Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9931D382F43011EFBB9BF959762E951A.roa
File: 9931D382F43011EFBB9BF959762E951A.roa (raw, json)
Hash identifier: 4BoufwNXhltx5M6NSnfUlMBgwhXGP5Vxwc+aMlrkEz4=
Subject key identifier: AD:9F:C6:3F:12:E6:3B:E3:64:C2:09:9F:E6:21:53:12:64:69:18:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013184
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9931D382F43011EFBB9BF959762E951A.roa
Signing time: Wed 26 Feb 2025 10:58:24 +0000
ROA not before: Wed 26 Feb 2025 10:58:20 +0000
ROA not after: Thu 19 Feb 2026 10:58:20 +0000
asID: 328608
IP address blocks: 45.205.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78212 (0x13184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:58:20 2025 GMT
Not After : Feb 19 10:58:20 2026 GMT
Subject: CN=67bef3d0-3699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:ac:e2:48:23:88:8e:31:a2:73:69:14:7e:
46:59:ea:16:fb:37:0b:9d:47:d0:56:ee:eb:d0:0c:
93:d9:c2:48:70:0b:78:8d:bd:d9:87:e5:a0:3b:fc:
4c:95:44:30:bc:75:35:06:6a:11:39:7e:66:8c:2d:
b6:81:7e:dc:02:df:b1:63:bd:dd:76:16:a4:7c:4d:
0d:53:ee:e7:6e:f4:72:9d:bd:7d:f3:76:49:a8:5a:
14:ac:0c:f5:67:db:ee:1b:c9:51:7e:49:24:38:64:
aa:d4:42:24:37:83:15:81:87:96:b5:e8:80:d7:37:
63:3e:3f:22:48:7f:f7:28:61:a1:2f:b0:66:ce:e0:
c8:cd:9f:0f:61:90:c4:e7:a5:67:2a:e3:85:65:67:
8f:2e:45:c8:a6:fa:bc:9e:1d:b1:61:6f:7d:0f:d4:
92:2b:da:a2:50:30:95:dd:ba:d1:b3:f0:7e:08:54:
44:e1:57:97:7b:16:87:6f:10:ea:07:59:62:f0:6f:
7a:79:02:4e:b9:15:fe:07:2f:ed:88:14:47:2c:1d:
4c:97:86:d6:85:e9:0e:1e:49:3e:89:83:41:ad:47:
0c:e1:2a:ee:95:f7:eb:13:05:8f:a8:d3:a7:d7:12:
c0:ed:5f:b2:f9:9b:bd:db:24:aa:c7:e4:dc:aa:71:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9F:C6:3F:12:E6:3B:E3:64:C2:09:9F:E6:21:53:12:64:69:18:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9931D382F43011EFBB9BF959762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.82.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b1:16:8c:1e:bb:f0:56:e2:ab:e5:71:5d:6e:73:da:f9:f5:
f2:52:52:5d:45:3f:50:39:84:e9:79:98:f9:cc:cc:1d:8f:ef:
02:0b:7c:88:6c:2f:3a:93:20:28:65:98:57:3e:79:5b:bc:44:
38:5c:52:e3:7b:22:bf:25:fb:ea:35:04:d9:da:19:be:43:6a:
c9:a4:98:71:ec:eb:73:8f:5d:ec:f8:18:d0:93:1d:6d:9b:9c:
2f:ca:58:99:5d:87:57:45:a7:d0:46:09:01:f8:dd:79:af:6d:
af:f1:ef:0a:cb:cc:57:c5:42:e0:c5:b6:e9:6d:f6:6f:34:84:
15:37:9e:51:f0:87:42:71:7a:dc:67:f2:61:51:31:74:2a:94:
1f:62:37:14:65:17:1a:2c:f3:56:0f:dd:dd:65:fb:53:db:5e:
68:d3:56:91:96:46:07:eb:6a:fe:6d:ba:eb:3b:0d:7f:00:0b:
6f:a0:e6:51:73:75:45:1b:55:2c:5f:0f:e8:e8:ee:9a:0d:38:
69:96:aa:ca:6e:da:7d:cd:34:b7:1b:1c:9b:87:d4:b1:32:9d:
6d:81:47:31:e6:66:d6:1b:70:98:9e:15:3f:d0:db:86:a2:e5:
63:31:b6:b5:fc:46:3a:83:f1:63:27:84:a5:8f:91:40:d0:86:
7d:7d:1c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:54 2025 by rpki-client