Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A77EC9CFE5611EFB9EF48BF762E951A.roa
File: 4A77EC9CFE5611EFB9EF48BF762E951A.roa (raw, json)
Hash identifier: DM6u8M5L61jous3/n2H7nJuA9d9EEhRm4ICmbboSPiU=
Subject key identifier: BB:EB:42:05:64:86:40:BE:52:17:6E:40:C2:0B:39:91:36:2C:1E:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A77EC9CFE5611EFB9EF48BF762E951A.roa
Signing time: Tue 11 Mar 2025 08:53:24 +0000
ROA not before: Tue 11 Mar 2025 08:53:20 +0000
ROA not after: Wed 16 Apr 2025 08:53:20 +0000
asID: 398823
IP address blocks: 45.202.224.0/19 maxlen: 24
45.205.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83175 (0x144e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 11 08:53:20 2025 GMT
Not After : Apr 16 08:53:20 2025 GMT
Subject: CN=67cffa04-c1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:f6:a0:05:95:4e:9b:94:1d:e6:97:ba:c4:
22:bc:08:72:32:ae:9a:3b:2a:0f:db:ee:39:8c:47:
80:15:53:71:eb:18:9c:b5:31:a1:56:f2:a3:94:66:
7a:94:9c:86:0a:db:04:18:cb:44:36:cb:aa:88:aa:
cc:f4:0b:be:75:ad:46:95:e3:65:15:b9:37:5e:f2:
5e:39:f9:c7:00:c7:48:ed:07:eb:7c:86:1e:21:7b:
1c:af:71:3f:5c:6d:fe:0f:ac:f9:5c:89:e6:9c:21:
8d:85:e6:4f:7c:55:8a:47:ef:56:8c:99:4f:6c:1c:
ff:29:3a:73:6a:9a:21:4b:89:98:dc:78:c5:38:ce:
15:5f:0f:bf:86:4c:f8:f2:62:59:5a:21:a7:a7:5f:
23:b4:1c:d9:37:95:02:2b:da:6a:6e:60:9a:25:19:
6f:f1:a9:bc:b5:3e:90:c2:07:bb:16:6e:4f:ff:80:
2a:55:bb:72:06:e8:7b:af:67:6a:f2:9d:55:03:a9:
bd:a6:e3:80:54:5c:d1:6b:d5:09:91:f5:db:06:1d:
6f:8e:d3:57:91:d4:d6:66:27:39:44:13:d8:a0:fc:
02:e2:e0:3d:16:08:f6:0a:4a:08:c3:35:3f:7f:a5:
99:2e:cb:2c:ba:e1:c4:0e:56:d2:bb:07:c3:6c:71:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EB:42:05:64:86:40:BE:52:17:6E:40:C2:0B:39:91:36:2C:1E:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A77EC9CFE5611EFB9EF48BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.224.0/19
45.205.224.0/20
Signature Algorithm: sha256WithRSAEncryption
03:58:32:38:ff:93:db:6c:13:f7:f1:e2:13:03:83:a0:7b:5b:
a4:89:ca:9b:83:38:3b:fd:bc:5c:2a:b2:3c:28:4a:38:fb:b0:
3a:c2:d3:a3:04:a6:32:fc:e9:bf:80:46:88:22:b8:0b:36:8e:
3b:8e:2c:ee:28:cf:68:ca:87:41:df:6f:88:69:23:9a:5b:c5:
be:a7:a0:69:d6:67:6d:11:b8:e6:27:86:8f:05:54:31:41:93:
23:cd:fe:91:e8:65:8c:83:5f:85:3b:93:a0:ce:3d:5f:d1:c5:
50:11:d9:1e:85:02:b4:c7:12:f1:b7:ae:0c:36:ca:9c:17:4c:
fe:86:fe:35:3e:b5:60:c3:b3:3f:22:d9:ec:f4:9a:55:26:51:
f6:d1:95:4c:f3:93:7d:55:6f:a8:ce:61:0e:76:fc:09:d3:a1:
a3:65:a1:30:50:88:09:86:0f:e3:9e:e5:44:59:45:1b:9a:bf:
f7:02:51:99:b0:c9:db:e1:ce:e5:9a:0b:29:e8:7c:43:48:bc:
f5:03:3e:09:7a:b3:e5:de:7b:dc:83:29:7f:11:2f:a7:03:59:
dd:7b:f9:b0:d0:30:fc:d8:e8:f0:b2:d6:77:d9:71:c8:77:82:
ab:40:31:3b:ab:86:ba:7f:9d:dc:4d:dd:2c:64:b2:fc:d5:28:
f7:1d:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:11 2025 by rpki-client