Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5CC21D0F43311EF8B94856D762E951A.roa
File: A5CC21D0F43311EF8B94856D762E951A.roa (raw, json)
Hash identifier: 6H4WGjT8SumegHnxsjQYEHubHuWleWSpaoYByz8/XMo=
Subject key identifier: DA:3E:F6:3D:E3:11:23:83:04:56:6C:65:99:80:60:E1:C8:67:FE:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5CC21D0F43311EF8B94856D762E951A.roa
Signing time: Wed 26 Feb 2025 11:20:13 +0000
ROA not before: Wed 26 Feb 2025 11:20:10 +0000
ROA not after: Thu 19 Feb 2026 11:20:10 +0000
asID: 328608
IP address blocks: 45.205.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78264 (0x131b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:20:10 2025 GMT
Not After : Feb 19 11:20:10 2026 GMT
Subject: CN=67bef8ed-0427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:ce:de:29:fc:c3:09:f4:38:ae:18:c4:73:
9f:4b:43:40:76:a9:9c:ce:d8:36:e6:2f:f8:30:74:
99:73:99:53:98:79:ba:fe:90:2b:7e:8a:21:fb:34:
12:1d:6d:99:bf:b2:75:7d:be:5b:63:31:48:3e:eb:
c1:b0:f9:84:1c:db:71:87:f0:bb:96:64:20:59:29:
fe:e1:06:2c:62:74:70:0b:ed:36:56:67:74:32:6b:
1e:05:80:33:d0:18:4c:17:f2:83:ba:a8:22:94:05:
cc:10:c9:11:ed:48:6c:f8:e7:f2:57:62:84:76:04:
6d:b2:d4:cd:3a:29:6b:47:b8:95:56:1c:c5:d5:a3:
6d:36:4d:dc:96:00:fc:51:a7:01:75:28:2d:bc:2b:
6f:a2:e7:a1:28:8a:c0:82:c0:ac:6f:c4:18:0f:eb:
a1:94:01:5d:72:28:09:db:a8:54:a2:8c:ca:19:e6:
a8:83:d7:88:c5:19:7f:6f:29:be:2b:b5:15:80:38:
66:2d:04:01:e5:6d:1e:47:f0:90:fd:fc:69:b7:c6:
81:c3:d8:e7:26:9b:38:5a:66:8f:3d:7f:64:94:c3:
e5:6c:8c:e9:3b:c0:28:50:96:5c:1c:5b:ae:5d:9c:
35:3b:42:d8:ce:2c:47:8b:8b:06:36:4d:aa:2f:0c:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3E:F6:3D:E3:11:23:83:04:56:6C:65:99:80:60:E1:C8:67:FE:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5CC21D0F43311EF8B94856D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.141.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f2:c8:61:03:c4:46:28:c5:3a:31:01:ad:da:ab:53:3e:be:
31:42:d0:ce:8a:64:03:d4:f5:32:4b:2a:d4:ae:2e:74:72:33:
98:88:ae:77:59:e4:07:0e:c0:53:01:8a:d8:b1:f0:bf:a4:dd:
1f:c7:97:91:42:ae:0f:ad:6b:47:b1:ed:c1:d2:3b:3e:eb:ee:
77:c6:37:b0:db:b9:c1:9c:7b:8c:2d:3b:a7:f6:99:86:15:36:
93:27:39:3a:f2:db:fb:cc:51:0b:cf:79:f6:ff:2c:3a:70:05:
6a:0a:4f:8b:93:6e:c2:55:73:5f:2d:75:5c:7a:9a:5e:18:a0:
61:47:56:65:98:6b:20:01:1b:ab:63:91:bb:9a:d0:ae:5c:0d:
cb:61:c7:72:f0:97:c2:99:8d:64:c5:27:fb:3b:a6:af:50:74:
3a:a4:14:a7:6d:c7:15:ae:d6:28:16:9d:15:17:4e:38:12:4b:
4e:52:64:69:30:22:13:f6:46:ac:bf:04:2e:3e:87:83:d7:33:
1a:f8:57:55:ed:0e:ff:df:95:25:fd:73:de:6d:d6:54:93:06:
b7:94:9b:a4:94:9e:85:8e:f7:73:06:b2:36:f5:84:0e:cf:ee:
34:06:b3:e6:c4:1b:d5:32:e9:52:43:0c:03:7a:13:81:fc:a8:
f9:6c:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:14 2025 by rpki-client