Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4967E58CF46F11EF87796291762E951A.roa
File: 4967E58CF46F11EF87796291762E951A.roa (raw, json)
Hash identifier: isd4HlheudyxMQoK7PBCr0M9uArUo8syT82QUMAd7F4=
Subject key identifier: CE:49:02:4C:89:AF:16:71:0E:FF:0E:A7:31:90:1A:BF:38:12:56:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01365F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4967E58CF46F11EF87796291762E951A.roa
Signing time: Wed 26 Feb 2025 18:27:08 +0000
ROA not before: Wed 26 Feb 2025 18:27:04 +0000
ROA not after: Thu 19 Feb 2026 18:27:04 +0000
asID: 984
IP address blocks: 45.201.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79455 (0x1365f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:27:04 2025 GMT
Not After : Feb 19 18:27:04 2026 GMT
Subject: CN=67bf5cfc-c141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:2a:3c:bf:39:53:31:ef:0a:7b:82:fd:32:
b0:d5:b2:74:93:cf:3d:93:9d:a4:d7:a6:54:d3:df:
e3:8a:c1:7f:11:9a:5b:d7:39:9b:e9:ea:3e:eb:9b:
cb:5b:84:cb:ca:6d:ff:0d:6b:2b:55:5b:af:cd:79:
8d:6e:a0:0b:43:5a:25:a7:71:6d:d6:04:d5:dc:95:
2f:e0:93:07:0f:69:70:cc:e4:10:0d:83:e9:62:1c:
57:1e:c2:4f:03:52:7a:a2:4e:af:21:81:5c:41:6d:
47:74:0c:03:4b:e3:85:71:2d:fa:06:f6:86:62:3d:
a7:73:bb:71:fa:6f:30:c2:8b:01:93:35:a4:18:4f:
2c:ba:41:c2:4e:5d:38:d6:11:92:15:54:e3:c3:ff:
81:cf:a2:17:26:c0:cd:bc:fa:6d:a1:75:28:72:56:
88:e3:c3:15:9b:e8:2f:9e:37:ec:48:5a:d7:91:3f:
f0:ed:a4:9f:92:65:17:09:42:47:c0:74:1c:6d:bf:
07:6b:95:b4:38:2e:33:66:e1:b8:2d:6b:52:72:3a:
f1:f1:2f:fc:f8:dc:7a:53:8a:bb:47:41:2a:3a:58:
e6:4a:5b:e4:63:e1:0b:e5:35:c7:1d:39:cd:1a:47:
53:af:d2:d6:7d:a5:52:25:0d:9e:2c:b1:c2:10:a4:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:49:02:4C:89:AF:16:71:0E:FF:0E:A7:31:90:1A:BF:38:12:56:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4967E58CF46F11EF87796291762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.70.0/24
Signature Algorithm: sha256WithRSAEncryption
76:16:ac:c5:a9:69:c1:ad:7d:bb:88:56:81:7f:69:b8:36:a3:
68:03:b7:88:92:93:71:77:aa:b1:f4:6b:cb:d5:d9:aa:fe:a2:
1a:ba:33:73:63:e8:c1:0f:00:0e:db:03:73:48:47:b9:d3:94:
9b:31:77:b5:86:73:46:65:a9:81:df:16:fb:e7:f7:55:8d:5c:
26:69:27:9a:bd:e8:c4:63:cd:a4:07:31:09:c7:b7:ab:49:14:
94:ea:3a:d5:d7:72:57:b1:ae:6c:ad:ea:60:f3:95:a5:8b:bd:
b1:c2:51:6a:89:40:a2:ab:07:ca:39:39:ed:55:59:c2:bb:62:
44:97:f2:78:d9:60:78:97:c7:f6:96:94:c4:8a:1d:30:16:9d:
4c:4e:e4:83:03:7f:7c:84:e9:cf:9b:fb:11:e6:e7:73:9f:a3:
9e:a2:9f:ec:9f:ba:3c:ef:c7:4f:fb:5f:92:78:7e:32:cb:b2:
60:d6:83:fc:2b:4c:2f:ae:e4:31:13:53:de:ed:6f:b1:50:b9:
6f:c6:9a:27:82:7d:0b:f1:40:27:18:ba:51:dd:f2:43:4d:a9:
88:14:3e:32:d3:c1:38:ba:71:4e:f1:09:df:9f:c9:64:7d:75:
31:d5:83:15:b0:f4:28:1e:2d:df:5f:a4:c6:cf:e1:46:1a:3c:
f1:c2:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:06 2025 by rpki-client