Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE0B560A00BE11F0984FF8BC762E951A.roa
File: DE0B560A00BE11F0984FF8BC762E951A.roa (raw, json)
Hash identifier: JTVC2KmNqqz6P8y6Hu0HGQC1T8jyBHHSU3LyB9MZpSQ=
Subject key identifier: E5:B6:47:55:AD:BA:22:A3:4E:6D:D6:85:4B:A8:5C:6F:87:BF:73:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE0B560A00BE11F0984FF8BC762E951A.roa
Signing time: Fri 14 Mar 2025 10:27:02 +0000
ROA not before: Fri 14 Mar 2025 10:26:58 +0000
ROA not after: Tue 22 Apr 2025 10:26:58 +0000
asID: 137899
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83428 (0x145e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 10:26:58 2025 GMT
Not After : Apr 22 10:26:58 2025 GMT
Subject: CN=67d40476-25a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:18:b3:3d:f6:46:15:98:3b:12:48:0f:01:
e7:24:76:43:19:0f:c1:7a:74:fd:8e:f9:f5:14:e9:
e0:6d:97:0a:2f:e8:61:9c:3c:0e:2a:35:42:be:b2:
ce:24:f6:75:02:f1:5f:7b:86:9c:22:e3:01:03:07:
31:fc:78:dd:53:22:3b:5d:4f:83:bf:be:71:1b:21:
fd:cf:b2:bd:5e:f2:f9:a9:78:94:e4:2b:79:9c:ff:
e3:fd:1b:2c:7b:11:91:07:34:a2:75:ad:79:fd:75:
e6:12:4a:51:54:9b:1d:3d:a3:c4:d9:11:11:ae:61:
e2:4f:b0:d2:2e:2f:a1:10:8d:43:92:fb:fc:54:a9:
5c:6a:0a:cb:92:93:e0:67:86:57:f9:f8:03:03:9b:
ee:cb:cf:96:4f:f4:a9:fc:5b:68:c0:a4:68:03:3a:
d6:4c:04:a6:03:dc:01:2a:f0:95:86:a2:d0:e0:09:
d7:4c:a1:ff:1f:1e:a2:f2:fe:07:a7:61:ad:f5:6e:
2b:1c:d3:aa:d6:69:94:8a:31:03:36:a8:f8:4d:45:
40:57:e7:10:92:d9:5f:6c:aa:1b:ad:94:46:7c:b3:
2c:9b:12:f1:db:c8:8f:6e:be:e1:53:23:d2:74:25:
ea:5e:b3:99:2e:cc:85:9f:37:5b:dd:55:3f:d6:78:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B6:47:55:AD:BA:22:A3:4E:6D:D6:85:4B:A8:5C:6F:87:BF:73:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE0B560A00BE11F0984FF8BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
43:7b:7a:08:7a:7e:26:9e:a8:44:73:75:6e:81:b9:31:9b:ef:
ff:d5:6e:28:e3:fb:07:9d:85:7f:53:08:82:0a:d5:d4:27:92:
6a:ff:70:52:53:65:ad:b0:85:cf:49:c3:ed:c4:4a:14:c8:a2:
2b:b8:be:09:91:ce:d1:f2:a6:66:85:b2:34:f9:2b:66:71:0f:
0e:36:e2:4c:34:95:6d:b8:6e:3a:2c:0f:ad:3e:4d:45:c1:9c:
e0:57:92:f1:0b:93:39:f8:c6:0e:a7:17:e6:0d:2a:09:73:9d:
b6:b1:86:7c:e6:a6:c1:76:aa:83:53:bd:ab:0e:3f:3e:7d:6f:
4b:23:0d:26:47:fe:95:52:05:04:0a:f1:76:13:93:c4:1a:31:
03:3f:8b:7d:c7:4d:f1:2a:70:4d:38:b6:72:89:e6:e6:c6:84:
1d:e9:61:93:59:25:18:cf:a8:0b:f4:98:92:31:7c:02:22:b4:
69:73:41:d3:ef:57:68:1a:a0:6a:4b:20:50:7e:b7:0c:52:21:
3f:f6:3e:90:41:29:67:f8:d7:2d:48:61:11:ef:db:67:cb:8b:
c0:07:a4:ec:45:13:4b:ff:de:72:50:59:36:5a:9e:c4:cb:3a:
03:f2:42:a2:9a:52:4c:78:98:5b:b2:c0:94:14:c8:9f:82:05:
ad:07:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:29 2025 by rpki-client