Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/501069DCF47811EFBA66634F762E951A.roa
File: 501069DCF47811EFBA66634F762E951A.roa (raw, json)
Hash identifier: +P3mU+EFK2TqzbBatRjF6crHZBlUVcsqQLBQOSPD5qA=
Subject key identifier: A7:3B:9D:4D:DE:D5:A0:0B:59:AF:3C:EE:40:3C:FD:0F:4E:D4:03:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013713
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/501069DCF47811EFBA66634F762E951A.roa
Signing time: Wed 26 Feb 2025 19:31:45 +0000
ROA not before: Wed 26 Feb 2025 19:31:41 +0000
ROA not after: Thu 19 Feb 2026 19:31:41 +0000
asID: 984
IP address blocks: 45.201.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79635 (0x13713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:31:41 2025 GMT
Not After : Feb 19 19:31:41 2026 GMT
Subject: CN=67bf6c21-cdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:02:1a:28:47:f7:80:05:00:55:ff:ad:68:
24:ed:3c:a2:1b:08:a7:1c:7c:e9:7a:94:64:d0:aa:
ae:19:ff:48:4e:a6:5b:c0:49:1c:c2:ea:ef:26:36:
45:0e:7e:0c:7b:a1:e4:c9:e9:e6:36:18:9d:ef:43:
5b:b0:d8:ca:07:d0:8c:32:b5:fe:b8:d5:54:76:a3:
86:f7:27:77:22:57:cb:53:6c:f3:4b:fe:c7:29:ab:
d3:8d:b3:bf:3c:59:60:e1:1a:e6:f4:3b:bb:7b:f2:
18:4c:33:3c:bc:35:6b:c4:9e:a7:9e:1c:d8:54:33:
ff:39:c1:02:b6:1b:ba:a7:a0:44:39:9a:27:4e:bb:
43:95:b8:d8:71:6a:20:12:dd:5d:d3:a5:af:37:34:
65:e1:94:62:44:7b:6b:cc:d6:d0:06:c9:47:46:2f:
84:c5:ab:3d:d3:28:b7:0b:f9:c5:c2:2e:41:8d:9f:
b7:e7:2a:9b:ca:99:50:fd:cc:1d:41:95:68:e4:f4:
1d:7e:ea:dd:6b:c3:5c:be:7f:27:1b:f4:8f:f6:81:
b6:4f:8a:d6:ee:54:bb:70:ce:8d:84:79:df:7c:d0:
11:ca:71:17:51:7a:0a:bd:cd:df:52:33:cd:de:9e:
9c:45:2a:79:f2:42:5f:87:78:be:46:30:33:c0:bc:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3B:9D:4D:DE:D5:A0:0B:59:AF:3C:EE:40:3C:FD:0F:4E:D4:03:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/501069DCF47811EFBA66634F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d4:3f:04:d0:79:a9:ab:8f:1b:ce:35:a2:65:26:63:ad:3f:
28:39:78:85:b4:3e:38:5c:eb:0e:14:ea:48:57:a0:a2:b5:31:
42:8b:f2:14:a6:ed:92:a9:64:f6:de:ad:ae:8f:8c:93:69:9a:
3f:70:57:ee:6c:b1:0f:dc:71:c4:ef:77:9c:48:24:b1:9f:38:
83:0a:ec:9d:c9:1a:f5:80:2d:75:e5:36:78:1b:84:ae:7f:0b:
f8:08:36:cd:fe:5b:26:8e:d3:e8:c0:c9:31:eb:17:11:ec:ee:
40:fe:08:c6:02:3f:1c:ca:d2:55:0e:df:d2:da:12:ba:d2:cd:
a1:58:7c:6b:a9:54:96:b3:30:df:80:47:a3:aa:b5:6f:18:b8:
ec:76:3d:5c:54:9e:b7:13:92:ba:4f:46:df:6a:d1:2e:40:eb:
fd:48:d6:01:58:8e:32:3e:0f:e8:bf:f0:9e:39:b6:90:a2:9e:
ce:09:ac:7b:ff:c6:2f:f9:70:99:31:f4:00:12:a0:f7:7a:29:
a1:87:92:aa:db:5e:ba:82:a5:73:5f:dc:31:78:09:40:9e:7a:
82:41:32:c2:11:42:59:d9:fb:cc:c4:dd:d1:e6:e7:82:b8:03:
a7:b7:9c:7a:34:ee:28:b6:31:03:b5:17:3a:28:1c:09:7e:79:
08:82:25:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:04 2025 by rpki-client