Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFEA05FCF46A11EF85C34970762E951A.roa
File: EFEA05FCF46A11EF85C34970762E951A.roa (raw, json)
Hash identifier: /1pjqSvupFScCs/oHQSTuevXb6ldDjl5oxYJvpz9AuE=
Subject key identifier: A3:F9:A6:EA:A0:92:0E:D9:8F:3B:38:36:27:9F:66:E2:ED:03:FB:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFEA05FCF46A11EF85C34970762E951A.roa
Signing time: Wed 26 Feb 2025 17:56:00 +0000
ROA not before: Wed 26 Feb 2025 17:55:56 +0000
ROA not after: Thu 19 Feb 2026 17:55:56 +0000
asID: 984
IP address blocks: 45.201.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79355 (0x135fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:55:56 2025 GMT
Not After : Feb 19 17:55:56 2026 GMT
Subject: CN=67bf55b0-db4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:c1:87:12:45:55:8e:46:76:b0:53:07:fd:
dc:19:48:cc:23:27:ae:20:19:5e:b9:f0:b9:33:77:
64:a5:e1:67:3c:93:c2:b2:46:03:94:79:a4:a2:1e:
cc:55:fc:15:87:fc:87:4b:b0:d7:ca:c9:14:75:50:
f0:25:1d:40:3f:79:ee:6c:30:ee:1d:ec:cd:f1:53:
5d:c9:a3:cd:11:62:99:db:4c:e4:18:70:32:5b:89:
a4:8b:c9:20:c5:05:f7:93:9c:94:bb:e2:03:f9:4e:
bf:99:d2:53:f4:98:f9:5f:9a:f8:eb:cc:6c:a6:c8:
d6:56:15:a7:da:e0:2b:d2:3c:6b:c5:08:9e:7f:a5:
24:4a:90:3f:a3:ed:6d:1f:58:4f:d3:4b:81:ba:e6:
97:4e:bf:3a:3c:b8:cd:be:92:fe:db:6c:a3:ac:e5:
73:2c:7a:00:f0:e5:89:2b:c2:df:ad:1d:38:45:a1:
02:ae:6f:95:be:8f:a7:ab:cd:b8:53:46:d5:df:a1:
7f:fb:e9:64:9f:03:2c:fe:04:01:cb:ee:4b:23:87:
ef:25:df:73:0d:a4:0a:5f:b3:ce:63:dd:37:3a:ab:
23:93:f3:76:c4:1b:71:fd:da:f8:09:90:89:d4:95:
14:2d:31:5f:71:b9:a1:3d:b1:db:33:b1:09:b2:9d:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F9:A6:EA:A0:92:0E:D9:8F:3B:38:36:27:9F:66:E2:ED:03:FB:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFEA05FCF46A11EF85C34970762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.56.0/24
Signature Algorithm: sha256WithRSAEncryption
02:39:8b:cc:d6:66:07:53:a2:51:74:55:fc:ad:21:87:7b:34:
20:0e:4a:30:72:63:95:7e:9b:34:ca:8c:8b:d9:5c:e0:6f:e5:
06:fd:2c:7a:8c:95:11:4e:4a:8d:f1:8d:f6:be:72:05:d4:6d:
49:79:c9:79:7b:d6:5d:95:bb:5b:92:c4:a7:57:cb:89:10:79:
08:66:01:42:7c:41:b0:64:5d:b6:6f:d7:18:06:27:bc:01:5d:
65:ff:ee:ae:da:9b:a1:b7:12:16:f5:58:9a:08:54:4a:d6:b8:
cb:d3:91:7f:34:b7:2c:9a:76:1f:21:26:a8:93:4e:f2:ae:6b:
1d:d8:8e:0a:4b:d6:27:ba:f9:c4:84:c7:6c:03:b9:e4:c7:ab:
1a:c0:c3:b9:3c:f4:e8:b5:1e:3c:76:0c:54:f2:27:d6:90:90:
57:48:92:8a:6d:37:bb:3a:fe:9d:d0:4e:8e:a1:6c:33:c0:38:
43:d5:ad:f1:cd:eb:b2:78:27:7c:45:eb:b1:36:c8:60:25:03:
38:e5:42:5f:2a:c2:26:05:24:b4:85:27:c8:78:49:92:a5:85:
60:19:8b:f4:07:2b:b9:00:38:9f:11:44:15:f5:d2:67:07:f6:
be:25:a4:8e:3b:d1:0c:c1:51:ac:ba:eb:58:23:87:2a:c9:13:
38:c9:93:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:47 2025 by rpki-client