Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EA37B7E03E111F09EC92B5E762E951A.roa
File: 5EA37B7E03E111F09EC92B5E762E951A.roa (raw, json)
Hash identifier: XxIrSMeKHkuB3t9ZuL8n2lBHA1B6xoopEhs7vZNFksI=
Subject key identifier: FB:70:E1:24:29:CB:D5:A6:E3:C0:0A:06:E4:88:AB:2D:10:45:CC:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01469B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EA37B7E03E111F09EC92B5E762E951A.roa
Signing time: Tue 18 Mar 2025 10:11:34 +0000
ROA not before: Tue 18 Mar 2025 10:11:30 +0000
ROA not after: Fri 25 Apr 2025 10:11:30 +0000
asID: 25160
IP address blocks: 45.201.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83611 (0x1469b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 10:11:30 2025 GMT
Not After : Apr 25 10:11:30 2025 GMT
Subject: CN=67d946d6-954b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:18:69:33:30:d4:8b:37:9a:2a:b7:12:95:
d6:aa:85:4c:7c:29:55:72:dc:1a:4e:3e:bd:53:9a:
b1:4a:a8:f3:87:53:61:6c:fc:91:35:ea:83:8d:21:
62:f5:91:9f:ee:5d:ce:c0:3b:f9:ca:74:f1:e3:fa:
eb:f9:61:50:5d:bf:54:59:77:75:56:7a:0e:7f:03:
23:92:8c:62:75:8d:c3:99:44:ad:64:3e:2f:64:f9:
7a:86:cc:43:12:23:6b:78:92:7a:8d:c4:7a:34:1a:
72:5a:d9:5f:c2:dc:3f:91:72:b1:1c:c2:1d:d7:3b:
47:35:75:da:cc:f4:9d:28:b4:0e:1e:ca:ef:21:ec:
4a:9c:db:87:4e:98:66:91:88:08:94:eb:5b:97:77:
89:17:7b:ff:79:bf:d6:34:ad:9c:6d:b6:2b:3d:2d:
ae:03:f1:0d:75:f8:67:d1:bf:53:c5:6b:e5:be:a8:
f5:97:d0:80:d0:3d:8e:ed:d0:f8:6e:3c:f0:b3:50:
09:34:f5:66:71:80:82:a3:2d:9b:8f:16:94:ac:d9:
b8:db:56:a2:f9:46:b2:3f:70:5a:43:bb:7d:a0:b3:
21:88:7b:a0:6e:eb:d0:64:63:89:dc:ca:54:60:a0:
25:dc:fd:32:a1:a9:48:96:71:38:82:b4:9d:33:7a:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:70:E1:24:29:CB:D5:A6:E3:C0:0A:06:E4:88:AB:2D:10:45:CC:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EA37B7E03E111F09EC92B5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.12.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:ef:c6:88:a1:2c:4f:87:c4:39:25:d9:8a:9d:53:3e:34:d8:
7c:43:05:25:2b:3b:ea:0d:00:7b:08:59:da:9e:f6:24:45:dc:
23:48:34:1a:e6:3d:e9:6e:62:0a:51:29:eb:9f:e9:0d:8f:76:
06:77:ea:e1:d3:5d:30:1e:ab:85:8e:72:04:4d:a7:5d:eb:ae:
e6:4a:2c:92:e8:4d:31:67:56:31:ab:d0:e1:e9:f7:6a:26:55:
cf:33:7c:5a:76:d0:59:43:c4:b0:f9:0a:d2:6c:2e:33:3a:c1:
eb:02:76:85:8d:63:ca:52:22:2b:63:43:0d:3a:a6:f1:c9:43:
3f:53:c8:f4:36:27:9e:8f:c4:df:f9:58:11:54:29:4c:83:96:
b7:c0:52:41:dc:37:eb:2b:3b:c9:0f:21:7c:80:67:85:32:74:
dd:8b:12:75:42:82:c5:21:69:82:e6:09:e6:6f:26:89:d2:13:
5a:17:c2:05:22:9f:c6:cc:11:af:58:2b:8c:2e:0f:c5:3b:a1:
4b:c5:d6:54:60:02:91:f0:10:bc:a4:2f:28:98:e7:81:d6:e1:
6b:18:ed:e3:5c:bb:11:61:88:1c:09:c0:3e:70:da:25:62:07:
43:6f:8c:c5:40:d0:67:85:c1:fa:e6:46:39:b6:2c:a7:7a:bf:
b8:e3:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:39 2025 by rpki-client