Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09160E52F8C811EF8FC5344A762E951A.roa
File: 09160E52F8C811EF8FC5344A762E951A.roa (raw, json)
Hash identifier: 1aXGivZcdtXE4MYErG3CE4vZoGugHIz1VNhiLtEAKSA=
Subject key identifier: 21:FA:BA:D8:B6:F8:50:83:EC:09:B0:45:E2:95:03:6A:75:F5:78:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09160E52F8C811EF8FC5344A762E951A.roa
Signing time: Tue 04 Mar 2025 07:12:30 +0000
ROA not before: Tue 04 Mar 2025 07:12:26 +0000
ROA not after: Sun 11 May 2025 07:12:26 +0000
asID: 7029
IP address blocks: 45.196.32.0/22 maxlen: 24
45.196.40.0/22 maxlen: 24
45.196.48.0/22 maxlen: 24
45.196.52.0/22 maxlen: 24
45.196.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82617 (0x142b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 07:12:26 2025 GMT
Not After : May 11 07:12:26 2025 GMT
Subject: CN=67c6a7de-ea6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:75:83:4e:f1:2e:6d:45:46:70:8e:f3:f4:a8:
3e:61:50:d3:4b:1d:ce:1f:4a:a9:b9:dd:cb:df:4e:
79:b6:82:d5:8d:9c:b5:a4:a7:c0:7c:f2:de:2b:2b:
d8:22:5e:ac:58:a8:b7:3f:b3:a5:7c:a9:13:6d:80:
cb:8a:85:c2:92:9d:a4:eb:8a:a1:fc:9b:61:b0:21:
f6:bd:95:8e:d4:1c:4d:f2:10:10:d1:b6:2c:1a:1d:
f2:0d:54:92:f5:87:63:85:c0:69:89:11:97:a5:08:
de:a7:5a:05:13:01:a8:dd:41:48:2e:bc:d8:dd:da:
79:b6:a2:59:04:7d:eb:bf:0f:94:84:00:db:c0:7e:
aa:1d:f6:a7:ac:67:6a:53:41:67:58:0a:21:75:04:
59:9b:e5:56:b0:9a:b4:2e:74:91:52:58:5c:e8:58:
82:d6:b5:10:ea:f6:f1:98:b0:2a:ed:76:5b:e2:cf:
48:f1:5f:30:8f:84:be:35:ef:23:0c:db:10:63:80:
28:be:7b:f9:2b:fc:7b:40:c5:27:da:ae:dc:28:50:
20:f8:29:7f:15:78:5f:d3:51:cb:1a:fd:de:db:97:
1a:f7:b0:63:da:9f:74:3d:3d:96:3b:2a:a0:94:f3:
72:82:a4:78:0b:8a:37:38:88:ba:d8:e9:8d:ac:b6:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FA:BA:D8:B6:F8:50:83:EC:09:B0:45:E2:95:03:6A:75:F5:78:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09160E52F8C811EF8FC5344A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.32.0/22
45.196.40.0/22
45.196.48.0/21
45.196.60.0/22
Signature Algorithm: sha256WithRSAEncryption
08:1b:04:8b:de:38:b4:a6:d8:94:07:69:3d:fa:8f:b2:3a:36:
ad:d4:3a:67:70:4d:e0:ce:a2:ac:ff:75:cb:92:ce:94:42:ea:
88:75:25:0b:5f:5d:1a:81:88:31:af:fb:0d:99:aa:f6:43:d4:
25:5b:3f:70:7d:37:c5:47:81:c4:2f:a5:1b:e4:c6:82:6b:df:
2c:4b:35:09:29:8e:72:bc:a3:f2:d8:c1:6b:4d:83:e5:3b:7e:
46:6a:00:1f:30:c3:64:ed:e0:02:75:94:fe:5c:28:d2:4d:cf:
0e:3d:e7:d9:79:2f:e4:22:88:d8:83:40:ff:a3:03:a3:ef:42:
08:a5:e4:ae:cc:ef:ee:88:67:e8:86:f2:42:55:d1:72:43:28:
c0:39:e6:0f:e1:37:58:63:e7:0e:bc:65:a2:48:30:2e:a8:77:
a0:bb:d0:d7:e1:df:f8:ef:64:0d:3c:50:99:47:b5:bd:b6:bc:
7c:04:28:c4:d7:89:ff:71:2d:6b:dd:b7:88:7c:43:c7:b8:19:
f8:17:45:cb:8e:10:34:cb:42:39:8b:ba:22:d5:33:da:a3:8d:
f5:82:81:fd:69:64:ee:cf:00:ac:7a:30:72:1c:14:de:78:d3:
00:17:7f:63:26:84:38:a3:0b:46:c2:ae:29:df:9b:6b:f2:0d:
99:05:12:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:58 2025 by rpki-client