Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/905D1F10F47511EF8E392DBC762E951A.roa
File: 905D1F10F47511EF8E392DBC762E951A.roa (raw, json)
Hash identifier: FEI7rh88YWihgoo5tOw7exZkm5+MIQ01pNF1bH8YfDg=
Subject key identifier: A2:1B:16:B9:0C:12:40:5B:50:B0:0E:F7:FB:C4:AC:FB:64:D1:95:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/905D1F10F47511EF8E392DBC762E951A.roa
Signing time: Wed 26 Feb 2025 19:12:04 +0000
ROA not before: Wed 26 Feb 2025 19:12:01 +0000
ROA not after: Thu 19 Feb 2026 19:12:01 +0000
asID: 984
IP address blocks: 45.201.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79588 (0x136e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:12:01 2025 GMT
Not After : Feb 19 19:12:01 2026 GMT
Subject: CN=67bf6784-4601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:97:54:10:26:28:94:f4:1d:e3:9b:d6:47:
b0:ba:56:6e:0d:11:71:ac:e1:77:15:59:3c:2a:66:
e8:f3:15:8d:93:ca:c0:85:8e:de:76:42:a0:81:f1:
52:e9:53:84:e4:48:dc:7a:0c:2c:81:ec:88:fa:6e:
20:f8:06:92:fc:14:ec:0b:61:ce:da:99:1b:c7:fd:
95:59:83:b9:4c:07:dc:cc:18:58:eb:96:94:b6:f3:
60:69:4b:f4:ec:cb:96:ff:85:b8:61:ee:06:19:c1:
a3:a2:6c:84:63:79:ff:89:e2:85:10:ff:53:c4:93:
3d:1b:bc:1f:4c:28:b4:51:67:f2:da:7b:19:14:40:
5e:0c:a0:03:3b:a6:c8:60:ce:9f:19:9f:f7:c2:d1:
db:6a:69:b0:6b:64:2d:37:ec:d6:17:6a:2b:5d:ac:
73:9b:b0:fc:c9:e3:d5:fc:8d:c2:45:87:0f:77:3f:
fa:19:f8:2f:ea:c2:b3:95:ff:91:f0:59:76:ed:1b:
84:2b:76:34:2b:8e:28:f9:86:3e:e1:04:f7:61:e8:
8b:21:38:fb:0b:7b:72:21:e5:84:98:ea:30:fc:6f:
f1:ba:b8:04:12:aa:f8:cf:e1:54:3e:1e:26:6f:c9:
9c:f0:dd:f1:06:09:96:d4:2a:60:73:4d:3b:70:11:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1B:16:B9:0C:12:40:5B:50:B0:0E:F7:FB:C4:AC:FB:64:D1:95:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/905D1F10F47511EF8E392DBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.89.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b6:87:dc:3b:e2:7f:92:1f:aa:85:18:e2:31:b7:13:17:8b:
e1:ca:aa:44:83:52:ea:73:c4:f3:25:b4:b6:1c:86:2d:0f:55:
e0:cc:f9:e2:6a:e6:a0:f3:1e:1d:82:4e:4c:e0:b6:c8:07:90:
50:cc:26:36:a6:44:81:bb:c7:f1:57:dc:d2:e6:56:c1:38:13:
e6:58:1d:e3:64:72:41:53:1d:e9:0d:e2:ed:2b:17:2d:a8:51:
19:ab:1d:47:19:39:89:48:8e:68:0f:6d:a5:f5:75:1a:71:c9:
a4:ca:e1:a7:40:bb:01:6c:5c:e2:88:da:96:e2:a5:0a:72:d8:
31:e7:da:5b:b5:56:ac:7d:ed:d1:b3:ed:9a:22:9e:d2:d1:cc:
a0:cc:4a:cc:5f:57:4e:84:52:48:af:94:ff:b9:52:87:e4:a3:
73:9c:dc:4d:91:c4:7a:d6:93:c6:a0:c3:c6:9b:c8:c0:53:04:
19:c0:06:f9:f9:85:13:d4:8f:82:31:98:ec:5c:b3:22:26:1c:
8c:df:1f:e6:5d:86:f0:ec:a0:a8:25:45:f8:7b:12:93:75:1c:
f4:9e:c6:ef:b8:6b:4e:eb:75:2b:d2:78:a1:70:f8:0b:b2:f4:
4a:45:1e:56:c0:92:f4:5e:42:48:b6:97:3b:be:7e:fc:9e:93:
cf:68:44:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:41 2025 by rpki-client