Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B00E65260A2811F0B4137A4B762E951A.roa
File: B00E65260A2811F0B4137A4B762E951A.roa (raw, json)
Hash identifier: vxWQb5yagffwrmZX21iYwmHISmUsE0B2ALQcUF0YW6o=
Subject key identifier: 21:07:9C:F3:63:81:97:65:5B:77:66:54:0E:CE:39:3D:89:B2:26:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014858
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B00E65260A2811F0B4137A4B762E951A.roa
Signing time: Wed 26 Mar 2025 09:57:12 +0000
ROA not before: Wed 26 Mar 2025 09:57:08 +0000
ROA not after: Fri 09 May 2025 09:57:08 +0000
asID: 205125
IP address blocks: 45.194.2.0/24 maxlen: 24
45.194.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84056 (0x14858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 26 09:57:08 2025 GMT
Not After : May 9 09:57:08 2025 GMT
Subject: CN=67e3cf78-e7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:21:48:8a:fb:d8:cd:c2:df:b4:7d:d1:70:
6d:08:9f:df:5a:e4:e3:53:11:03:15:fc:1e:ba:ea:
45:58:2b:8b:9c:0e:2e:39:3c:94:c2:a2:93:39:21:
10:fb:4e:4c:58:64:e4:81:2a:14:7d:07:1c:57:58:
41:f1:18:e0:5e:c8:6b:dc:d3:40:a8:dd:26:47:ae:
fb:12:9a:e1:01:89:9f:35:c8:31:07:b5:e4:46:3a:
4a:70:6a:51:09:db:23:ab:c4:32:6e:4c:2a:d1:33:
cc:72:44:88:68:38:8f:70:03:f0:64:52:96:db:35:
54:33:22:9a:6d:78:6f:4a:56:49:c5:53:95:3f:81:
64:cc:9c:84:95:ca:b8:60:ff:9a:6c:77:5f:7e:ec:
54:88:72:67:ca:61:ce:3b:22:fa:eb:ef:a5:dc:ed:
11:c6:f0:09:a1:de:9e:d4:a9:88:a4:d0:21:91:f6:
a4:2c:e1:ab:5a:cb:95:92:64:2d:31:4f:0c:dd:41:
55:c1:f5:04:75:f8:c8:31:ed:80:6c:97:53:0c:3f:
43:3d:b7:96:b6:a0:cb:15:17:6c:18:75:3e:56:40:
20:2f:0e:17:09:7c:7d:f4:da:08:25:50:03:45:9f:
4c:1c:e9:da:77:08:39:03:f5:06:03:48:cb:cb:20:
01:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:07:9C:F3:63:81:97:65:5B:77:66:54:0E:CE:39:3D:89:B2:26:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B00E65260A2811F0B4137A4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.2.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:fd:7a:48:f3:51:45:87:b1:43:87:d6:52:3a:c7:49:60:39:
8d:b1:24:bb:b7:b2:b1:85:71:4b:5b:3a:2b:4f:47:97:aa:a9:
39:56:8c:36:18:73:ba:e5:70:1d:66:83:e8:59:46:b8:02:dc:
0b:26:d6:0e:cb:6e:5a:27:63:b0:25:8a:dd:db:14:a5:48:32:
ee:e0:c9:2a:11:a2:bb:ca:1e:64:f9:00:40:19:ae:7c:68:44:
38:2f:11:70:58:49:f7:ae:c7:5b:ac:dd:19:e3:6d:11:db:fc:
0d:9f:92:8c:c1:44:2a:d1:7c:fa:c7:7c:64:83:6e:01:6a:24:
7a:1f:ff:99:dc:d8:89:05:4f:ee:53:6e:d1:83:78:54:33:64:
0c:50:fc:80:1e:81:79:22:1f:6a:60:f4:af:5d:a4:63:42:b7:
0a:b5:a0:ff:06:b8:4d:ef:93:e2:c1:37:c3:87:15:0f:8c:65:
a7:94:c1:c8:7a:07:01:23:2e:98:e5:64:c8:c8:11:97:77:8a:
91:ff:3c:2b:4b:86:bd:db:a7:b7:1d:69:33:3d:1d:9b:6d:07:
7d:50:aa:29:70:49:dc:e5:8d:33:88:4a:5b:52:b4:33:c1:e9:
9d:df:b7:ca:52:11:a4:4a:cf:6a:f3:df:8a:e9:f8:b5:fa:8a:
50:ab:38:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:28 2025 by rpki-client