Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ADAB320F8C411EF981410AD762E951A.roa
File: 2ADAB320F8C411EF981410AD762E951A.roa (raw, json)
Hash identifier: KT880q2A/X8fi9oQgqvAzpL6dWlDVWSDN9UmgLYMd98=
Subject key identifier: C6:AB:B8:67:9F:C4:EF:AD:CE:22:D3:64:62:E3:4D:7F:2A:16:40:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01429F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ADAB320F8C411EF981410AD762E951A.roa
Signing time: Tue 04 Mar 2025 06:44:49 +0000
ROA not before: Tue 04 Mar 2025 06:44:45 +0000
ROA not after: Sun 11 May 2025 06:44:45 +0000
asID: 9009
IP address blocks: 45.192.130.0/24 maxlen: 24
45.192.131.0/24 maxlen: 24
45.192.140.0/24 maxlen: 24
45.192.141.0/24 maxlen: 24
45.192.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82591 (0x1429f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 06:44:45 2025 GMT
Not After : May 11 06:44:45 2025 GMT
Subject: CN=67c6a161-d147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:7c:80:10:88:99:37:d0:81:f6:c3:aa:78:
9f:db:0f:e9:33:19:c7:20:0d:ee:e1:95:ba:03:72:
36:ba:76:1b:98:49:eb:65:86:fe:1d:d9:cd:5d:ab:
e7:57:7b:14:70:3a:c7:2c:4e:70:c7:5a:e4:80:57:
cb:f6:de:91:84:fe:bc:9c:ed:16:6f:df:4d:04:11:
9b:a5:6c:89:23:ec:08:47:b5:53:15:b8:9e:92:b2:
7d:a4:a0:27:75:24:2e:8a:6a:81:7b:2a:fd:00:c7:
79:12:4b:12:85:70:e3:f5:9f:17:59:25:89:74:74:
ae:1e:68:61:eb:d4:1e:05:d1:48:2a:69:3d:e8:7b:
87:f5:76:7e:f7:be:33:ba:b0:11:b8:7f:fe:32:96:
40:a1:c5:d8:81:3d:18:bc:e8:5a:32:8b:ef:fc:f0:
5d:36:18:7a:ad:d0:40:96:14:30:58:b7:07:d2:e8:
2a:61:a3:5b:51:cf:85:81:aa:9d:ed:85:68:ee:f8:
dd:34:86:f1:60:45:58:be:07:23:2a:c6:ed:71:5f:
2b:fa:0a:11:b8:28:07:6c:93:49:da:83:f3:de:73:
08:8e:87:42:fb:6c:77:39:70:13:a9:dd:18:a9:fe:
c1:d5:ae:8e:67:ae:96:a8:71:2d:b7:39:1d:5b:e6:
9c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AB:B8:67:9F:C4:EF:AD:CE:22:D3:64:62:E3:4D:7F:2A:16:40:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ADAB320F8C411EF981410AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.130.0/23
45.192.140.0-45.192.142.255
Signature Algorithm: sha256WithRSAEncryption
20:a9:25:d6:32:c9:6d:d5:5f:af:85:d4:80:d1:3b:96:21:27:
56:b5:d5:1d:79:10:96:f1:c9:84:11:f8:1a:8b:0a:ad:bb:02:
af:06:e7:b3:a5:29:85:24:8d:c6:2a:99:7b:94:4f:53:44:78:
19:1a:90:2c:2e:5c:52:74:d3:c2:e3:ac:2f:7b:9a:dc:5f:28:
90:5e:14:62:22:56:23:70:1e:9d:a7:c4:7a:f6:bc:6e:7a:19:
af:2f:aa:78:e5:b8:19:af:5d:db:38:df:19:3d:9f:96:f8:79:
f7:df:31:04:d9:a6:e2:c5:ff:8e:cc:0e:f2:8f:3b:33:6a:b8:
0e:50:f7:c8:1a:69:97:d5:b4:c9:21:00:ab:06:b5:61:ad:1c:
f6:b5:14:d6:0a:cd:08:42:4f:18:03:3b:16:94:88:fd:7d:3a:
ef:29:5f:6f:3e:51:36:05:d5:8e:04:15:b3:d3:59:fb:d2:dc:
8f:bd:f5:ed:c4:58:2b:13:96:a6:be:9c:71:82:36:fa:aa:ac:
bf:08:c8:a7:c6:97:f5:2f:1a:42:aa:fc:61:5f:40:fe:c0:d0:
4b:6f:2a:01:fd:5e:bf:23:dd:da:04:2c:56:84:b9:53:02:19:
f3:29:49:88:98:d2:37:cf:4a:4a:bd:ed:f7:1b:68:84:d2:f5:
72:2b:77:ff
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAUKfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzA0MDY0NDQ1WhcNMjUwNTExMDY0NDQ1WjAYMRYw
FAYDVQQDEw02N2M2YTE2MS1kMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuAp8gBCImTfQgfbDqnif2w/pMxnHIA3u4ZW6A3I2unYbmEnrZYb+HdnN
XavnV3sUcDrHLE5wx1rkgFfL9t6RhP68nO0Wb99NBBGbpWyJI+wIR7VTFbiekrJ9
pKAndSQuimqBeyr9AMd5EksShXDj9Z8XWSWJdHSuHmhh69QeBdFIKmk96HuH9XZ+
974zurARuH/+MpZAocXYgT0YvOhaMovv/PBdNhh6rdBAlhQwWLcH0ugqYaNbUc+F
gaqd7YVo7vjdNIbxYEVYvgcjKsbtcV8r+goRuCgHbJNJ2oPz3nMIjodC+2x3OXAT
qd0Yqf7B1a6OZ66WqHEttzkdW+acBwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFMar
uGefxO+tziLTZGLjTX8qFkC0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQURBQjMyMEY4QzQxMUVGOTgxNDEwQUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBLcCCMAwDBAItwIwDBAAtwI4w
DQYJKoZIhvcNAQELBQADggEBACCpJdYyyW3VX6+F1IDRO5YhJ1a11R15EJbxyYQR
+BqLCq27Aq8G57OlKYUkjcYqmXuUT1NEeBkakCwuXFJ008LjrC97mtxfKJBeFGIi
ViNwHp2nxHr2vG56Ga8vqnjluBmvXds43xk9n5b4efffMQTZpuLF/47MDvKPOzNq
uA5Q98gaaZfVtMkhAKsGtWGtHPa1FNYKzQhCTxgDOxaUiP19Ou8pX28+UTYF1Y4E
FbPTWfvS3I+99e3EWCsTlqa+nHGCNvqqrL8IyKfGl/UvGkKq/GFfQP7A0EtvKgH9
Xr8j3doELFaEuVMCGfMpSYiY0jfPSkq97fcbaITS9XIrd/8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:02 2025 by rpki-client