Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2656970F47B11EFAB07F968762E951A.roa
File: D2656970F47B11EFAB07F968762E951A.roa (raw, json)
Hash identifier: CAKw0QTEFrDrzP2xUU8E+6mh5slbnV0OdjDLDMgxDps=
Subject key identifier: 16:21:F9:93:26:33:E8:E1:F3:BF:67:6D:00:1D:20:2A:35:F1:A9:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013749
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2656970F47B11EFAB07F968762E951A.roa
Signing time: Wed 26 Feb 2025 19:56:52 +0000
ROA not before: Wed 26 Feb 2025 19:56:48 +0000
ROA not after: Thu 19 Feb 2026 19:56:48 +0000
asID: 984
IP address blocks: 45.201.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79689 (0x13749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:56:48 2025 GMT
Not After : Feb 19 19:56:48 2026 GMT
Subject: CN=67bf7204-849f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:fe:45:8b:8d:7a:f8:d9:bb:36:6a:0c:a1:
d0:a1:3e:d4:17:00:83:12:ad:04:5c:ff:34:d6:18:
cf:a0:5c:ed:10:64:ee:8d:e7:d7:99:b0:fe:b8:6b:
03:2e:04:41:50:94:4f:5f:0c:12:4a:04:c2:c7:11:
ef:8a:00:e9:c7:dd:0a:76:5c:09:58:56:7f:ea:c3:
ee:cd:ce:69:b6:25:c5:86:34:48:63:8f:36:ad:f3:
56:c7:a9:3a:e4:c5:ff:05:52:4e:31:c7:14:d2:7c:
c9:43:b4:85:19:65:4c:f4:96:25:b5:c0:23:20:12:
4e:81:45:01:66:9e:c3:c6:5f:39:10:2d:1f:61:ab:
9f:c4:65:04:f3:ab:f9:20:0f:cd:49:56:31:6f:d7:
64:e9:52:e4:62:d9:e9:56:9f:18:84:c4:e5:dd:b8:
5e:38:f1:cb:a2:ba:c5:dd:06:77:88:2e:55:03:40:
0a:4b:62:67:4d:82:35:a3:02:59:03:ef:2d:01:66:
e3:15:44:47:26:34:9d:bf:18:9b:dd:93:2d:7d:71:
9b:31:26:f2:94:1e:43:11:a9:25:62:cc:7d:06:c2:
ff:52:c4:96:65:8b:a9:be:c1:a4:87:7d:11:de:87:
ff:5c:33:2d:43:47:95:3d:61:15:80:2d:b0:1c:74:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:21:F9:93:26:33:E8:E1:F3:BF:67:6D:00:1D:20:2A:35:F1:A9:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2656970F47B11EFAB07F968762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.108.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f0:79:5d:93:b3:a7:9d:c9:2e:4c:92:2f:58:2b:fb:2d:8b:
d5:91:19:c6:d8:2a:38:93:f7:e7:88:f4:43:1c:e8:cb:68:0c:
ee:da:fd:cc:a5:be:75:73:e3:e5:a2:78:82:8c:ed:92:1a:89:
62:2d:e1:57:c2:81:fa:a9:19:85:b6:da:2f:07:fe:3f:90:2e:
76:2d:b1:a6:eb:37:2b:92:8f:a3:24:58:7a:d5:61:67:ad:b4:
16:b4:69:98:c8:8c:c8:12:d0:18:0c:d7:27:76:e5:ee:01:c6:
72:21:2e:6f:6a:d7:9d:47:ec:32:dc:91:e0:78:ad:51:a4:e8:
1e:ae:41:3a:52:d3:72:8a:8c:31:d1:18:21:fd:b1:43:8e:71:
95:eb:1a:79:8d:29:57:fc:df:73:e2:0c:af:4e:66:7c:c9:9e:
e3:77:ba:13:5e:44:70:f8:05:42:47:e5:dd:aa:fb:e0:dc:2f:
f9:11:ef:8a:b9:46:cf:9a:ac:d7:b1:70:c6:90:dd:db:a1:4f:
53:5f:44:d3:73:6d:b9:7e:33:9e:91:a6:fd:62:81:db:5d:72:
24:be:26:0d:88:59:e9:6f:2e:6b:60:da:2c:40:74:2f:65:da:
a9:80:5d:d6:da:77:bc:a9:c7:06:4d:8a:bd:16:2b:4d:e0:c5:
b9:b4:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:04 2025 by rpki-client