Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D65DCF6F42A11EF8F8665AD762E951A.roa
File: 9D65DCF6F42A11EF8F8665AD762E951A.roa (raw, json)
Hash identifier: Bqfr4wt7I7Rq/xaGPy5W5zuWI8Rl5BiwTyB4/hPWubg=
Subject key identifier: EB:35:33:80:59:D4:E7:A5:56:38:23:10:92:4A:DB:5B:AE:7D:71:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D65DCF6F42A11EF8F8665AD762E951A.roa
Signing time: Wed 26 Feb 2025 10:15:34 +0000
ROA not before: Wed 26 Feb 2025 10:15:30 +0000
ROA not after: Sun 20 Feb 2028 10:15:30 +0000
asID: 17561
IP address blocks: 45.203.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78048 (0x130e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:15:30 2025 GMT
Not After : Feb 20 10:15:30 2028 GMT
Subject: CN=67bee9c6-ce77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:77:86:ca:87:fc:88:25:78:01:a8:ce:aa:
4f:20:e0:7c:d8:38:6e:8a:43:de:cd:d0:c6:5d:78:
3b:93:9e:71:9d:fe:b1:02:8e:c0:50:7e:68:b5:83:
a7:b0:3b:40:dd:e7:27:80:1e:d0:ff:8f:67:90:e1:
47:c4:96:e1:6a:c9:03:cb:49:d0:75:22:9d:08:71:
30:21:3a:7e:eb:62:82:32:de:e7:b7:0f:aa:6d:f6:
46:fa:10:25:e3:8b:2b:51:86:42:fc:36:38:f1:c5:
ef:1c:58:6b:1b:0c:3d:ad:8b:66:79:5a:84:7e:68:
71:fd:34:57:b1:9e:2d:aa:43:8d:0a:f0:48:5d:f5:
35:47:af:98:ce:ce:20:f6:46:6b:f0:c2:02:c4:e3:
b0:ab:1f:60:a5:12:d2:79:31:c0:3a:f4:bf:69:a7:
32:27:77:e3:f6:b6:9d:79:51:e2:3c:a3:18:4a:1f:
bf:d9:10:9f:fc:79:e1:34:00:4c:37:7f:4b:1e:de:
8a:61:99:0c:1b:37:3f:34:57:a0:a9:d7:c6:68:da:
bf:4c:f4:16:59:61:b2:0f:ad:6b:91:8f:68:01:26:
ab:8e:3d:41:be:ed:38:91:27:b0:74:86:98:e7:3d:
ca:fe:a2:1b:a8:89:08:56:36:8e:c6:c2:e4:6f:c8:
db:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:35:33:80:59:D4:E7:A5:56:38:23:10:92:4A:DB:5B:AE:7D:71:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D65DCF6F42A11EF8F8665AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.35.0/24
Signature Algorithm: sha256WithRSAEncryption
30:34:73:8f:cf:fb:48:1e:0a:5b:1c:b3:b0:8c:96:e9:54:0a:
6e:5b:2f:63:6e:dc:e7:7a:fc:17:8a:39:46:2d:d5:ae:99:52:
93:7b:44:28:21:20:5a:4e:dc:ca:a3:7c:10:34:0e:69:02:f7:
bf:95:5a:9a:cf:fd:ae:6b:be:47:75:12:dd:f8:82:48:10:75:
b6:47:e3:33:7c:7d:82:e3:b2:e4:7d:2a:ff:ec:c5:af:b2:35:
24:c1:d3:e9:e7:a1:1d:cf:e7:42:8a:ad:83:94:78:75:91:c2:
3f:02:65:72:3e:a4:fa:dc:57:25:92:dd:e1:b6:18:b4:3a:b6:
a6:94:08:fc:bf:7f:f6:33:4d:fc:d8:e4:3e:bd:54:15:ae:ac:
fa:41:7c:57:75:79:0e:fe:f1:27:29:76:2a:57:d7:55:5e:46:
87:49:63:ee:9c:21:8b:20:8c:68:95:78:67:5f:57:32:19:8a:
af:b0:d9:51:fd:c2:69:0a:b9:ce:bf:c8:c7:2f:fb:d9:43:78:
0b:b4:44:81:5d:cf:b3:6c:be:ee:66:5c:cb:c8:f5:8d:0b:5d:
b1:bf:b0:4c:fb:98:e2:ba:f4:c8:b2:5c:f9:d8:87:06:b0:89:
b7:17:74:9e:98:cf:be:74:81:c4:21:17:a0:49:24:b9:1c:06:
64:3a:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:07 2025 by rpki-client