Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68973324F43111EF8C49D85E762E951A.roa
File: 68973324F43111EF8C49D85E762E951A.roa (raw, json)
Hash identifier: K7m8jJTFIyGkxPhACzXPaqI/trWfugir9fo5bQdh4S0=
Subject key identifier: CA:E3:6C:5E:4B:7C:15:32:8C:12:DE:DE:A9:9B:9C:4A:FF:C0:5D:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013194
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68973324F43111EF8C49D85E762E951A.roa
Signing time: Wed 26 Feb 2025 11:04:12 +0000
ROA not before: Wed 26 Feb 2025 11:04:08 +0000
ROA not after: Thu 19 Feb 2026 11:04:08 +0000
asID: 328608
IP address blocks: 45.205.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78228 (0x13194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:04:08 2025 GMT
Not After : Feb 19 11:04:08 2026 GMT
Subject: CN=67bef52c-1d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:eb:7a:6e:3a:10:36:da:14:7d:52:e7:d6:
af:e9:59:87:77:a9:ba:95:30:4f:8d:b2:40:94:41:
c7:cb:5d:fa:b1:c8:0a:f4:cf:07:4f:1e:73:ad:9a:
97:02:33:8f:31:7a:de:07:3c:61:aa:d7:60:9b:a4:
be:a5:2f:b6:0b:2a:03:8f:95:21:a3:5d:70:df:11:
d9:ba:8e:50:fb:ee:76:a3:16:1a:54:13:28:39:2d:
5a:ab:cb:f4:d7:be:55:9a:d4:4c:e0:dd:0b:7e:7f:
c2:ef:d8:3a:55:b4:ad:8f:76:28:b3:37:7e:3e:3b:
81:0b:50:92:9b:e5:d1:df:41:0f:69:fb:32:bb:47:
f5:f0:0c:df:4e:cc:11:ad:8b:b7:dc:75:f5:35:49:
72:1e:83:b8:31:17:a5:91:d7:5e:f3:d6:b7:ba:26:
19:2b:0e:16:12:96:db:49:e7:c6:8d:3c:fa:1a:65:
80:95:93:c9:b6:1a:cb:ac:1b:6b:6e:f4:71:f5:31:
4c:5a:a0:08:96:4b:1e:9d:b3:05:cd:63:ec:8b:76:
53:25:3b:5a:7f:05:34:4c:df:15:19:89:67:22:c9:
2c:b1:f5:44:3b:d5:ff:5a:74:7d:e9:c6:41:6c:98:
fc:26:f7:15:f8:c5:c3:2c:f8:0d:5e:53:9f:2d:c1:
c2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E3:6C:5E:4B:7C:15:32:8C:12:DE:DE:A9:9B:9C:4A:FF:C0:5D:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68973324F43111EF8C49D85E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.134.0/24
Signature Algorithm: sha256WithRSAEncryption
59:74:b5:a2:cd:e5:ed:38:a9:a7:7a:d4:2b:a8:a7:a5:ef:21:
85:1d:e4:72:91:e3:7a:98:65:07:82:9b:42:1d:99:f6:4e:1b:
73:12:1c:04:cf:87:df:e2:b6:9a:88:88:45:af:f5:b6:57:ab:
fb:ab:ab:a0:48:9f:dc:07:eb:89:83:8c:b8:c4:c7:c6:f5:f9:
cb:0e:b2:d0:74:06:e6:71:86:94:d3:df:e2:2d:f8:20:9c:b2:
9c:b5:3e:94:db:d7:f1:c4:c6:16:96:23:85:8b:4b:45:49:8e:
d7:73:33:06:df:b6:51:dc:28:31:d5:19:24:55:b6:2e:a3:05:
5a:da:07:74:5b:5e:fc:c7:90:19:7e:a0:1a:ec:05:09:d9:db:
2d:92:a4:d3:e6:92:35:59:0f:fa:be:28:37:82:84:fd:dc:df:
ae:63:70:e8:69:36:ff:8c:0a:18:a2:0e:56:a0:47:94:52:d0:
15:52:f8:2a:c9:c3:0b:d2:b4:56:e3:69:ff:f9:d6:c2:b5:33:
01:68:91:38:5f:49:c0:6b:fb:49:bf:cf:da:15:ae:33:f8:3e:
78:a7:c4:df:2e:86:f7:56:44:32:fc:05:82:7e:10:c2:ea:46:
79:8a:c7:ba:bf:8d:c6:ba:66:21:90:04:3f:aa:5e:9a:49:ae:
11:25:9c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:06 2025 by rpki-client