Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F11C90AF47611EF8A5EC242762E951A.roa
File: 5F11C90AF47611EF8A5EC242762E951A.roa (raw, json)
Hash identifier: 0VS5MhldvEesSv//BuUXj8xWTx1BQkQ3TPipj9EuUSg=
Subject key identifier: 9C:31:79:F8:97:F1:15:8B:85:2B:7D:6A:B0:DF:2B:E0:A2:29:0A:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F11C90AF47611EF8A5EC242762E951A.roa
Signing time: Wed 26 Feb 2025 19:17:51 +0000
ROA not before: Wed 26 Feb 2025 19:17:47 +0000
ROA not after: Thu 19 Feb 2026 19:17:47 +0000
asID: 984
IP address blocks: 45.201.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79602 (0x136f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:17:47 2025 GMT
Not After : Feb 19 19:17:47 2026 GMT
Subject: CN=67bf68df-37a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:26:6f:e9:49:46:e4:c0:0d:3e:96:85:35:
9e:9d:b0:6a:32:f4:c7:51:a7:d3:9b:f7:a6:5b:e2:
2a:24:b1:eb:84:3a:e8:9b:37:95:b2:06:7a:89:78:
f9:3b:9f:4b:fc:f4:3e:ae:e5:62:62:9b:15:1a:88:
0a:e9:5b:76:e9:26:5b:a7:44:ba:7e:93:80:d4:93:
db:ab:c3:0b:5d:69:b5:f7:80:d8:be:9e:ae:92:f7:
5f:b0:97:6f:03:cb:e5:02:42:c7:38:5f:7c:83:19:
b1:71:d9:a5:cb:70:41:6d:43:62:8b:cc:4d:ad:7c:
8a:b0:7c:76:6b:13:54:0b:dc:d4:1f:a8:66:6d:73:
e2:b4:18:99:35:e5:2e:79:c4:8e:15:70:a6:a5:78:
c5:ad:9e:24:cd:46:5b:1f:a3:a3:5f:79:77:11:20:
c1:99:12:f3:f0:b1:31:27:68:9e:81:ff:7d:b7:ee:
db:04:09:03:66:56:8d:a9:34:72:91:46:40:ea:79:
05:ce:cc:b4:cd:d2:29:1e:6a:4e:f6:8c:ff:ab:b1:
8e:21:96:70:19:e3:e3:7d:be:96:53:47:ac:51:53:
f8:e2:ac:a4:a8:18:22:df:4c:3b:55:e0:00:be:ca:
cf:e2:eb:35:49:04:e4:ce:fe:15:61:b3:a2:f1:e8:
bb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:31:79:F8:97:F1:15:8B:85:2B:7D:6A:B0:DF:2B:E0:A2:29:0A:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F11C90AF47611EF8A5EC242762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.92.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e3:30:f1:38:c4:ae:e3:58:59:45:23:ee:d9:9a:d7:bd:4c:
70:d2:e8:27:7a:7b:ba:2a:27:48:a8:11:23:ee:55:ac:4d:96:
73:10:96:be:08:d1:60:e0:67:13:4a:0e:a1:e9:2f:34:91:a3:
9b:ba:53:b0:b1:6c:f2:24:93:7c:4c:a5:30:56:28:77:f0:2c:
56:d1:ca:a4:33:57:48:53:8a:dc:b8:16:2a:d0:84:aa:06:41:
da:f7:49:2e:30:c2:82:76:c5:dc:3b:a9:40:ae:91:03:38:d6:
e5:cf:d7:86:ce:66:67:fd:be:6e:9c:84:56:15:b4:aa:ea:95:
a6:f9:83:6e:f7:77:9b:cb:3f:75:bf:d1:8f:01:77:d1:cd:8e:
60:76:cc:42:f7:fc:cf:32:92:97:6a:29:9b:91:60:15:b4:50:
b0:68:42:04:7e:6a:26:1a:5c:27:40:4b:56:e5:23:04:af:e1:
b2:c0:19:b3:0a:96:39:a7:72:3e:95:08:1d:cc:9c:6d:7a:f2:
57:13:0c:11:bd:72:48:0d:be:c5:32:ea:40:4f:6b:cc:a0:86:
18:5a:8a:27:8b:e6:6f:2f:2c:76:c7:f6:57:8e:d8:0d:a8:c7:
a0:31:76:2e:0d:42:f9:1a:83:ee:0c:2a:d4:68:27:30:59:fb:
93:22:c6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:37 2025 by rpki-client