Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91AAED70F47F11EFBE751382762E951A.roa
File: 91AAED70F47F11EFBE751382762E951A.roa (raw, json)
Hash identifier: 3RJBK7lacmlLCg4D1InsKhHVClmVHrg1YfEIdh/OWIY=
Subject key identifier: 68:DE:B4:7D:9C:2A:62:31:26:EB:AE:A6:55:08:C8:1B:29:D3:3F:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013784
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91AAED70F47F11EFBE751382762E951A.roa
Signing time: Wed 26 Feb 2025 20:23:41 +0000
ROA not before: Wed 26 Feb 2025 20:23:38 +0000
ROA not after: Thu 19 Feb 2026 20:23:38 +0000
asID: 984
IP address blocks: 45.201.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79748 (0x13784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 20:23:38 2025 GMT
Not After : Feb 19 20:23:38 2026 GMT
Subject: CN=67bf784d-dd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:78:76:fb:03:26:a0:ef:ac:8b:60:37:5f:
ab:16:fb:4d:b5:a1:b6:4d:d1:3e:13:c3:17:6c:39:
ef:ad:68:f6:64:18:17:25:96:5f:c6:6a:cd:5e:4e:
2c:9f:50:f3:3e:11:b1:ec:53:1c:cb:ff:90:11:7a:
a9:ee:3e:fb:d6:30:cc:90:6f:a0:f0:d2:ba:38:51:
58:54:d0:a7:53:2a:ab:07:fd:02:cf:84:1b:17:ba:
6b:c8:d8:f4:f5:39:60:6e:63:01:7a:57:0f:6e:03:
03:be:4a:ca:98:0e:2b:21:f5:04:10:4a:79:0d:f7:
8e:7c:89:20:d9:58:62:f9:8e:e2:16:73:3a:b0:7a:
b9:b2:e2:1d:ba:92:b0:c3:82:70:86:65:4a:10:60:
a1:ff:aa:fb:6e:00:e9:29:f7:89:ef:70:ac:17:c6:
15:fb:cf:f6:01:26:ae:a8:d3:64:49:7b:05:76:40:
d7:0c:6e:7c:df:5a:a8:41:14:30:b2:bb:44:8b:a0:
9a:23:6a:70:fc:5d:6b:6e:8a:07:3a:31:ea:91:83:
40:40:dd:60:1c:01:df:99:ff:39:d1:43:62:90:78:
97:f7:4e:6d:b1:ff:cc:82:40:0b:73:09:77:0e:d0:
86:99:a7:57:a3:6a:bf:7f:6f:83:1b:96:70:68:12:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DE:B4:7D:9C:2A:62:31:26:EB:AE:A6:55:08:C8:1B:29:D3:3F:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91AAED70F47F11EFBE751382762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.118.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:bb:30:8f:a4:03:76:21:f6:0e:31:d3:c5:b7:da:c0:02:7f:
ed:20:da:5b:88:1b:54:1d:2b:ab:7f:be:20:60:7c:2c:e6:fc:
10:df:5c:e7:c5:68:de:24:61:78:09:89:46:6d:d3:3e:22:bd:
8f:f3:14:ed:34:dc:f6:be:cf:ee:7b:47:c3:5d:74:a9:c2:e6:
bf:d9:36:81:40:16:fd:d3:66:61:7f:36:db:96:92:be:2d:23:
73:34:08:ab:b2:2c:fe:65:51:bb:cc:d3:55:73:b3:dc:0d:30:
bd:ee:08:79:2e:51:b4:8a:25:37:bd:09:0a:6d:f0:5b:98:69:
7b:38:e5:2a:09:bc:85:80:e0:3f:d6:f9:be:21:8e:d8:18:b1:
e0:cb:3b:8e:4e:47:47:20:58:2d:30:c5:08:40:4b:c2:27:7f:
af:d7:b6:c7:37:8c:51:ce:74:2a:5d:c7:1f:e0:84:cf:45:80:
7f:e6:b6:e2:01:6a:23:57:45:6a:36:36:11:e9:83:a4:32:1d:
8c:88:8e:2a:16:69:7d:3d:da:dd:17:ec:77:f8:59:5e:a9:86:
5c:f9:c0:72:bf:ef:26:d3:68:e7:65:b4:d3:62:44:99:fa:d4:
f7:ca:b7:23:98:b4:9b:68:fb:9b:7a:e3:77:9c:49:93:05:37:
a0:50:08:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:57 2025 by rpki-client