Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D1592E003E811F08E901C84762E951A.roa
File: 0D1592E003E811F08E901C84762E951A.roa (raw, json)
Hash identifier: RPycxskofj5YJwfPnFGyBT3DDeb033y+wA3W/KXRQFk=
Subject key identifier: 38:DC:2B:B6:15:0E:7E:DB:26:40:FB:6C:4B:83:5C:0D:20:F0:38:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D1592E003E811F08E901C84762E951A.roa
Signing time: Tue 18 Mar 2025 10:59:24 +0000
ROA not before: Tue 18 Mar 2025 10:59:20 +0000
ROA not after: Sun 27 Apr 2025 10:59:20 +0000
asID: 202656
IP address blocks: 45.195.164.0/24 maxlen: 24
45.195.165.0/24 maxlen: 24
45.195.166.0/24 maxlen: 24
45.195.167.0/24 maxlen: 24
45.195.169.0/24 maxlen: 24
45.195.170.0/24 maxlen: 24
45.195.171.0/24 maxlen: 24
45.195.172.0/24 maxlen: 24
45.195.173.0/24 maxlen: 24
45.195.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83619 (0x146a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 10:59:20 2025 GMT
Not After : Apr 27 10:59:20 2025 GMT
Subject: CN=67d9520b-d07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:c7:b2:78:58:ad:2a:7f:2b:64:f8:61:b4:
9c:14:95:a0:41:23:39:3c:37:40:5d:18:92:f8:5c:
19:11:61:91:b5:aa:38:02:65:1d:5d:cc:47:cb:52:
3d:45:93:48:c9:fb:8a:f5:e2:89:a8:c6:68:32:ff:
80:43:71:8f:99:b0:1b:49:91:5c:9b:23:58:f5:f7:
52:13:50:2a:c7:b8:a6:c2:93:b6:b5:45:4f:96:00:
d4:64:04:7c:fb:2b:52:45:9b:d9:4b:1e:9e:ce:02:
72:80:b3:64:ad:88:59:0b:b8:2c:8b:8c:73:57:d5:
2c:35:a1:18:4b:d5:39:9a:39:d6:62:8a:59:a8:44:
34:16:c1:81:0b:32:a8:37:db:5c:f7:3b:bd:cd:2e:
0d:bf:fa:a7:c0:cd:31:3b:41:4a:85:f2:4f:88:92:
1c:bc:d8:78:b3:f1:1e:9a:d6:94:51:49:fa:61:93:
08:4e:1c:36:e8:d1:c4:62:be:30:80:15:c9:25:99:
27:3f:f7:21:c0:36:19:c1:91:82:35:ad:c1:75:ab:
ca:40:c7:92:bd:3d:25:cf:15:0d:d7:38:c2:4f:21:
88:c8:be:86:81:a4:ee:24:ea:4a:68:d5:a3:b5:fc:
1b:d6:62:9b:ff:7a:a2:9a:3a:08:65:f5:dd:a1:fd:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DC:2B:B6:15:0E:7E:DB:26:40:FB:6C:4B:83:5C:0D:20:F0:38:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D1592E003E811F08E901C84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.164.0/22
45.195.169.0-45.195.174.255
Signature Algorithm: sha256WithRSAEncryption
95:c4:7b:22:3d:ac:d0:12:9f:ac:f3:a3:be:e6:77:e6:45:38:
60:8b:b7:b1:33:5b:ae:84:25:9d:47:b4:29:bc:d5:ff:2d:4c:
75:b4:25:0d:3e:24:68:40:1b:c8:e7:60:30:5a:46:ef:05:cf:
93:8a:f7:50:c2:20:7b:c8:3a:74:d3:40:6a:eb:c3:4f:fd:59:
be:0d:1a:2d:27:8a:49:96:84:b8:35:b4:dc:18:dc:bf:9d:fe:
f2:80:ed:07:f6:69:40:7f:d4:01:0f:2b:1a:dc:e7:66:35:55:
31:f3:d1:c1:05:25:14:71:8e:97:76:41:f1:59:ac:e6:3f:6c:
45:ae:5b:8a:f0:e2:bd:c6:cb:b2:1a:41:bf:7a:75:98:a4:34:
3e:a7:6a:01:e3:97:e6:3b:a9:bc:f8:ea:8d:6b:00:db:6d:f0:
a6:c6:54:92:9b:7e:5d:b3:aa:37:ca:75:b9:f2:e4:01:66:63:
71:6b:35:f8:6a:63:0b:83:1e:e8:71:f6:cd:e7:f4:19:a5:48:
8f:2e:f9:71:fd:19:71:6c:28:2d:c4:6a:ec:ad:e1:d1:07:ec:
7a:f2:1d:6f:48:c8:0e:2d:e5:e0:12:d1:04:13:05:1b:9a:cc:
26:33:1f:7f:5d:de:dc:d3:28:63:54:7a:df:79:45:59:6f:f1:
9f:de:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:33 2025 by rpki-client