Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9FB364407AF11F08E1DDBB5762E951A.roa
File: A9FB364407AF11F08E1DDBB5762E951A.roa (raw, json)
Hash identifier: Dps5Ga3ROlT/2+OC7hXjJXMxYbJaZq1dpuh7i7hGCH8=
Subject key identifier: 95:13:79:BC:F3:35:D2:EF:B7:03:21:95:60:97:1A:61:E3:B3:11:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9FB364407AF11F08E1DDBB5762E951A.roa
Signing time: Sun 23 Mar 2025 06:25:50 +0000
ROA not before: Sun 23 Mar 2025 06:25:46 +0000
ROA not after: Tue 08 Apr 2025 06:25:46 +0000
asID: 5065
IP address blocks: 45.204.76.0/24 maxlen: 24
45.204.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83892 (0x147b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 23 06:25:46 2025 GMT
Not After : Apr 8 06:25:46 2025 GMT
Subject: CN=67dfa96e-c307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c8:35:50:3f:a3:f1:12:20:2f:93:b2:1c:66:
06:12:47:a4:95:e6:e0:24:8a:af:28:fc:5e:9b:2f:
e5:f7:5c:d3:f4:46:03:3d:8f:36:2b:66:23:4a:6c:
2d:fa:9a:85:a2:20:e1:a6:7a:9e:00:50:c2:18:ba:
3e:e4:db:67:f4:d1:39:cc:ec:a1:c5:a1:35:8d:a4:
6e:33:52:27:4e:3d:6f:c3:3b:1c:ac:3e:b2:db:a1:
f9:26:10:fc:f5:ac:d8:1c:06:ce:31:65:ab:46:20:
c6:cf:ea:d4:4e:eb:07:e5:97:60:db:ba:25:8e:2a:
00:07:98:92:bf:88:05:ef:8f:e2:60:2b:0c:dc:3e:
14:ee:ac:f1:84:d8:7f:25:a1:f0:97:e1:8d:f2:ad:
cc:2f:aa:12:5f:13:03:ba:a3:98:65:e6:ae:e2:90:
e2:00:4d:8d:78:1d:f5:ab:11:a1:70:7a:95:da:b7:
fa:f0:3b:8f:d8:3a:d9:0a:7b:d2:c1:33:46:a0:80:
4c:ad:cf:5a:ae:5f:ec:5b:a9:51:b4:d7:7a:0d:d9:
ed:af:5f:9a:e2:9a:09:12:04:09:2c:8b:48:62:09:
23:2a:65:92:84:81:1d:15:ef:a7:a1:2b:66:9c:68:
2e:9c:07:5b:59:44:93:f9:c2:b0:96:e1:a3:84:3b:
07:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:13:79:BC:F3:35:D2:EF:B7:03:21:95:60:97:1A:61:E3:B3:11:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9FB364407AF11F08E1DDBB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.76.0/24
45.204.79.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:44:13:cb:22:2a:d6:ff:d4:7b:c9:13:0c:a8:88:fb:d3:c0:
03:53:ac:c8:22:ea:ef:26:c4:90:c8:70:1f:7b:30:25:19:4b:
53:b8:dd:10:c9:b4:aa:1e:d5:72:a4:be:d2:1a:d1:bf:13:4c:
fb:a7:1b:b2:a5:ae:7c:73:25:e4:cf:f3:b7:c9:1f:2b:af:f1:
55:be:63:7b:ef:4b:68:ff:19:5d:9e:ee:33:55:b4:94:39:3b:
0a:96:00:59:ad:00:93:19:d3:2f:f5:38:d9:04:8b:e9:ba:09:
72:fe:90:d8:55:17:33:6d:e9:ff:0c:0a:d8:85:3f:5e:f9:e9:
2f:7d:d2:82:db:a5:30:b3:b7:f1:a9:25:28:1e:5a:c5:6a:a0:
e0:a3:a4:a9:d3:21:ea:cb:ee:4e:24:de:2a:04:51:55:36:eb:
22:7d:0c:3d:c5:26:05:ba:aa:63:eb:bf:19:4d:af:4b:f7:48:
2c:0e:26:9d:2f:e9:f7:27:8e:71:76:20:36:a5:bd:07:e9:52:
09:d5:54:c2:67:a7:9f:d7:b1:5b:1d:8b:a1:32:c4:90:9d:80:
9a:c2:80:ae:87:e9:6a:56:84:64:21:32:8a:a3:1b:55:d2:5c:
a6:12:0f:30:4a:b6:7b:8a:67:22:61:d9:9e:50:0d:8d:87:03:
c6:23:7a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:31 2025 by rpki-client