Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5722A976F42611EFB9234D90762E951A.roa
File: 5722A976F42611EFB9234D90762E951A.roa (raw, json)
Hash identifier: rk6cdKBbPOqMK615Mf3s8954anduHFhbLg74vdpx1z0=
Subject key identifier: DC:B4:EF:A8:9E:22:3C:88:4C:0D:FF:D4:CA:C5:21:85:D9:7B:14:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01309E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5722A976F42611EFB9234D90762E951A.roa
Signing time: Wed 26 Feb 2025 09:44:58 +0000
ROA not before: Wed 26 Feb 2025 09:44:54 +0000
ROA not after: Sun 20 Feb 2028 09:44:54 +0000
asID: 17561
IP address blocks: 45.204.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77982 (0x1309e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:44:54 2025 GMT
Not After : Feb 20 09:44:54 2028 GMT
Subject: CN=67bee29a-11c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:f8:e4:bc:a1:66:47:1a:f6:6a:49:b0:fa:
01:31:71:4d:9d:a6:29:eb:07:76:ff:77:7d:bd:95:
50:75:fd:07:3f:e1:11:0b:89:ab:73:5e:93:44:bd:
70:5a:ec:0c:5e:92:53:0e:33:6c:40:59:0f:c8:7c:
fb:62:bc:fe:59:a1:0f:7d:9e:82:2c:34:0a:c5:cd:
9c:98:ec:f0:9f:4c:01:e9:32:e3:98:8e:c4:5f:6c:
27:ad:91:5d:ac:af:84:53:89:c7:b4:09:ed:35:c9:
aa:4a:1f:9d:c2:1c:07:fb:15:12:22:62:04:54:df:
84:d4:c2:4c:3d:73:20:34:75:92:ac:e5:52:e3:2d:
44:cc:11:e3:4a:0c:c9:a9:8f:e9:36:d2:bf:2d:da:
9c:b5:9d:4a:4b:19:8c:16:c7:43:5e:fa:1e:7b:91:
31:46:50:65:32:33:90:bd:92:7e:aa:c1:6a:7a:4c:
2c:a2:c7:9f:10:0f:66:4f:24:91:61:3f:ff:3b:6c:
90:0b:d7:f5:e1:0f:79:19:66:99:08:9c:1b:e1:5b:
fc:55:32:c0:5c:70:f7:d7:df:45:9c:c5:e6:0b:91:
b0:6d:6e:13:13:36:9c:4c:e7:e0:2e:32:8c:21:97:
af:b2:39:a6:e8:52:0c:1f:81:27:6e:e4:1d:3d:ba:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B4:EF:A8:9E:22:3C:88:4C:0D:FF:D4:CA:C5:21:85:D9:7B:14:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5722A976F42611EFB9234D90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.29.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fc:db:b2:f4:71:d8:e4:47:56:76:f3:4e:4c:a4:8d:aa:01:
2a:43:55:05:89:7e:6e:b4:2b:64:9e:da:23:be:bc:da:4f:9c:
7f:3a:93:b8:e8:8d:7a:bf:36:5c:12:ce:46:91:c9:35:56:66:
09:af:fc:a7:e6:7b:43:79:f0:14:0a:c2:8c:35:93:5c:e3:1d:
3d:51:aa:bc:b2:6f:25:9e:50:f3:51:49:31:63:90:4f:47:e5:
06:20:c3:9b:a9:e2:08:8c:93:01:75:fc:2c:8a:28:b1:61:ec:
0b:b6:f3:b8:07:9d:bc:49:2e:9c:7e:5c:0f:28:fb:b9:53:74:
6d:80:68:4d:e3:52:6e:4d:cf:c9:a8:95:a8:3a:76:8a:2e:90:
e1:8d:d6:fd:23:b7:de:1d:d4:cc:bf:e2:2c:6e:c4:7f:1f:fd:
a7:52:c8:6a:24:82:a8:69:9f:19:07:c1:08:7b:85:e1:87:3c:
d0:a7:a3:24:ae:d8:45:de:df:cd:13:b3:9c:e4:72:f1:ed:ae:
05:d6:7b:e0:2a:b7:e5:8a:95:94:8c:9b:42:31:bc:73:98:ca:
d9:b6:fe:4e:9a:e7:56:1a:1b:c5:a9:fa:3e:0e:6e:20:b7:1c:
45:04:6c:10:eb:d4:76:dc:d9:38:8d:73:27:cf:1d:c9:10:55:
77:20:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:31 2025 by rpki-client