Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D4323CAF47B11EFA203BF64762E951A.roa
File: 6D4323CAF47B11EFA203BF64762E951A.roa (raw, json)
Hash identifier: tOER8C5/mqghQjAEpPrOQVk8Cnfdzt8qrxYssSdiCKw=
Subject key identifier: 7E:DE:6B:A0:71:FF:AA:E8:FD:F3:92:02:A0:C2:BD:D7:0C:4B:D9:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013743
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D4323CAF47B11EFA203BF64762E951A.roa
Signing time: Wed 26 Feb 2025 19:54:02 +0000
ROA not before: Wed 26 Feb 2025 19:53:59 +0000
ROA not after: Thu 19 Feb 2026 19:53:59 +0000
asID: 984
IP address blocks: 45.201.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79683 (0x13743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:53:59 2025 GMT
Not After : Feb 19 19:53:59 2026 GMT
Subject: CN=67bf715a-9046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:47:c4:c5:c2:df:fe:72:c2:83:be:15:a1:53:
56:69:d7:71:02:bc:92:8f:f2:ea:7c:71:07:d4:6e:
59:42:69:5a:90:e3:ad:79:c4:b2:ca:76:d6:f5:3f:
ea:9e:15:19:20:ee:d3:22:7b:12:5f:9d:38:30:77:
2b:c9:3a:f5:11:a0:b5:ea:f2:15:f1:ac:25:83:0f:
a7:61:0f:ed:18:6b:cc:0c:bf:e6:44:47:3d:04:73:
79:3a:0a:a9:27:6b:16:2b:b0:60:a9:0a:f2:85:aa:
08:b1:dc:6f:8d:0c:d8:9d:b7:05:a1:99:e0:04:ec:
d9:44:d3:bf:93:b2:1e:f8:0e:72:90:8b:fd:2c:24:
e3:9f:bd:4f:4b:6b:15:44:c2:20:f7:cd:a2:08:5a:
68:4d:04:23:35:58:1e:cf:e8:30:ca:21:0d:bf:14:
c5:62:70:51:59:bc:9f:1e:ae:72:23:d8:e7:75:65:
39:65:47:74:ce:28:4c:c1:f9:54:69:5c:f6:b8:31:
84:1a:34:5b:9b:6d:75:b3:96:c2:ae:69:38:b3:c8:
cc:8d:15:28:28:4c:64:c6:9f:4e:cf:e6:28:b7:06:
09:c6:68:9b:03:c3:01:17:50:70:80:dc:e0:8b:20:
63:fd:18:e0:be:47:ac:14:22:05:f5:ac:01:99:db:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DE:6B:A0:71:FF:AA:E8:FD:F3:92:02:A0:C2:BD:D7:0C:4B:D9:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D4323CAF47B11EFA203BF64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:7a:0f:42:ce:a4:c0:01:5d:ed:ca:c4:26:61:f6:65:ea:39:
bc:39:87:14:84:7c:73:f8:ff:54:7e:f1:32:50:ef:f5:c1:88:
e1:43:30:36:a6:1b:7d:46:2e:a4:a4:b0:8d:dd:5f:ab:06:44:
a1:8e:41:d0:18:45:90:d6:62:ae:c1:74:53:37:2d:b1:bc:09:
ca:7c:0f:5e:61:db:a5:37:88:1f:bc:32:4c:ad:14:fc:25:94:
4c:9c:b7:7d:c4:a2:87:53:ad:b4:e5:b1:2b:fc:c1:ee:40:1c:
76:02:b1:2d:c5:ff:91:bc:f6:b1:fa:48:d7:0d:0d:7d:a6:aa:
3e:bb:94:97:30:d5:34:fd:1c:b1:47:63:bb:52:ab:ba:b3:56:
9e:17:f0:14:59:27:4e:aa:c0:14:b8:76:42:12:55:1f:fd:5e:
8d:61:9e:09:e9:83:8c:f1:db:78:76:2b:0e:5c:a6:3c:21:2f:
e8:63:2a:ec:dc:da:c9:c0:6b:b8:f1:f4:7b:18:c8:1b:ef:43:
67:c1:54:65:96:dd:67:ed:93:ce:1c:24:5b:fd:76:5b:6f:8a:
43:55:19:c4:fb:87:19:11:74:77:0c:c6:e9:61:e9:f4:f3:e2:
e5:5a:66:11:64:c5:a9:cf:db:be:28:56:11:44:62:9d:0a:b7:
cc:25:b9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:32 2025 by rpki-client