:4C:31:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013C88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B693228F5AB11EFAB71A693762E951A.roa
Signing time: Fri 28 Feb 2025 08:08:46 +0000
ROA not before: Fri 28 Feb 2025 08:08:42 +0000
ROA not after: Sat 29 Mar 2025 08:08:42 +0000
asID: 147176
IP address blocks: 45.201.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81032 (0x13c88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 08:08:42 2025 GMT
Not After : Mar 29 08:08:42 2025 GMT
Subject: CN=67c16f0e-7d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:c1:65:e6:97:71:9f:63:30:a4:37:f9:68:
5b:7e:f5:5e:93:dc:bb:36:d8:ce:da:da:58:43:a3:
6e:69:b6:90:61:f8:0e:5f:06:fa:d0:41:13:f0:70:
08:9d:9a:b0:d1:cd:ec:96:2e:f9:8e:49:6b:c9:aa:
a4:9d:07:56:c8:3d:4b:ce:76:d2:b1:00:60:50:08:
79:da:9b:bf:5d:70:40:03:10:d3:a5:0d:0b:81:59:
8c:15:8e:be:7a:ee:6c:03:32:a6:3c:76:f9:f9:17:
3e:e8:12:cd:0b:24:e9:c7:32:c9:1f:12:47:41:fb:
5a:4c:c4:da:a3:96:37:e2:74:36:64:b3:c4:1c:35:
37:3c:f6:51:1b:f5:13:5e:99:f1:b1:57:5f:60:12:
15:87:52:4b:ff:4c:e9:15:b0:3b:88:cb:b5:cd:8c:
86:7b:c3:25:24:f6:6d:13:fc:5b:95:e7:97:4e:8b:
e9:b3:5e:1b:5c:56:af:66:b4:8a:18:28:7a:92:3d:
4b:f8:b3:47:f3:c9:1c:8e:de:f9:53:c5:f3:81:b7:
2e:d1:0e:63:dd:1e:bf:b8:67:34:8a:42:48:68:43:
c7:5e:55:7f:26:b8:1e:13:07:6b:64:d2:5a:cb:f8:
cf:9b:a3:34:90:46:3a:d7:ab:33:a0:55:b5:5b:8d:
30:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E3:5D:7D:C9:96:A3:D0:13:CC:08:66:C6:03:C3:D6:D7:4C:31:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B693228F5AB11EFAB71A693762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:6b:ac:ac:9e:f6:27:1a:3d:29:1f:60:61:6a:6b:97:20:86:
5a:8b:d7:3f:7d:73:12:8b:ab:b6:a1:e7:96:44:97:95:5a:79:
7d:09:4c:2e:73:a1:ee:aa:a5:9f:21:f5:ca:30:6c:e7:6c:e0:
1b:c8:dc:6f:10:ec:16:3b:1e:ee:8a:e6:c2:32:01:83:83:c9:
d8:23:31:1b:52:4b:b9:96:b6:65:73:e2:ce:07:2f:a7:83:fe:
c7:76:07:91:ff:26:92:15:cf:3e:b4:5f:01:54:4f:d6:22:d5:
de:e0:9d:5c:30:6d:8f:5b:5f:80:51:e7:f8:1a:41:d4:72:50:
b7:02:dd:c1:ba:49:17:60:2f:83:8c:27:0a:e6:7d:e8:f6:29:
09:90:67:96:1f:37:c7:35:72:0e:4d:e4:31:f7:be:3a:70:de:
5a:f7:bb:8f:4a:7a:8c:9b:3b:4d:24:14:65:74:1a:16:e6:73:
f3:8c:b2:53:6c:fe:d0:ef:18:d9:45:5f:25:98:90:5a:be:01:
db:c4:b4:15:9a:d8:28:04:65:05:b0:a5:a2:c3:18:40:5a:6b:
c0:ba:3f:42:bb:61:ad:84:38:a2:80:21:ea:91:9b:8e:d1:e9:
ce:69:20:82:e2:b4:1a:6f:70:7d:e0:c9:87:3e:df:90:90:a8:
5e:4e:f9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:57:22 2025 by rpki-client