Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0814D94C088211F0B3D541B7762E951A.roa
File: 0814D94C088211F0B3D541B7762E951A.roa (raw, json)
Hash identifier: FPQceOtCpfPsfQZRWfHVB3ucshFhqYR7apbOnGS+HUY=
Subject key identifier: B9:AB:1A:B1:2B:95:DD:FC:23:95:56:7A:53:10:74:B9:03:76:25:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0814D94C088211F0B3D541B7762E951A.roa
Signing time: Mon 24 Mar 2025 07:31:42 +0000
ROA not before: Mon 24 Mar 2025 07:31:38 +0000
ROA not after: Wed 30 Apr 2025 07:31:38 +0000
asID: 2914
IP address blocks: 45.196.69.0/24 maxlen: 24
45.196.82.0/24 maxlen: 24
45.196.83.0/24 maxlen: 24
45.196.84.0/24 maxlen: 24
45.196.85.0/24 maxlen: 24
45.196.86.0/24 maxlen: 24
45.196.87.0/24 maxlen: 24
45.196.88.0/24 maxlen: 24
45.196.89.0/24 maxlen: 24
45.196.90.0/24 maxlen: 24
45.196.91.0/24 maxlen: 24
45.196.92.0/24 maxlen: 24
45.196.93.0/24 maxlen: 24
45.196.94.0/24 maxlen: 24
45.196.95.0/24 maxlen: 24
45.196.96.0/24 maxlen: 24
45.196.97.0/24 maxlen: 24
45.196.98.0/24 maxlen: 24
45.196.99.0/24 maxlen: 24
45.196.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83911 (0x147c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 24 07:31:38 2025 GMT
Not After : Apr 30 07:31:38 2025 GMT
Subject: CN=67e10a5e-3391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:97:4a:d5:b8:a7:f7:21:3a:76:0b:61:50:39:
69:fd:d1:de:3e:fc:d2:c0:58:b9:20:f4:02:6b:0f:
7d:93:3b:cc:ca:ff:b1:a6:a4:8e:1f:20:53:aa:55:
5c:54:f1:24:6e:0b:3c:01:b6:01:0e:45:6c:c7:8c:
dc:31:69:80:ad:71:55:2c:32:cc:2d:20:9e:e3:07:
0c:0e:d9:06:a0:a4:44:95:0e:6e:4f:f6:12:c0:20:
03:76:ca:39:28:88:97:c7:96:83:5d:2d:02:08:c1:
13:f5:51:45:b1:30:77:1e:30:72:c3:26:d7:a3:63:
25:94:0b:99:05:55:7b:d5:86:b5:c9:1f:9a:e1:b7:
c8:d2:78:bf:2b:63:71:d2:bc:44:15:1c:f6:60:90:
36:92:7e:48:a3:f2:79:5b:1a:93:44:e9:79:6c:a7:
55:76:a8:56:e1:fc:4c:0b:45:f4:9b:3c:41:79:e9:
a6:d5:95:50:c5:2d:86:64:13:a7:7a:dd:0d:60:e3:
7a:5f:58:b2:52:03:61:11:a5:eb:92:22:b3:72:7c:
ef:91:62:6c:02:78:59:08:b3:89:74:38:dc:f8:83:
43:eb:ca:f2:68:cb:84:16:d4:c8:44:74:0f:38:8d:
ba:c7:16:00:e0:15:d3:16:16:08:c0:3d:6b:81:10:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AB:1A:B1:2B:95:DD:FC:23:95:56:7A:53:10:74:B9:03:76:25:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0814D94C088211F0B3D541B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.69.0/24
45.196.82.0-45.196.100.255
Signature Algorithm: sha256WithRSAEncryption
64:da:af:e7:60:57:10:66:23:58:ed:c1:02:84:86:36:cb:2b:
a8:a5:4f:b7:d2:96:38:3e:59:fd:c6:ba:90:f8:6d:2f:4c:d6:
b8:60:e6:cc:d5:39:55:3a:09:fc:db:94:b2:5c:bb:39:c7:c7:
b2:68:31:26:9f:dc:d9:6f:9c:66:84:0e:ea:52:26:06:4f:02:
5e:5a:f6:d0:da:8b:26:28:ff:22:30:d0:4c:b8:a4:64:2a:bd:
99:83:07:8b:ee:7b:df:2f:6e:1c:e1:b2:ee:01:86:12:e1:2d:
c7:74:a5:8c:da:8b:8b:bd:1b:48:1f:5d:ef:55:36:02:41:c7:
0d:87:08:e7:06:70:67:fb:18:84:40:ff:8d:75:60:5f:da:7e:
79:b9:49:ad:96:5b:3d:28:c1:e6:4e:2b:cd:e0:9b:8a:ea:d3:
59:04:3c:e5:41:92:2f:5d:e6:8e:07:31:b2:03:82:59:5a:ed:
52:5b:99:48:7c:3e:9e:40:2d:04:79:06:05:85:4f:1b:fd:be:
08:54:5f:5d:6c:2f:a6:9c:e3:7e:84:44:da:1b:1b:bd:fb:24:
ec:8a:6a:98:e2:98:5d:49:94:ef:e9:90:b9:a4:51:81:19:5d:
43:75:dd:3d:fa:31:98:04:4d:02:cb:f3:88:12:94:69:48:34:
27:49:3f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:45 2025 by rpki-client