Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BF89B9603E011F0BC50FA59762E951A.roa
File: 8BF89B9603E011F0BC50FA59762E951A.roa (raw, json)
Hash identifier: 93ezXVTDa4ITGn/4yTKn+amq+i0b2DpBKjWbADFNNc0=
Subject key identifier: 6D:E8:22:28:AC:34:B7:CB:12:4D:FA:76:9A:DC:A1:8E:88:FF:CB:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014699
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BF89B9603E011F0BC50FA59762E951A.roa
Signing time: Tue 18 Mar 2025 10:05:40 +0000
ROA not before: Tue 18 Mar 2025 10:05:37 +0000
ROA not after: Fri 25 Apr 2025 10:05:37 +0000
asID: 2914
IP address blocks: 45.202.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83609 (0x14699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 10:05:37 2025 GMT
Not After : Apr 25 10:05:37 2025 GMT
Subject: CN=67d94574-dc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:b1:3f:0b:68:55:d8:9b:4e:cb:18:98:70:
f6:b8:7c:3c:7c:5b:51:40:7f:ee:80:21:4a:85:2b:
d8:e7:85:c1:2b:66:d7:df:3f:e2:f6:6f:28:f7:e9:
f5:89:b5:c8:ea:c4:47:59:f9:80:4b:13:80:df:8f:
ae:87:e6:82:5d:60:db:76:51:40:30:13:38:60:ed:
ad:84:83:2d:03:3b:0a:ac:23:5f:f8:aa:d0:a9:59:
81:69:38:de:1a:7a:8d:86:0c:fb:38:eb:5a:d6:6b:
4e:9d:5a:ee:f6:2f:75:bd:71:d2:05:46:6d:97:1e:
49:b8:ca:6b:b4:97:59:5f:a9:10:11:80:96:14:56:
af:b8:4e:e8:e8:76:a1:7b:40:3c:66:24:0f:6a:eb:
a2:6b:ba:b1:57:a3:f0:60:61:fc:b9:f5:ab:40:91:
57:98:15:1f:88:ce:59:86:3c:7b:73:f4:20:39:63:
75:d4:da:8f:2f:37:a6:51:21:fe:b0:43:12:1c:fc:
36:ef:16:2f:4d:56:86:03:49:a6:f1:af:4f:c8:84:
c2:4e:58:6f:d2:a0:ab:d8:53:ee:24:33:68:97:64:
87:77:16:b3:c5:83:2e:bb:0d:23:98:a5:6a:da:d9:
d6:56:6a:4d:4d:7e:9d:4c:00:81:de:34:8a:3d:bc:
ee:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E8:22:28:AC:34:B7:CB:12:4D:FA:76:9A:DC:A1:8E:88:FF:CB:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BF89B9603E011F0BC50FA59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
83:52:c2:c1:d6:53:f8:0d:58:a9:9e:33:5c:89:4a:88:9e:bb:
89:ab:2a:0c:3a:20:18:e4:b1:60:69:67:59:cc:2b:e9:07:b0:
4b:88:ee:06:de:77:6f:e5:8b:89:10:fe:8c:bb:04:52:11:21:
1f:ec:e4:d5:57:41:8f:ca:a3:03:0d:31:07:ce:f1:1b:64:c8:
e8:df:5e:36:64:d0:7c:4f:7e:79:1c:a3:35:e3:7f:f0:d8:95:
ea:2e:ad:95:b0:2e:78:a6:0b:b7:8d:aa:30:88:c8:35:b3:17:
a8:57:72:c1:1e:ea:c1:cb:6c:95:96:97:2e:cc:ea:a9:d2:8c:
7d:8d:d2:bd:60:d1:6a:83:20:10:dc:bc:dd:c1:25:43:ad:d5:
b5:f5:cb:22:63:0d:c7:b1:ac:c0:69:df:b3:a4:94:89:53:21:
68:21:61:1d:47:da:92:b1:20:54:16:7b:07:1a:cd:9a:7a:43:
7b:18:1d:0e:87:d4:4c:72:c8:8d:df:61:04:8b:38:1d:8e:b2:
15:d3:4c:cb:1f:24:fa:34:ab:a1:bd:db:4b:f0:de:73:29:a9:
51:e8:29:cf:0a:cc:7f:0b:83:3b:03:d9:7b:6c:85:8d:34:ee:
ed:52:20:8a:c7:36:ea:9b:bf:94:86:3c:71:f7:bf:75:d9:10:
1c:09:d8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:00 2025 by rpki-client