Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7F0B6D603DF11F089F70256762E951A.roa
File: F7F0B6D603DF11F089F70256762E951A.roa (raw, json)
Hash identifier: Y77YzVK8qkZW9Yal9Er+zw+cJhfUZnLTbID62H0BM0M=
Subject key identifier: BD:BE:D1:47:AC:DE:59:A1:C9:D7:21:FC:5A:7A:5B:1B:12:E3:A0:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014697
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7F0B6D603DF11F089F70256762E951A.roa
Signing time: Tue 18 Mar 2025 10:01:32 +0000
ROA not before: Tue 18 Mar 2025 10:01:28 +0000
ROA not after: Fri 25 Apr 2025 10:01:28 +0000
asID: 7018
IP address blocks: 45.202.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83607 (0x14697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 10:01:28 2025 GMT
Not After : Apr 25 10:01:28 2025 GMT
Subject: CN=67d9447c-9cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:5e:d8:7f:e0:7b:98:81:c6:62:3c:bd:77:
9a:c6:58:1c:f2:10:b9:c3:a7:1f:a8:24:78:b0:06:
f3:8c:9b:a6:47:ec:50:64:63:89:1f:cc:5c:68:2e:
d2:ed:1c:8a:26:82:48:95:e7:7d:a6:53:da:1b:0a:
2c:dc:04:4f:08:97:0c:34:0a:ff:7a:5a:89:b3:f2:
d3:84:4e:7e:0d:96:24:5b:4e:f9:9f:91:d6:fa:af:
22:e8:d0:a2:c2:73:a4:9c:71:9a:2d:84:6e:e5:29:
0f:2e:2e:d9:ef:31:77:4a:0e:08:a9:86:79:78:af:
50:89:29:07:a2:87:7f:3e:05:6e:bd:0e:aa:90:4a:
67:d4:00:cc:f5:a0:51:b5:5f:c3:55:67:d1:3c:14:
77:6c:31:4a:c5:38:29:fb:9d:a6:ae:fa:6b:65:8c:
5d:c5:ed:14:34:d6:43:b8:fa:bf:32:da:4a:36:40:
f9:9c:82:87:78:5c:bd:41:de:fc:46:e9:21:27:d2:
4c:da:4c:95:16:a0:c2:ac:cd:15:bb:3f:4a:3f:be:
5c:f9:b9:1f:c9:9c:86:1d:51:ea:e9:9d:97:9c:b8:
df:fe:e8:fd:a6:f6:e9:83:e2:42:c6:68:2b:ac:81:
22:ff:cc:24:c2:2a:98:4a:8a:8c:04:ce:c4:c9:c7:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BE:D1:47:AC:DE:59:A1:C9:D7:21:FC:5A:7A:5B:1B:12:E3:A0:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7F0B6D603DF11F089F70256762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:13:e0:65:66:8b:f8:95:b1:f8:3f:76:fe:70:0e:ec:d1:13:
44:b9:5c:48:4f:88:de:d5:91:56:08:a0:fa:40:99:9a:0d:32:
2b:6c:5d:ff:30:b2:19:9a:ac:e6:e8:4a:0b:8b:5b:19:b1:8d:
23:e6:fb:8d:70:3c:4f:a1:f0:0d:6c:7e:6a:54:24:a2:b8:36:
1c:fc:c9:cd:29:1f:17:2e:24:5d:24:80:ba:59:1b:59:32:cd:
26:62:a2:54:00:ee:81:3b:28:83:24:8e:99:d2:cf:47:ae:a8:
7f:c9:73:58:dd:f7:c9:e1:5d:75:3b:31:a6:d2:af:26:b4:94:
fe:2b:86:bf:2a:05:68:cf:72:12:0a:9a:41:ad:d2:24:0a:22:
93:be:51:65:67:64:b8:ae:44:58:ab:72:8f:3e:33:0b:f8:69:
27:70:e6:cb:34:2b:b7:d6:ce:37:a3:dc:d0:22:95:5d:e5:3f:
59:2f:98:1a:f4:9f:e6:17:a0:6d:2e:3b:a6:d8:45:56:8b:73:
ae:7e:ba:49:a9:48:2f:4b:30:08:05:a2:9e:26:95:79:97:3a:
a0:e0:2d:e1:77:01:95:c8:7f:3a:55:fb:36:a2:bf:b7:ed:12:
5d:e6:05:7e:9b:97:3b:72:39:e4:62:40:b7:63:ee:de:d3:36:
44:c2:94:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:04 2025 by rpki-client