Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7FD80F6F47A11EFBC3BF15F762E951A.roa
File: A7FD80F6F47A11EFBC3BF15F762E951A.roa (raw, json)
Hash identifier: JBda0wX0qkPI3GH2IV4IgSOCNQ20C0RXwiAMWVB9hlA=
Subject key identifier: 1C:04:42:6A:84:32:91:C1:92:0B:74:5B:71:C0:33:8D:4B:A8:91:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013737
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7FD80F6F47A11EFBC3BF15F762E951A.roa
Signing time: Wed 26 Feb 2025 19:48:31 +0000
ROA not before: Wed 26 Feb 2025 19:48:28 +0000
ROA not after: Thu 19 Feb 2026 19:48:28 +0000
asID: 984
IP address blocks: 45.201.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79671 (0x13737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:48:28 2025 GMT
Not After : Feb 19 19:48:28 2026 GMT
Subject: CN=67bf700f-e966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:79:94:08:73:94:40:e0:4b:68:78:8a:41:ef:
b2:12:aa:84:10:2d:2d:83:28:87:c1:e5:73:74:e9:
de:5b:c4:d9:30:96:b4:31:b7:23:25:f1:24:3c:97:
4b:02:ff:3a:e3:15:f7:53:2b:a0:1e:1a:56:0f:99:
a1:fa:b2:11:70:d6:8f:2d:72:c6:4d:79:b3:20:41:
91:51:29:3c:19:7e:31:ac:41:52:e9:6f:47:94:25:
57:7d:30:b6:5f:7f:88:27:00:e3:38:08:26:f3:dd:
0d:56:9f:26:7e:90:e5:22:ed:3b:c8:92:3d:fc:83:
a5:d6:1b:08:1d:2e:c3:19:0e:6a:ea:ff:1d:37:de:
1c:b5:f7:27:04:ff:82:9c:8e:c2:ba:49:b2:65:f1:
a7:58:e1:1b:34:f1:3c:0d:54:7e:15:3c:6a:84:5e:
35:c2:f3:99:3a:69:32:d4:b0:4c:51:60:19:2a:24:
ad:26:88:b9:7e:1d:93:21:23:ec:6f:d4:f4:cc:b5:
65:cc:bd:9f:b3:f8:86:e9:a1:8b:14:4d:ef:c1:4f:
6c:e0:e4:80:fb:f9:fb:2e:e2:bc:b0:c5:f9:17:83:
f7:86:e7:d2:da:77:b4:a5:2b:a8:c4:c7:f9:b7:e4:
b1:5a:ea:33:cf:0b:8c:b9:7e:3a:33:10:bb:56:ef:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:42:6A:84:32:91:C1:92:0B:74:5B:71:C0:33:8D:4B:A8:91:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7FD80F6F47A11EFBC3BF15F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.105.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d1:6f:49:7d:ed:64:cb:f3:7e:99:b6:86:01:6d:82:0f:37:
89:83:53:ea:1e:51:cf:9c:0d:58:8d:88:bd:56:80:13:3e:5f:
2e:a8:a8:99:36:8f:dc:ae:b8:49:ed:a2:23:18:eb:a2:88:0d:
37:ca:07:aa:c2:92:bb:6f:a9:84:b7:d5:21:ee:83:63:9a:ac:
20:9d:23:d1:66:9f:db:32:56:49:76:13:5b:99:e7:55:f9:29:
d1:89:51:c6:27:74:e2:f8:bc:68:81:fe:85:ba:16:2a:eb:a4:
24:20:4e:68:10:d1:0e:e6:5f:d3:00:82:10:4e:46:fe:ee:81:
95:c3:5b:b3:df:dd:b0:f1:c5:f7:f2:5a:02:8f:e0:56:8e:01:
5d:32:fe:06:61:d8:aa:c8:a0:28:be:de:db:91:b5:e6:0a:9d:
fe:3a:00:a2:80:ce:87:51:2b:34:a4:d2:b8:2e:d3:cc:5f:2d:
16:ab:ac:59:17:db:6d:44:e4:69:b7:99:56:d2:56:e2:0b:88:
ad:22:aa:e1:c4:18:a6:bf:27:5e:3d:2a:5e:66:55:45:43:89:
b6:60:88:30:49:11:19:23:77:87:5f:78:77:78:68:05:7c:71:
75:4c:af:c9:4a:1e:f5:81:1f:16:1c:d8:64:0c:32:1c:77:28:
a7:8b:bc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:43 2025 by rpki-client