Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/227FD57EF50011EFA9AB307D762E951A.roa
File: 227FD57EF50011EFA9AB307D762E951A.roa (raw, json)
Hash identifier: TOvaUekBySJ92M5zhu4wx17hdHrpT5s9T/mZSoQVgZY=
Subject key identifier: 66:0D:B6:52:69:CB:C6:D4:D3:10:8C:CE:8E:D0:E1:8C:78:45:BA:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013A2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/227FD57EF50011EFA9AB307D762E951A.roa
Signing time: Thu 27 Feb 2025 11:44:00 +0000
ROA not before: Thu 27 Feb 2025 11:43:56 +0000
ROA not after: Sat 19 Feb 2028 11:43:56 +0000
asID: 17561
IP address blocks: 45.204.119.0/24 maxlen: 24
45.204.120.0/24 maxlen: 24
45.204.121.0/24 maxlen: 24
45.204.122.0/24 maxlen: 24
45.204.123.0/24 maxlen: 24
45.204.124.0/24 maxlen: 24
45.204.125.0/24 maxlen: 24
45.204.126.0/24 maxlen: 24
45.204.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80426 (0x13a2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 11:43:56 2025 GMT
Not After : Feb 19 11:43:56 2028 GMT
Subject: CN=67c05000-1737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:7d:8a:38:af:c8:5c:b9:10:70:50:eb:c0:
ca:96:8f:c9:05:84:07:bd:b5:78:00:b4:3e:ec:3b:
b4:d0:f0:86:f8:e9:6e:23:38:ae:ca:4e:25:be:d5:
ae:7a:5a:7e:56:3f:ae:a8:d0:04:c4:a0:7b:54:7d:
7f:ed:0c:64:38:ec:b7:fd:ee:84:85:eb:59:9d:b6:
5e:59:a9:d7:b2:14:5a:07:8b:e9:44:4e:60:7a:cd:
d1:5f:47:61:a6:b3:1c:ce:ac:55:89:22:d8:43:9d:
3e:89:81:08:62:a4:01:49:2e:d5:b8:d5:c4:a0:ed:
ad:8d:89:ab:27:06:55:d9:cf:6a:ce:29:07:2a:95:
2c:f6:64:dc:b3:0a:f8:1e:13:71:7b:cb:35:ac:79:
85:34:ae:76:de:0e:08:c4:12:fd:66:28:e9:c2:c2:
a3:a7:2f:52:78:6c:20:82:32:86:1b:73:d1:20:0b:
87:89:4c:58:ee:dd:84:ad:02:51:70:c5:d7:4d:84:
de:ff:c0:ea:3c:6b:77:be:68:94:33:28:19:7d:f3:
6c:52:74:2b:73:ab:22:d5:41:96:55:f5:3a:8b:eb:
a0:ae:dd:0a:ef:d2:43:f6:81:6e:af:03:97:68:13:
34:56:05:91:a8:73:65:87:a6:fa:51:eb:50:46:ea:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0D:B6:52:69:CB:C6:D4:D3:10:8C:CE:8E:D0:E1:8C:78:45:BA:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/227FD57EF50011EFA9AB307D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.119.0-45.204.127.255
Signature Algorithm: sha256WithRSAEncryption
03:05:06:39:86:59:f3:85:69:ce:48:ae:4b:04:9b:ef:9b:a4:
81:18:86:c5:92:f8:5c:c7:5c:ee:7c:49:30:ae:4f:9b:e9:00:
5a:0a:b3:ae:99:df:f8:18:49:96:8c:4f:4a:8c:5f:17:2b:a7:
e3:e8:06:0a:66:95:0b:ad:75:af:77:57:97:24:36:72:b7:e5:
94:fd:b3:99:6a:68:68:1c:9b:a1:f3:43:25:dd:30:2c:a5:88:
b4:2b:84:9a:b3:54:17:ab:a5:8a:66:2a:78:61:b8:e2:31:cb:
79:2f:dd:cf:c9:e4:bb:a0:f4:52:36:98:1e:34:22:ac:4a:91:
7c:fa:46:d2:6e:91:0b:9f:d7:3a:28:4e:02:3a:21:fa:89:33:
b9:91:38:7e:3d:6c:f5:c5:83:02:b5:9a:f4:82:d7:02:48:aa:
ce:c1:bb:80:1b:40:7c:2d:76:e2:19:1a:59:d9:f2:df:49:90:
de:27:cd:84:ec:1b:c7:a6:9b:c8:33:c1:5f:f5:9c:ae:18:c9:
12:4d:0c:37:eb:27:e6:7e:6e:a7:59:68:83:1b:6b:c1:e6:3a:
df:9f:f7:b7:58:15:73:7a:a6:cd:78:4b:6e:74:76:61:72:2d:
c9:a1:ba:6a:96:f0:bb:d0:18:5a:40:50:7c:82:5d:ef:fe:3b:
53:0c:66:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:33 2025 by rpki-client