Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45349122F43311EFA8338A6C762E951A.roa
File: 45349122F43311EFA8338A6C762E951A.roa (raw, json)
Hash identifier: trRT/lHNfBrT1DDkHNcDNaActHF06+mGBJ2/79PJR1s=
Subject key identifier: 1F:87:E9:EE:37:76:E2:B0:63:B3:AA:98:17:00:0E:BD:BA:D2:F7:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45349122F43311EFA8338A6C762E951A.roa
Signing time: Wed 26 Feb 2025 11:17:31 +0000
ROA not before: Wed 26 Feb 2025 11:17:28 +0000
ROA not after: Thu 19 Feb 2026 11:17:28 +0000
asID: 328608
IP address blocks: 45.205.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78258 (0x131b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:17:28 2025 GMT
Not After : Feb 19 11:17:28 2026 GMT
Subject: CN=67bef84b-f9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:10:a2:1e:c9:d4:9e:88:e1:ee:ac:24:85:
67:4a:b7:08:37:b1:0b:01:6f:0f:45:f0:6f:2f:85:
0a:e8:4d:1b:db:ba:3b:1a:22:bd:f7:11:97:32:0d:
20:fd:aa:2c:42:50:80:11:c1:06:35:ee:21:0c:33:
9b:79:65:44:fe:d5:74:ee:1c:e4:7f:34:15:98:16:
ec:16:14:9a:6e:88:33:6b:97:e2:c8:85:a3:90:80:
52:1b:34:51:88:cc:43:dc:43:4d:54:4f:32:b6:23:
bf:49:63:cd:04:43:9c:6b:7d:d0:17:7e:22:7e:77:
eb:55:f4:c1:9f:46:75:a0:ff:9e:0c:eb:7c:e0:40:
2b:5f:3c:cb:7c:65:ab:44:41:aa:01:24:e9:a2:e2:
21:7b:0a:e7:62:e2:1d:24:b7:ae:08:52:07:88:93:
9f:72:ec:1f:99:a3:a7:e9:e6:b6:96:aa:09:08:d0:
a8:a7:db:68:a4:97:65:b6:d3:c9:4b:21:4a:ed:0c:
f8:cf:d9:d0:87:36:64:5d:37:fb:9f:69:90:e0:d5:
df:44:78:ad:90:6e:a2:e9:4d:27:67:6f:65:ff:15:
54:3e:6d:55:b9:35:a4:cd:3d:d7:fc:58:2b:26:dc:
06:0e:ec:fc:70:66:b2:b4:9d:89:b6:88:f9:a9:ff:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:87:E9:EE:37:76:E2:B0:63:B3:AA:98:17:00:0E:BD:BA:D2:F7:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45349122F43311EFA8338A6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.140.0/24
Signature Algorithm: sha256WithRSAEncryption
96:4e:4e:ca:67:19:9a:f6:9b:39:5d:77:bd:58:4e:03:4b:f7:
7a:28:a0:2b:79:5f:42:82:df:b9:3c:83:e9:f1:40:3b:a4:03:
c0:51:3a:c5:77:b2:6a:9c:93:80:b0:3e:90:16:d1:57:99:78:
fa:0f:00:40:05:69:1c:5d:44:49:e4:14:63:25:a5:ee:26:a0:
74:61:5b:49:0a:47:1a:ef:6e:5a:f1:c0:b9:11:22:23:ea:85:
23:4d:59:64:e9:80:e7:ee:9d:2d:db:37:dd:28:29:96:2c:c9:
79:50:91:75:94:76:d5:66:e7:53:18:6a:3c:1a:cc:c6:c3:a2:
51:ce:8d:b6:b3:1e:70:a1:85:c2:d8:22:9e:30:d5:b6:54:8a:
9a:bf:54:d9:34:87:fc:7c:e1:2f:99:b6:9f:71:46:86:87:7e:
ce:db:8c:03:43:39:14:ef:ce:e3:10:e7:fd:fb:df:65:23:d3:
b6:0d:f4:47:53:e2:0c:eb:7f:b9:a9:d6:ad:17:13:b6:13:b5:
b8:d4:e2:9b:b2:6d:5c:5b:64:63:6d:b5:10:c9:2d:71:7c:ee:
8b:f3:ab:d5:28:84:b8:cb:2a:55:60:54:ba:0a:9a:c6:7d:fd:
b8:4a:35:3c:ac:a4:5d:e9:53:cc:f3:b1:b1:00:5e:e7:22:55:
0a:b5:f9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:05 2025 by rpki-client