Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41B6B804F8D911EFB0EDB0B9762E951A.roa
File: 41B6B804F8D911EFB0EDB0B9762E951A.roa (raw, json)
Hash identifier: 9pCd5pP9pEXOxlBkkCWTDbWl/oZOUhA3S2DDebCNhto=
Subject key identifier: AB:71:65:B0:0D:F1:B3:6F:EB:6D:DA:FA:CA:78:36:7C:77:AA:F2:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41B6B804F8D911EFB0EDB0B9762E951A.roa
Signing time: Tue 04 Mar 2025 09:15:47 +0000
ROA not before: Tue 04 Mar 2025 09:15:43 +0000
ROA not after: Fri 04 Apr 2025 09:15:43 +0000
asID: 200373
IP address blocks: 45.201.10.0/24 maxlen: 24
45.201.11.0/24 maxlen: 24
45.202.76.0/24 maxlen: 24
45.202.77.0/24 maxlen: 24
45.202.78.0/24 maxlen: 24
45.202.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82665 (0x142e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 09:15:43 2025 GMT
Not After : Apr 4 09:15:43 2025 GMT
Subject: CN=67c6c4c3-1ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:2f:92:46:0f:8b:fd:b1:3b:e9:21:f4:ba:
85:af:0e:e7:9e:6e:aa:7f:a4:e6:99:7a:3b:fd:56:
8b:0c:1a:ad:cf:77:60:d1:b8:07:44:a2:34:47:12:
b6:8e:3e:12:5b:a0:29:0a:9e:71:9f:bd:42:7f:63:
24:74:f7:ec:20:2f:b1:28:bf:23:39:d1:5f:83:3a:
40:f9:53:92:04:7c:4c:8b:cd:54:f1:bd:9b:ed:55:
70:e1:a2:2e:58:d3:6b:1d:73:6e:dd:1a:80:f9:8a:
47:dd:db:7c:fe:55:54:63:b4:8c:88:33:42:c4:9e:
6e:48:6e:24:64:f4:81:40:d4:54:ee:a7:55:4b:6a:
0c:01:8e:5d:86:de:0c:67:33:d2:9e:52:37:cd:da:
07:75:01:b0:f4:c5:8e:3e:56:cc:45:ee:7e:00:65:
4b:be:66:26:67:20:13:03:29:e1:d5:df:9f:70:61:
c7:36:b8:0b:23:cb:b7:06:a1:14:b3:10:a9:38:2a:
4e:f9:2f:54:fa:01:7d:eb:9f:39:6e:ca:8d:4e:a8:
0e:9e:c8:11:5d:cd:59:84:b4:8a:16:66:d7:dd:f6:
93:ba:42:fd:f5:32:b9:64:5a:df:34:99:57:62:0c:
19:81:df:7f:c4:05:f7:51:d3:ba:ee:cc:67:d5:a2:
8c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:71:65:B0:0D:F1:B3:6F:EB:6D:DA:FA:CA:78:36:7C:77:AA:F2:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41B6B804F8D911EFB0EDB0B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.10.0/23
45.202.76.0/22
Signature Algorithm: sha256WithRSAEncryption
11:ff:26:ed:aa:c6:3b:80:7c:15:2f:da:da:a0:a3:69:13:0e:
6e:56:f0:d6:0c:3e:ab:ae:f5:99:a8:70:ea:19:83:a1:71:06:
04:4b:18:3e:64:87:5f:3c:e7:24:b2:e6:5c:f8:9a:2f:ec:4a:
05:41:42:e0:63:78:b0:fd:88:3c:b2:4d:35:10:71:a1:46:be:
4a:c0:25:27:62:d8:b4:9d:51:5d:45:ca:41:e2:41:9a:2f:a6:
ff:f9:77:91:b8:da:e0:cf:d5:5d:dc:cd:e4:00:16:c4:ff:e5:
b2:ca:e0:6b:d6:9f:1a:d9:ea:68:89:72:14:0e:b0:ff:fa:06:
31:03:05:cf:0e:c2:90:47:53:5c:a8:e4:43:a7:ef:b8:77:a9:
89:b2:10:c9:14:d5:07:9c:d4:b6:7d:c7:d4:b6:f8:4f:41:fa:
fe:0e:8c:a8:ed:45:28:9b:08:5e:bd:41:7a:0b:5c:29:2b:0c:
dd:30:7e:63:55:fa:67:0a:2f:66:9d:79:e4:e0:5f:66:d3:ef:
4b:e0:47:ac:96:27:c5:be:46:63:9e:74:36:e7:25:65:b4:0f:
3a:9a:56:d0:f8:af:68:12:be:42:96:86:c6:29:e9:ec:ea:f1:
aa:a7:24:a0:b8:f8:96:4e:f7:b6:d8:2a:a5:78:53:4a:a9:05:
74:79:b9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:39 2025 by rpki-client