Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C7A575E04B211F0AFE4A672762E951A.roa
File: 2C7A575E04B211F0AFE4A672762E951A.roa (raw, json)
Hash identifier: AmrR4Zniu/G/itJ8o+3gFSEI3fGYeKihFJTPk0NngN8=
Subject key identifier: F0:BE:B8:61:BF:5A:62:4F:CF:A2:F6:5C:A5:63:60:20:40:54:E8:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C7A575E04B211F0AFE4A672762E951A.roa
Signing time: Wed 19 Mar 2025 11:06:16 +0000
ROA not before: Wed 19 Mar 2025 11:06:10 +0000
ROA not after: Sat 26 Apr 2025 11:06:10 +0000
asID: 395793
IP address blocks: 45.198.183.0/24 maxlen: 24
45.198.184.0/24 maxlen: 24
45.206.65.0/24 maxlen: 24
45.206.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83668 (0x146d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 19 11:06:10 2025 GMT
Not After : Apr 26 11:06:10 2025 GMT
Subject: CN=67daa527-b25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:04:19:0e:07:9e:b3:af:e0:da:f6:43:71:
5d:c3:89:49:32:12:91:e4:21:67:2b:92:3d:b9:48:
21:20:a2:50:14:a6:7b:38:1e:43:01:cf:9f:d2:b6:
04:34:67:bc:92:0d:63:bd:76:ec:22:52:b1:96:10:
e4:32:3a:7c:ca:71:28:00:a4:07:77:d5:49:be:9b:
f2:b8:2a:1b:75:46:33:69:36:f9:0e:97:59:9d:92:
72:45:5b:35:24:9e:3c:70:b4:31:5e:83:2d:eb:da:
d7:08:80:b6:13:b2:1d:b6:f4:9c:b7:cf:28:e4:e1:
b4:5b:aa:7f:fe:a2:31:b6:a4:6c:cd:d7:1b:47:98:
cb:9c:d9:60:10:d8:d4:41:d9:e5:aa:7e:f9:2d:ca:
bc:98:f3:57:2d:a4:11:f7:5b:14:8d:1a:7e:5f:51:
32:78:33:13:a0:8c:d3:78:a6:13:7c:50:bd:d4:b8:
3e:69:78:4e:68:04:23:ee:b4:8a:76:ee:b3:d9:4b:
91:4c:83:74:11:ee:b6:c0:05:fd:4e:11:b7:14:56:
b1:16:c5:e5:a3:97:2a:51:6e:25:33:37:cd:37:bc:
4a:08:a9:eb:98:7e:d7:21:1f:40:50:68:d6:55:6b:
21:85:ce:4c:25:d6:0e:35:55:67:d4:b9:7e:fc:7b:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BE:B8:61:BF:5A:62:4F:CF:A2:F6:5C:A5:63:60:20:40:54:E8:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C7A575E04B211F0AFE4A672762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.183.0-45.198.184.255
45.206.65.0-45.206.66.255
Signature Algorithm: sha256WithRSAEncryption
47:34:65:4e:d5:f7:41:14:f6:65:08:fd:be:88:02:bf:83:2a:
68:9a:30:d6:9c:f4:f2:4b:db:f6:0d:ed:82:c4:6a:27:71:60:
8c:b3:7c:0b:3a:0a:a4:9c:4e:ee:41:2d:e3:d3:9e:e8:c2:b5:
52:38:cc:21:89:32:b3:a4:78:43:77:22:27:a4:40:06:c2:da:
6d:fa:d0:20:4b:05:d0:a4:d0:7a:c0:8a:09:f7:62:ab:89:65:
59:39:12:1b:5e:04:60:78:da:40:03:1c:59:f2:98:54:41:75:
e6:22:9e:22:57:22:99:e6:d6:7b:12:e2:a8:1d:75:7f:b8:38:
89:ab:ef:8b:08:62:06:b7:6a:e1:c1:3b:7e:af:81:67:3a:15:
48:21:45:c3:d4:9c:04:b4:60:e2:1e:83:e8:de:23:cf:93:40:
79:0e:90:8a:44:09:8c:d3:5d:7b:5a:4e:ab:f8:74:a2:cd:07:
e4:b5:f4:f5:d7:19:df:00:5c:de:de:32:19:26:f6:b8:90:e0:
14:f8:e4:30:48:d9:76:17:fe:88:77:c6:03:9a:2d:3b:91:8c:
79:6e:e0:81:94:bb:10:74:f5:06:a7:25:d2:2a:53:05:7c:90:
d4:26:a2:3f:14:37:0b:3f:a8:dc:08:54:fc:fc:b4:24:90:2f:
9c:28:28:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:04 2025 by rpki-client