Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FF87E92E55511EFA2CFBFAD762E951A.roa
File: 6FF87E92E55511EFA2CFBFAD762E951A.roa (raw, json)
Hash identifier: UVvDPoIWesJs4fYssw32SyK32IXYLtUxCItwdS2SqnI=
Subject key identifier: 79:EF:22:B8:47:CC:B1:E3:37:18:00:FC:85:0E:F9:DF:1D:39:5E:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FF87E92E55511EFA2CFBFAD762E951A.roa
Signing time: Fri 07 Feb 2025 13:14:19 +0000
ROA not before: Fri 07 Feb 2025 13:14:15 +0000
ROA not after: Wed 21 Jan 2026 13:14:15 +0000
asID: 984
IP address blocks: 45.194.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73130 (0x11daa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 13:14:15 2025 GMT
Not After : Jan 21 13:14:15 2026 GMT
Subject: CN=67a6072a-4b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:cb:60:bb:0f:35:17:bb:34:0a:dc:94:01:
99:68:ec:9d:7b:97:c6:57:62:84:9a:1c:d4:36:2b:
cd:02:75:0d:ee:a4:a1:d2:69:84:d1:19:af:ba:df:
be:f3:19:21:a2:38:12:3a:c4:d4:dd:93:ac:f0:0c:
0a:0b:f5:2c:98:d4:14:50:fa:88:99:39:b8:e7:40:
c5:21:40:ea:49:57:d7:6f:b9:33:3d:e2:3b:52:e1:
6b:19:87:4b:fd:e6:fd:2e:a7:e1:61:fb:85:65:2d:
7f:49:ab:4c:16:40:17:3b:9b:0a:c5:bf:7a:4e:18:
6d:55:e9:03:ee:37:d8:24:f0:f2:fe:01:77:2e:da:
a3:88:84:3b:3b:2e:68:9f:d1:20:8a:19:5d:80:fa:
23:96:fc:3d:c5:e4:c5:65:a3:c4:f8:5b:a0:22:1d:
c1:a1:57:72:9a:5c:86:45:cf:b1:2c:db:f3:44:85:
e8:d7:e8:fb:d5:14:98:81:9a:f9:5c:42:08:24:af:
a3:c0:63:1f:33:dc:a4:19:eb:00:02:4d:b0:38:1b:
7b:30:97:2d:a9:1f:bb:13:11:5d:85:7b:ad:2f:c9:
d7:36:c8:49:a5:e4:c1:ac:4a:bf:4c:07:71:7f:77:
f2:79:60:20:38:5c:38:7b:26:83:97:72:bc:bd:31:
49:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EF:22:B8:47:CC:B1:E3:37:18:00:FC:85:0E:F9:DF:1D:39:5E:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FF87E92E55511EFA2CFBFAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.84.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d9:23:98:ac:2f:28:e2:e9:e1:ea:1e:94:46:a0:c1:04:62:
2f:64:02:24:27:e5:aa:83:3d:db:a7:1d:e5:1a:54:d5:ad:0e:
9c:60:cc:44:9e:e4:d3:63:a4:35:08:1f:01:ea:f7:a3:b3:ee:
32:39:4e:1f:e5:9b:ac:46:b6:8e:b5:2d:98:eb:8c:0d:34:b7:
26:82:f6:5c:86:8a:e3:5b:b1:96:b5:4f:4a:ed:9c:7e:fb:b4:
3e:8a:a0:96:cc:a3:0a:4d:70:36:1b:3f:63:63:e5:05:3b:3e:
f3:e3:29:9a:c4:3e:7a:d4:94:e3:73:d9:a6:1e:6a:52:fa:e1:
86:0e:cc:64:58:89:74:10:a9:1c:1c:24:fc:7d:8b:71:16:61:
1e:e0:ce:a6:55:fb:a7:b0:12:8c:fb:f0:30:7a:96:87:4f:e7:
3c:c7:8f:90:ce:88:ae:cf:0e:48:81:11:95:26:8a:63:b9:1a:
3c:b9:52:2a:bd:78:80:32:3d:49:f6:9b:fb:0b:1f:40:f4:f5:
53:c6:c6:0f:c8:b1:09:9d:52:d8:0a:23:e1:de:02:ad:ef:db:
22:91:3f:03:c2:ee:7d:34:b9:76:30:13:b5:ee:de:16:a5:f0:
0a:a3:6c:1f:01:86:61:38:37:a7:28:cf:f5:83:62:fe:96:92:
52:fc:9a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:12 2025 by rpki-client