Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/481EDCFA071911F0AB733E97762E951A.roa
File: 481EDCFA071911F0AB733E97762E951A.roa (raw, json)
Hash identifier: /INrnvCuwE2CoqdHYu60QMv/OL2nOsZcCR6IvpGespY=
Subject key identifier: 70:3B:CB:EA:21:B1:DC:75:F8:11:CD:00:60:57:A3:C3:9B:20:66:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/481EDCFA071911F0AB733E97762E951A.roa
Signing time: Sat 22 Mar 2025 12:29:21 +0000
ROA not before: Sat 22 Mar 2025 12:29:17 +0000
ROA not after: Wed 02 Apr 2025 12:29:17 +0000
asID: 138590
IP address blocks: 45.194.14.0/24 maxlen: 24
45.194.15.0/24 maxlen: 24
45.194.25.0/24 maxlen: 24
45.194.26.0/24 maxlen: 24
45.194.80.0/24 maxlen: 24
45.194.81.0/24 maxlen: 24
45.194.88.0/24 maxlen: 24
45.194.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83873 (0x147a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 22 12:29:17 2025 GMT
Not After : Apr 2 12:29:17 2025 GMT
Subject: CN=67dead21-74a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:92:c2:67:fc:00:cc:ad:2e:4d:24:5d:26:
a4:7a:9d:10:9b:6b:d1:3c:c0:09:c5:b5:ca:0b:25:
4e:23:df:f5:a4:78:5c:d5:77:77:7a:7d:3d:6e:ea:
42:6c:76:87:97:bc:f4:9a:6a:9f:6c:f2:eb:39:5f:
e6:55:62:d0:5e:51:8c:47:90:de:17:b5:4d:65:86:
61:f6:77:87:f0:e8:c5:53:b7:61:10:31:e7:f5:b4:
f2:0b:eb:62:39:1f:df:10:51:96:03:3d:25:bb:f5:
31:d9:61:3b:29:cd:23:cd:e5:e0:3d:cd:99:6c:38:
0b:80:d6:cb:ad:f2:1d:e6:c0:92:7f:94:11:0a:5b:
14:e8:a2:ee:db:8e:ab:cf:86:3a:0d:db:33:9c:dc:
87:c0:84:8f:bb:ce:b0:53:04:cc:6d:d2:76:9a:de:
63:10:be:4d:74:bb:04:39:fd:1f:63:b0:16:f2:8c:
b3:57:43:c7:ab:d6:49:bf:7c:49:59:cf:9a:b5:84:
91:53:81:5a:43:86:32:70:fc:7d:c7:b1:71:cc:2a:
68:40:91:fd:f1:2c:04:c9:da:70:ac:ae:e7:c5:49:
b1:cf:b3:6b:f6:30:a5:53:f4:8b:f8:87:43:cd:c3:
ad:46:a9:de:bc:c2:10:fd:8e:1b:44:9e:66:5c:c4:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3B:CB:EA:21:B1:DC:75:F8:11:CD:00:60:57:A3:C3:9B:20:66:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/481EDCFA071911F0AB733E97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.14.0/23
45.194.25.0-45.194.26.255
45.194.80.0/23
45.194.88.0/23
Signature Algorithm: sha256WithRSAEncryption
82:10:65:fc:51:52:3b:5b:54:32:08:70:0b:72:6d:77:b4:07:
d3:a7:15:07:73:4c:6e:dc:d0:a1:47:81:bf:ae:62:da:65:83:
39:8f:9b:33:d1:71:74:76:24:15:f6:6b:45:bb:ed:0f:3e:a8:
dc:01:ea:95:1a:9b:f3:1c:39:e6:8a:d1:fc:6c:f5:92:33:50:
19:5e:25:1f:a2:7f:4a:02:99:c5:4c:5a:9b:ae:a1:9a:fa:6b:
c6:ac:51:6d:2a:95:66:ea:9b:e6:6b:ef:52:fc:63:6a:2e:97:
61:c4:ef:ff:ba:9b:4e:7d:a5:99:90:54:68:d8:3e:b2:61:8f:
67:85:d6:ea:a8:9f:50:3f:20:b6:61:c9:70:97:50:9e:7c:3a:
c6:31:3e:d0:2a:0e:90:f7:77:e2:e1:8a:65:ab:dd:f9:fb:dd:
97:d3:7b:e2:59:f2:5b:ed:6c:43:81:de:7d:14:5a:fe:dc:ad:
c7:61:88:33:40:5b:a0:dd:11:ee:14:c5:c2:f8:03:db:5e:97:
9e:07:3a:98:c6:15:87:0e:cc:10:f3:16:32:76:29:0d:ae:e3:
44:32:63:36:bf:61:bb:7f:78:1a:cf:3b:98:4f:da:9d:8f:3f:
67:44:3d:1c:f7:01:6d:30:29:3a:e6:ae:eb:27:2d:d9:6e:18:
25:68:7e:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:14:14 2025 by rpki-client