Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D595E738FD8F11EFBD91428D762E951A.roa
File: D595E738FD8F11EFBD91428D762E951A.roa (raw, json)
Hash identifier: x+DGxjMizc9fLtz3q8hvO/z2F99So3MILS5+aj9rV+Q=
Subject key identifier: 00:7C:8A:F8:22:C8:09:B2:37:A3:74:DC:B3:5B:3E:D3:38:F4:1B:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01449E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D595E738FD8F11EFBD91428D762E951A.roa
Signing time: Mon 10 Mar 2025 09:12:48 +0000
ROA not before: Mon 10 Mar 2025 09:12:44 +0000
ROA not after: Thu 18 Sep 2025 09:12:44 +0000
asID: 42831
IP address blocks: 45.207.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83102 (0x1449e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 10 09:12:44 2025 GMT
Not After : Sep 18 09:12:44 2025 GMT
Subject: CN=67cead10-2e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:04:69:a9:1a:d7:12:29:24:25:27:e5:57:
8e:3c:e8:7e:52:cb:71:e2:4c:3b:47:04:2d:b2:8d:
4f:cc:02:dd:fa:bb:f9:fb:31:38:9c:2c:b6:5d:aa:
4b:d2:bf:75:44:90:e3:d3:7f:2e:1b:40:37:ab:97:
77:32:d0:4c:84:14:9f:a7:1b:6b:91:f3:2c:5d:c4:
4b:b2:b7:fa:e9:eb:a9:b2:b5:9b:21:95:ea:18:6d:
08:d4:db:ef:76:83:dc:4c:77:31:15:c5:08:01:7e:
34:08:7a:2c:a6:b9:ae:dc:66:34:73:36:7a:93:be:
2c:87:4a:f5:c0:65:b5:03:74:49:b7:3c:6e:97:4c:
54:bd:d1:a5:35:c6:1c:83:2d:76:76:e7:1d:c2:f9:
bd:be:ea:42:0e:e5:06:1f:dd:fb:7f:2b:95:ba:de:
48:17:f4:09:65:d5:b6:40:c4:a9:57:37:b9:ad:e1:
8e:7a:fb:3e:e7:b2:03:0d:46:88:57:3d:bf:50:7b:
0c:3c:59:35:48:63:d4:6e:6b:0e:4f:98:18:07:b9:
30:c9:02:50:a4:46:b0:d4:48:6c:fe:d7:a0:a2:e2:
c8:7f:e9:c6:85:53:2a:ce:bb:d7:81:b7:86:b1:6e:
c9:1d:25:8e:28:e1:aa:7e:32:ac:5e:82:a6:7f:a1:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7C:8A:F8:22:C8:09:B2:37:A3:74:DC:B3:5B:3E:D3:38:F4:1B:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D595E738FD8F11EFBD91428D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.20.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7f:06:c9:29:3e:c5:2d:58:50:9d:04:aa:ee:7b:b0:36:af:
5e:cd:0e:35:33:fa:ca:6a:47:18:23:6f:52:e6:e4:8f:70:60:
42:92:ed:de:72:cb:39:1b:49:15:93:0a:20:cd:57:c4:49:a6:
11:0f:84:fd:3c:2a:4b:c4:94:75:d9:59:d8:d3:fe:c8:1f:d3:
17:d9:df:f2:a8:d0:0f:3d:3a:ff:33:76:a5:b3:68:26:af:6b:
99:5c:16:0c:42:f0:b4:0a:46:33:71:e8:8f:5a:4e:10:05:6b:
54:57:d8:a3:68:d7:8f:03:f1:46:26:bc:6a:3f:59:80:ed:95:
0c:05:33:23:23:0e:4e:7a:bd:25:a7:85:d0:dc:dd:c2:b2:26:
82:a5:a8:e0:5e:cd:4e:a4:c2:ee:90:62:13:59:7d:da:ad:cf:
58:ca:c9:d2:e6:88:33:76:75:00:28:2d:f6:bc:c3:02:b7:ae:
36:f1:c6:bc:d5:23:27:97:8a:49:58:99:02:5e:f9:6b:26:9d:
65:56:a6:a6:8d:32:0f:8f:6b:b9:e6:6e:0a:10:95:c5:2d:bf:
6a:b3:3d:f4:be:83:9f:92:b3:8c:48:c0:da:eb:f5:46:1c:21:
8a:de:c9:d0:d5:08:af:ec:93:b5:f7:50:6a:d4:a8:93:95:12:
fa:77:6b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:27 2025 by rpki-client