Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DECDD9CF57711EF9A59C6A3762E951A.roa
File: 0DECDD9CF57711EF9A59C6A3762E951A.roa (raw, json)
Hash identifier: nfOsrCmhVWv/IAHPzusIyUiXCZhX0zP8YgJIUURv+FI=
Subject key identifier: 26:09:E3:87:9F:9D:B2:25:BC:28:AE:96:A7:92:ED:28:42:D5:4D:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013BBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DECDD9CF57711EF9A59C6A3762E951A.roa
Signing time: Fri 28 Feb 2025 01:55:16 +0000
ROA not before: Fri 28 Feb 2025 01:55:12 +0000
ROA not after: Thu 19 Feb 2026 01:55:12 +0000
asID: 984
IP address blocks: 45.196.101.0/24 maxlen: 24
45.196.102.0/24 maxlen: 24
45.196.103.0/24 maxlen: 24
45.196.104.0/24 maxlen: 24
45.196.105.0/24 maxlen: 24
45.196.106.0/24 maxlen: 24
45.196.107.0/24 maxlen: 24
45.196.108.0/24 maxlen: 24
45.196.109.0/24 maxlen: 24
45.196.110.0/24 maxlen: 24
45.196.111.0/24 maxlen: 24
45.196.112.0/24 maxlen: 24
45.196.113.0/24 maxlen: 24
45.196.114.0/24 maxlen: 24
45.196.115.0/24 maxlen: 24
45.196.116.0/24 maxlen: 24
45.196.117.0/24 maxlen: 24
45.196.118.0/24 maxlen: 24
45.196.119.0/24 maxlen: 24
45.196.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80830 (0x13bbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 01:55:12 2025 GMT
Not After : Feb 19 01:55:12 2026 GMT
Subject: CN=67c11783-36c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:d5:e7:e2:50:ea:63:ac:ce:56:f3:3d:74:
f8:a6:1f:51:12:6c:d3:3e:a6:f2:19:79:f3:ce:fb:
23:4e:a9:8d:af:bf:52:58:60:e2:4c:7c:2f:83:0c:
4f:67:53:5e:70:a3:48:4d:5c:06:3e:c1:aa:b9:a9:
cb:c5:a1:cc:a8:fd:de:25:28:17:cf:7d:f5:86:9a:
7c:fa:8a:fc:28:08:a9:83:b4:db:37:be:0c:d5:71:
fd:f8:a3:c3:52:01:00:79:40:7a:f5:70:f0:a2:32:
1d:99:0d:70:07:66:23:4c:6f:a8:22:c0:0e:e4:67:
59:fa:7d:8c:7a:c5:b9:01:83:24:f7:58:d2:34:34:
90:f9:10:fa:30:bb:91:c1:fe:bf:de:0a:c8:b1:c8:
89:d7:52:d2:06:8a:4c:31:6c:fd:91:a6:f0:d1:23:
a8:37:2f:4d:10:ab:41:39:e4:1f:cd:f9:16:cb:b0:
b8:32:41:62:02:85:25:95:34:7e:5f:19:5f:0d:ac:
a1:3a:74:c5:77:8d:a6:31:3c:8e:b2:33:b3:29:b0:
3c:33:2d:02:6c:b4:b9:4b:3a:8a:2a:71:c6:b1:f7:
3b:da:b9:78:c3:60:d3:fd:00:99:ce:4a:27:e0:6d:
1e:c9:94:46:82:f7:55:dc:0f:f7:87:61:29:d6:2f:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:09:E3:87:9F:9D:B2:25:BC:28:AE:96:A7:92:ED:28:42:D5:4D:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DECDD9CF57711EF9A59C6A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.101.0-45.196.120.255
Signature Algorithm: sha256WithRSAEncryption
a2:6a:b7:00:bf:95:69:71:c7:cd:b5:40:5c:0d:03:44:43:dd:
96:78:ec:c0:3d:a8:f8:54:d3:0c:ea:71:e9:39:01:cc:cc:02:
51:b9:6d:f4:24:0f:22:14:e5:6d:23:c2:a1:b9:3d:03:1b:fa:
1d:df:01:fc:3d:5a:2e:2c:fc:34:76:78:d6:4a:e2:4a:75:f9:
a9:06:09:2c:56:26:ba:01:db:e0:d3:e0:69:15:c4:c7:64:6b:
32:99:a5:24:f2:a6:ad:08:6f:c5:39:4c:27:dd:30:56:71:53:
b5:83:23:8d:cd:c3:10:73:45:4c:56:eb:9f:34:d5:cb:17:c1:
d9:78:a3:d0:59:bf:87:f5:6c:b9:d8:db:4a:71:ff:9d:82:6f:
eb:52:b8:4d:4c:8f:0d:65:ef:91:28:e3:5a:cd:c7:10:f5:e2:
89:ad:25:48:bf:d7:d2:81:37:ac:4a:9b:83:32:12:b4:54:9d:
cc:cf:d1:8a:1e:f9:04:b4:83:29:3e:cb:8a:e2:51:40:0e:f1:
1e:74:2b:5e:0b:63:9c:22:b0:d0:84:c4:6b:b0:7d:24:f8:d3:
5c:36:9c:89:ce:5e:35:51:c0:db:68:cb:fc:52:48:07:03:9e:
26:81:f2:ea:4a:06:8a:8d:52:2e:85:e0:9c:84:8c:9e:da:ac:
88:63:16:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:29 2025 by rpki-client