Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87FEDF50F47211EFB6BC7FA5762E951A.roa
File: 87FEDF50F47211EFB6BC7FA5762E951A.roa (raw, json)
Hash identifier: M1HYXH4iggYeCLA7sDgJqImisQ2AFskUHTuoTj/kLZQ=
Subject key identifier: EB:8E:C2:89:78:E7:E4:6E:0A:25:DA:E7:48:22:6A:89:25:DB:89:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87FEDF50F47211EFB6BC7FA5762E951A.roa
Signing time: Wed 26 Feb 2025 18:50:22 +0000
ROA not before: Wed 26 Feb 2025 18:50:18 +0000
ROA not after: Thu 19 Feb 2026 18:50:18 +0000
asID: 984
IP address blocks: 45.201.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79530 (0x136aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:50:18 2025 GMT
Not After : Feb 19 18:50:18 2026 GMT
Subject: CN=67bf626e-53ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:07:af:38:0b:4d:64:ed:ac:bc:88:ae:16:
38:3a:3c:8c:0a:3b:29:33:51:6a:11:c1:bb:d1:6d:
7a:14:d7:84:a2:b0:a3:7e:04:e5:e3:f9:99:1c:23:
69:c6:0b:00:dc:60:46:b6:cc:03:87:a2:dc:bb:b3:
fa:d9:2b:94:97:ab:58:8c:dc:db:53:97:dd:90:76:
57:8a:e4:1a:4b:53:64:61:ed:ff:83:da:a1:4b:9a:
fb:ec:8e:63:8a:ee:72:cf:e7:6f:1e:14:91:17:b0:
35:60:d9:25:84:a4:49:8c:18:a4:dd:79:ff:8b:04:
87:91:56:8f:dd:62:ec:5f:8c:8e:ef:f7:c8:3b:ef:
60:4b:81:c4:15:41:bd:ce:4e:e6:dc:0e:bf:5c:e1:
df:7c:d8:10:aa:d9:05:9a:8c:7c:fd:0d:f5:61:c1:
6b:6e:b8:c7:9e:b1:fe:8e:73:fa:3a:d2:ac:7d:7e:
5e:9a:a2:d7:c0:32:38:16:e6:e3:88:46:f9:b3:19:
10:da:c8:d3:d7:c1:75:73:35:29:3a:37:11:a7:c3:
bd:d3:56:a8:e2:39:16:a6:35:31:c2:ce:1f:83:9f:
8a:ce:40:c6:cb:fe:da:67:0c:cc:d7:43:54:11:7d:
69:cf:28:3e:08:93:dd:a5:65:31:97:d4:87:51:4c:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8E:C2:89:78:E7:E4:6E:0A:25:DA:E7:48:22:6A:89:25:DB:89:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87FEDF50F47211EFB6BC7FA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.81.0/24
Signature Algorithm: sha256WithRSAEncryption
90:40:8a:9e:24:00:1a:da:90:34:4c:32:47:e6:e2:61:5e:46:
2e:72:b1:41:53:93:14:58:a7:36:3d:60:06:de:ea:e9:c5:af:
db:07:35:63:5f:9d:24:45:6d:31:06:b1:54:66:80:5c:4a:5d:
a7:f2:60:8d:b5:87:7c:4d:92:55:68:e5:6f:59:7e:95:a1:65:
cb:74:93:34:7d:1f:fa:92:ba:ed:f2:07:52:7f:23:e5:0b:52:
d9:1e:14:9a:0e:97:81:02:c9:43:c2:d9:53:4a:5f:96:96:59:
7e:81:86:2c:66:64:5e:4d:7f:83:81:f9:f6:85:f2:5d:db:c9:
8a:fc:5a:3e:5b:bf:c4:80:c6:c6:53:89:6e:56:ec:1f:f6:28:
88:0e:bc:7d:eb:cb:fa:89:41:14:84:f7:60:cd:42:90:ae:29:
c6:51:fa:0e:75:f2:7d:9a:e7:be:fd:48:93:1f:67:64:9e:5c:
1a:87:8e:5f:a4:df:19:cd:f8:9c:8c:80:cf:7e:51:d9:d1:bb:
ba:3d:e6:c7:46:b7:17:a2:a9:66:4c:4d:0f:05:05:c4:b0:69:
84:ad:81:7e:2f:55:89:dd:30:65:35:f0:e3:cd:b0:81:b7:1d:
f5:d6:a6:74:2e:a6:b6:7f:a7:4f:ff:f8:29:3d:66:77:da:8b:
e7:60:e6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:44 2025 by rpki-client