Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D07B68F43E11EF89AFA7BA762E951A.roa
File: 77D07B68F43E11EF89AFA7BA762E951A.roa (raw, json)
Hash identifier: 4JuMQuMyQRkLcIk4wCQmz/J1Oa5vSag2aAcYgxSDEQs=
Subject key identifier: FF:12:53:61:B0:2B:65:0C:04:C0:42:67:99:0C:79:C7:75:B2:1C:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013295
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D07B68F43E11EF89AFA7BA762E951A.roa
Signing time: Wed 26 Feb 2025 12:37:41 +0000
ROA not before: Wed 26 Feb 2025 12:37:37 +0000
ROA not after: Thu 19 Feb 2026 12:37:37 +0000
asID: 984
IP address blocks: 45.206.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78485 (0x13295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:37:37 2025 GMT
Not After : Feb 19 12:37:37 2026 GMT
Subject: CN=67bf0b15-f36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:94:b4:9d:30:cc:b6:77:b1:33:97:d3:9c:
8a:16:aa:e8:35:b6:69:28:d1:db:39:7e:dc:91:43:
be:51:d1:92:2a:72:61:be:e9:89:27:6d:51:5b:de:
b3:a4:50:8f:d3:8f:13:5e:cf:c9:f5:b8:33:25:ac:
37:a0:38:75:cf:e0:d2:b7:cd:91:a3:99:b4:31:be:
7d:eb:8f:6f:6f:01:e7:b7:f9:45:6b:a2:bf:ff:2d:
48:31:c6:ed:76:6e:3e:43:45:38:0a:d0:c0:48:4c:
c3:9a:51:30:67:ce:5e:ff:1f:0c:98:fa:49:93:60:
78:0a:f3:e2:31:5f:fa:14:fb:d1:3d:64:77:bf:09:
9a:cd:4f:6c:34:01:1e:6e:23:5f:37:e1:ff:cb:16:
35:f0:05:f9:b9:f3:3f:af:5e:62:4d:0c:d4:5c:56:
ae:5d:ff:a9:8d:f4:ba:07:ed:2e:7c:4e:57:10:b4:
88:a3:42:10:d8:5f:fa:d9:fc:1f:dd:ea:3c:01:73:
80:29:9a:12:02:97:7d:8f:64:53:73:b5:bc:8d:74:
e4:8f:8b:ae:8c:9b:e4:da:30:6b:5a:0a:5d:58:ad:
79:ae:de:ce:39:5f:89:ae:58:0a:60:bc:5f:63:f3:
f1:c7:6d:71:70:c6:9c:28:a5:39:8e:27:4e:77:55:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:12:53:61:B0:2B:65:0C:04:C0:42:67:99:0C:79:C7:75:B2:1C:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D07B68F43E11EF89AFA7BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.57.0/24
Signature Algorithm: sha256WithRSAEncryption
15:59:61:1b:22:f0:09:de:95:77:4f:d4:d6:e9:e6:f9:51:57:
db:be:d1:db:2d:90:cd:87:d5:df:1c:66:8c:a1:67:a3:ee:41:
85:e8:0d:ed:e3:da:67:25:18:20:1c:af:45:55:b1:63:c7:22:
d8:99:21:5f:79:d3:df:b5:0a:72:6a:b8:7b:9d:f6:07:b7:d8:
64:e0:42:7c:0e:23:fc:20:a8:80:d8:c5:ad:9a:53:1e:a8:9d:
fc:ae:ab:5d:74:4b:0f:37:a2:77:31:b2:99:f0:66:d0:2a:6b:
fd:0f:5b:a6:f0:0e:dc:52:46:ad:94:72:f3:2b:ce:49:fa:e3:
17:8e:4b:d6:3f:46:41:e7:91:80:ff:af:52:ba:56:44:6e:c4:
56:e8:62:4f:3b:31:c8:81:8c:5a:86:26:95:71:9b:52:6d:11:
a3:b8:c4:32:7b:58:8e:b1:90:24:e6:83:cd:90:5a:a8:18:46:
61:70:98:25:fc:4c:97:2a:de:5b:25:72:16:27:34:40:b5:7f:
74:a0:f7:45:48:71:62:bd:bd:a4:36:17:3a:36:f1:ca:93:b6:
4b:30:99:e4:70:b7:ab:81:e3:c7:bc:ad:ae:be:36:e3:e3:de:
d7:cd:12:67:20:2e:9b:cb:21:43:b8:e4:9a:ff:e1:79:b5:39:
4d:52:6a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:57 2025 by rpki-client