Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3469E028094A11F0B236F97B762E951A.roa
File: 3469E028094A11F0B236F97B762E951A.roa (raw, json)
Hash identifier: UodJrJDQJVtimq+M5nvpNIJ/FUuunbC5iS7AFuw5sng=
Subject key identifier: BC:96:C7:EE:52:38:A5:21:BB:ED:7C:26:C0:5C:88:ED:A3:0B:F9:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3469E028094A11F0B236F97B762E951A.roa
Signing time: Tue 25 Mar 2025 07:24:36 +0000
ROA not before: Tue 25 Mar 2025 07:24:32 +0000
ROA not after: Tue 13 May 2025 07:24:32 +0000
asID: 63139
IP address blocks: 45.197.75.0/24 maxlen: 24
45.197.76.0/24 maxlen: 24
45.197.77.0/24 maxlen: 24
45.197.78.0/24 maxlen: 24
45.197.79.0/24 maxlen: 24
45.197.80.0/24 maxlen: 24
45.197.81.0/24 maxlen: 24
45.197.82.0/24 maxlen: 24
45.197.83.0/24 maxlen: 24
45.197.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83949 (0x147ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 07:24:32 2025 GMT
Not After : May 13 07:24:32 2025 GMT
Subject: CN=67e25a34-23b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9c:b4:9d:3f:2f:45:f7:0a:0a:c7:05:dc:90:
37:3a:0a:4a:b2:65:53:66:a8:05:a0:9b:7a:64:e1:
e1:9d:a0:9f:4f:6c:22:52:3b:83:f0:1e:e5:2d:03:
68:c0:08:63:2f:7c:37:67:b5:57:91:1a:0c:1e:1c:
53:de:0d:c2:60:20:d0:27:0d:08:f7:7d:bc:cb:4e:
27:ef:a7:dc:7b:32:59:3a:b3:1c:b0:7c:6a:52:75:
73:5c:39:5b:35:a8:ba:db:8f:e7:91:8f:8a:a7:0b:
30:8f:76:04:27:f8:f0:9b:1d:8a:f0:5a:30:e0:42:
c6:79:9c:3a:23:c3:09:ca:d0:b1:45:9a:4d:99:96:
3d:1f:09:8e:24:fd:fb:b7:4f:d4:7f:e8:32:b8:dd:
fe:1a:ff:a2:be:43:11:f4:88:06:36:ea:97:08:19:
8a:ed:9b:a1:91:cf:5e:af:d5:cd:39:04:5b:59:da:
55:ec:15:7f:b7:c0:eb:4b:f7:c8:b2:de:8e:3b:7e:
dc:b0:d4:6a:cd:8c:21:5b:35:cc:74:b4:64:45:ea:
75:0a:d6:6c:59:29:31:48:dc:06:cc:b5:d0:30:9f:
4d:85:7a:5c:60:81:c0:8a:6f:56:60:36:8d:30:0f:
cf:f8:b0:d8:07:b0:c0:73:a0:2a:71:60:07:91:e2:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:96:C7:EE:52:38:A5:21:BB:ED:7C:26:C0:5C:88:ED:A3:0B:F9:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3469E028094A11F0B236F97B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.75.0-45.197.84.255
Signature Algorithm: sha256WithRSAEncryption
61:2c:0a:82:e9:62:38:4c:58:49:f4:2b:0a:4d:33:f2:42:b9:
d4:f2:bf:7b:e1:1d:5e:8b:a8:79:69:83:00:1b:06:6a:29:33:
98:e2:c6:f7:e2:d6:86:32:25:32:ab:e1:c1:50:e3:62:31:04:
da:5e:55:11:e3:ca:50:72:a2:bd:d2:d1:59:70:ef:77:9b:c2:
f0:9b:35:4d:2f:ba:8c:59:f3:16:9f:b7:20:bd:d7:4d:e0:dc:
b3:2b:f3:b2:b9:05:93:42:e5:07:77:2b:7f:e4:6d:f0:41:a6:
f3:93:ac:d0:6f:74:ee:7b:f0:ad:37:4f:41:95:21:04:77:de:
14:ac:54:2c:77:02:ce:19:35:7b:29:4a:ad:8e:f0:f0:5d:13:
d6:53:97:2d:f7:5e:e3:b2:6d:82:da:d9:c3:b4:57:60:eb:25:
ab:33:81:c1:62:fb:07:dd:0c:8a:2b:92:13:a1:97:25:ce:c0:
68:e0:5b:83:c0:ac:ad:48:96:90:d9:32:f9:d7:ba:84:0f:be:
7c:c2:f7:02:3e:b1:6d:ba:91:7b:b2:c0:fc:9c:83:c9:fc:c9:
19:eb:8f:a3:b5:22:c7:ab:a7:cb:3e:91:cc:e8:31:a9:fc:af:
33:24:72:87:82:b5:83:0e:81:97:8f:f6:58:e2:30:8b:d1:1f:
49:98:61:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:50 2025 by rpki-client