Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/102B7C0203E711F0BF8AA07F762E951A.roa
File: 102B7C0203E711F0BF8AA07F762E951A.roa (raw, json)
Hash identifier: azNkXGlJA78sHRBc+crcWOl2oLAo35V0VAI8wa7SXZc=
Subject key identifier: E7:F7:20:C2:35:CF:04:1C:7D:51:8A:13:CD:F2:3B:DD:EA:80:73:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/102B7C0203E711F0BF8AA07F762E951A.roa
Signing time: Tue 18 Mar 2025 10:52:19 +0000
ROA not before: Tue 18 Mar 2025 10:52:15 +0000
ROA not after: Sun 27 Apr 2025 10:52:15 +0000
asID: 202656
IP address blocks: 45.195.162.0/24 maxlen: 24
45.195.163.0/24 maxlen: 24
45.199.244.0/24 maxlen: 24
45.199.245.0/24 maxlen: 24
45.199.246.0/24 maxlen: 24
45.199.247.0/24 maxlen: 24
45.199.249.0/24 maxlen: 24
45.199.250.0/24 maxlen: 24
45.199.251.0/24 maxlen: 24
45.199.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83617 (0x146a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 10:52:15 2025 GMT
Not After : Apr 27 10:52:15 2025 GMT
Subject: CN=67d95063-9754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:5b:6b:ac:62:1a:c2:32:e9:0d:2e:7e:f4:
c8:b0:84:b4:6c:e1:42:16:1f:4e:98:c2:e2:78:4d:
e0:14:f7:b5:23:f0:cc:ca:b9:b0:05:33:98:95:c4:
6f:4e:53:f5:0d:29:2e:25:25:ea:06:f6:63:8a:ba:
84:1f:67:d6:a3:a6:ef:74:26:c6:c8:90:1a:b4:d2:
ae:f4:3d:2e:e3:ea:34:b3:58:fc:88:c8:60:0c:e4:
50:45:6f:a1:f8:72:2a:f9:67:3f:e1:a2:d6:08:75:
3a:66:7d:2e:b1:c8:52:aa:51:1f:76:04:fe:7c:7d:
4d:42:81:7a:3b:c7:a1:4b:94:cd:78:16:d1:47:65:
9f:4f:9a:bb:fa:36:f8:80:10:f9:75:e6:01:30:8f:
46:33:1a:a7:1a:ce:d1:51:2b:9f:6c:cc:31:35:3e:
2e:17:59:42:be:35:04:6d:87:ef:8e:ff:e8:bb:a9:
68:b3:60:e6:66:fa:9a:68:c7:39:c2:f6:6f:f8:9d:
11:0c:d1:d7:27:6a:04:a9:3a:34:a0:dd:0f:3a:16:
ea:c1:c4:4b:95:bf:4d:9f:b6:3d:34:20:d2:ef:79:
9e:91:8c:1e:59:b6:d4:ff:29:ae:e0:f4:3c:66:33:
c2:39:3a:72:7c:75:d2:9c:74:c7:32:47:72:ca:73:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F7:20:C2:35:CF:04:1C:7D:51:8A:13:CD:F2:3B:DD:EA:80:73:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/102B7C0203E711F0BF8AA07F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.162.0/23
45.199.244.0/22
45.199.249.0-45.199.251.255
45.199.253.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b3:42:2c:01:ae:32:d1:28:ad:10:01:3c:02:17:dd:d3:ee:
b1:ec:b8:a9:c5:72:0b:80:0a:7b:74:00:b9:db:a4:60:22:f5:
af:e2:cf:83:c6:6f:59:c2:08:20:69:d8:c7:0c:d4:41:44:59:
a9:94:b2:1f:53:01:a0:cd:2c:c5:c0:64:94:6f:0d:b3:81:9d:
0d:20:4c:36:14:5a:a1:fc:8a:3c:e0:55:e3:a9:b8:62:f2:70:
da:e3:84:fe:29:ec:81:92:4d:1b:d9:a2:60:03:7c:e4:70:1b:
fe:dc:8c:29:a6:4f:39:2f:ee:43:4c:b3:c4:da:64:b6:6b:25:
0b:38:92:1f:80:86:29:6b:7e:f9:8c:d0:c1:ba:17:ad:70:70:
ec:e2:ff:35:73:22:45:fb:c8:0f:7f:dc:af:db:12:65:d1:d3:
6f:5d:54:d6:3c:1e:14:89:b5:81:b6:ec:3d:e2:83:0b:ff:4d:
47:db:f8:03:05:2a:06:73:09:9c:61:75:50:eb:84:52:eb:fe:
f9:de:ad:7c:e2:4b:97:f9:b5:25:a8:3f:5b:8e:bc:d4:9c:4a:
a7:b9:b6:43:68:f1:34:63:3d:db:6b:e1:78:81:f5:f4:85:01:
ee:98:47:33:61:d8:ea:96:5c:95:9a:b7:91:75:8e:98:54:8d:
60:d9:13:30
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIDAUahMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE4MTA1MjE1WhcNMjUwNDI3MTA1MjE1WjAYMRYw
FAYDVQQDEw02N2Q5NTA2My05NzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArkxba6xiGsIy6Q0ufvTIsIS0bOFCFh9OmMLieE3gFPe1I/DMyrmwBTOY
lcRvTlP1DSkuJSXqBvZjirqEH2fWo6bvdCbGyJAatNKu9D0u4+o0s1j8iMhgDORQ
RW+h+HIq+Wc/4aLWCHU6Zn0uschSqlEfdgT+fH1NQoF6O8ehS5TNeBbRR2WfT5q7
+jb4gBD5deYBMI9GMxqnGs7RUSufbMwxNT4uF1lCvjUEbYfvjv/ou6los2DmZvqa
aMc5wvZv+J0RDNHXJ2oEqTo0oN0POhbqwcRLlb9Nn7Y9NCDS73mekYweWbbU/ymu
4PQ8ZjPCOTpyfHXSnHTHMkdyynN+ZwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFOf3
IMI1zwQcfVGKE83yO93qgHOWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMDJCN0MwMjAzRTcxMUYwQkY4QUEwN0Y3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBLcOiAwQCLcf0MAwDBAAtx/kD
BAItx/gDBAAtx/0wDQYJKoZIhvcNAQELBQADggEBAHKzQiwBrjLRKK0QATwCF93T
7rHsuKnFcguACnt0ALnbpGAi9a/iz4PGb1nCCCBp2McM1EFEWamUsh9TAaDNLMXA
ZJRvDbOBnQ0gTDYUWqH8ijzgVeOpuGLycNrjhP4p7IGSTRvZomADfORwG/7cjCmm
Tzkv7kNMs8TaZLZrJQs4kh+AhilrfvmM0MG6F61wcOzi/zVzIkX7yA9/3K/bEmXR
029dVNY8HhSJtYG27D3igwv/TUfb+AMFKgZzCZxhdVDrhFLr/vnerXziS5f5tSWo
P1uOvNScSqe5tkNo8TRjPdtr4XiB9fSFAe6YRzNh2OqWXJWat5F1jphUjWDZEzA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:52 2025 by rpki-client