Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A51AE12094B11F0B3D3C183762E951A.roa
File: 2A51AE12094B11F0B3D3C183762E951A.roa (raw, json)
Hash identifier: Tnsjpqjq+gDUL2ZRWfGJZ3kQZwrtpBbANFKDQxlrl2k=
Subject key identifier: 86:AC:C0:09:62:90:BF:59:69:49:80:35:8C:66:F1:FD:C1:5C:80:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A51AE12094B11F0B3D3C183762E951A.roa
Signing time: Tue 25 Mar 2025 07:31:29 +0000
ROA not before: Tue 25 Mar 2025 07:31:25 +0000
ROA not after: Tue 13 May 2025 07:31:25 +0000
asID: 63139
IP address blocks: 45.197.85.0/24 maxlen: 24
45.197.86.0/24 maxlen: 24
45.197.87.0/24 maxlen: 24
45.197.88.0/24 maxlen: 24
45.197.89.0/24 maxlen: 24
45.197.90.0/24 maxlen: 24
45.197.91.0/24 maxlen: 24
45.197.92.0/24 maxlen: 24
45.197.93.0/24 maxlen: 24
45.197.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83951 (0x147ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 07:31:25 2025 GMT
Not After : May 13 07:31:25 2025 GMT
Subject: CN=67e25bd1-3a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:57:ab:a4:b8:f3:cc:3d:dd:99:c6:de:80:f6:
ff:17:1b:14:24:f0:73:99:6d:07:1a:07:f7:81:5d:
70:49:ee:27:8c:ff:39:27:b8:45:26:d9:f5:4b:a6:
19:63:28:10:f4:62:a6:a3:6c:15:b0:10:f7:95:e6:
1b:55:2a:fb:7a:e2:48:f8:f9:31:17:0b:3f:4d:3f:
1b:33:b1:69:76:4b:f5:52:d2:12:fa:93:21:c6:4f:
7f:de:3d:4e:db:7f:01:a8:5b:b9:93:09:3c:5d:e3:
ce:c0:e0:c7:aa:60:9c:ac:6b:73:59:77:22:97:53:
de:24:a3:41:a4:1a:df:bd:e9:77:aa:b6:e9:b7:a2:
80:92:f5:04:b2:99:4f:9f:84:ed:9b:b2:fe:a4:6c:
a3:08:1e:bf:c3:36:8c:c5:3e:77:32:d6:f4:fd:0b:
9e:a9:21:7d:ac:cb:68:86:22:4c:0d:ae:61:80:ca:
02:08:e9:62:ef:ea:b9:70:f2:fa:a4:6c:0a:f7:8d:
f9:8b:11:3d:2d:c2:0b:50:85:60:b0:b8:bb:87:40:
08:30:92:df:1f:2d:be:c3:8d:75:f1:1f:25:75:72:
36:45:f7:fe:71:a4:bb:c2:79:a1:04:9d:01:1f:78:
5c:e9:40:d5:b2:3d:71:61:9a:d3:dd:73:ea:b9:91:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AC:C0:09:62:90:BF:59:69:49:80:35:8C:66:F1:FD:C1:5C:80:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A51AE12094B11F0B3D3C183762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.85.0-45.197.94.255
Signature Algorithm: sha256WithRSAEncryption
25:5c:fe:65:b7:56:d3:34:4c:09:6a:a5:2e:c6:26:db:fd:47:
02:9f:2c:6a:2d:44:c6:ef:85:c1:03:5a:22:22:19:91:aa:f2:
a7:b0:d9:95:12:a6:06:56:2e:43:3e:b6:2c:86:53:e2:f5:ce:
c7:f6:c2:a1:17:69:3a:e4:96:f3:1c:59:6e:53:48:8c:6d:98:
e8:08:3e:ae:b6:85:3b:2c:9e:d2:e6:f2:59:62:05:a6:ba:93:
da:f6:36:a1:ce:45:e4:74:19:24:82:dc:de:13:5f:18:c4:e8:
63:99:b4:ce:88:f8:34:6d:e5:db:1d:b6:1c:21:ac:c2:05:74:
78:84:cb:1a:e8:b6:0b:d5:d0:ec:1e:10:ed:2c:ac:ff:da:72:
c5:da:1c:ae:6e:67:89:b3:d9:2e:cc:47:e2:e1:76:3e:5e:9a:
39:36:72:5b:47:ab:9a:9b:e0:e1:66:3f:a9:f3:05:d2:e7:ad:
47:3b:3c:aa:7e:20:88:22:77:46:94:74:e2:3e:ce:5f:6d:fa:
eb:fe:d6:04:94:72:66:df:38:bb:f3:08:fc:59:e8:b0:69:a5:
f7:de:0f:dd:e6:4f:fa:63:61:8c:b2:2f:9f:b8:b6:94:c9:06:
ee:a8:74:8b:01:3a:1c:4f:84:1c:7f:21:0c:49:03:5a:6c:5b:
d5:ee:37:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:16 2025 by rpki-client