Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B6D46CAF64E11EFACE2E478762E951A.roa
File: 4B6D46CAF64E11EFACE2E478762E951A.roa (raw, json)
Hash identifier: Rp7qZ9fjlqsEE8u4iu2nnD9isOZv7R+ptwiHt4odcvc=
Subject key identifier: 0B:58:39:98:9E:3F:5E:EC:FC:5A:1C:B8:9E:C8:37:53:5C:94:E6:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B6D46CAF64E11EFACE2E478762E951A.roa
Signing time: Sat 01 Mar 2025 03:36:00 +0000
ROA not before: Sat 01 Mar 2025 03:35:57 +0000
ROA not after: Thu 26 Feb 2026 03:35:57 +0000
asID: 984
IP address blocks: 45.201.33.0/24 maxlen: 24
45.201.42.0/24 maxlen: 24
45.204.69.0/24 maxlen: 24
45.204.75.0/24 maxlen: 24
45.204.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81802 (0x13f8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 1 03:35:57 2025 GMT
Not After : Feb 26 03:35:57 2026 GMT
Subject: CN=67c280a0-ce70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:fd:cc:5c:20:cb:b5:08:13:49:c1:36:2b:
8a:03:2c:94:a3:35:3a:fa:85:8e:b1:65:f7:1b:0d:
7f:8a:d0:da:52:63:81:94:5e:d2:58:be:e7:49:52:
07:5d:93:e9:8d:0b:04:7c:d0:fc:34:91:c5:83:c4:
3f:3a:6b:f1:34:7d:6e:75:5c:b3:16:e6:0d:c4:5e:
ed:26:d7:c5:0c:a8:99:b0:db:02:e1:af:64:b4:48:
ba:38:21:ba:02:c9:3f:28:8a:32:c0:e9:f5:c7:90:
b7:5b:ca:05:ea:0f:f9:db:8b:08:44:ea:28:12:2e:
28:2f:ab:d6:2a:c1:80:1b:b1:b7:92:b0:62:df:96:
80:77:37:75:bf:95:d3:23:ce:49:15:d1:9a:41:0e:
93:d5:2a:31:fb:35:13:02:40:2b:8c:a4:be:a2:15:
ba:3f:db:4c:bc:a9:6c:a4:8d:a1:ff:d1:0f:fc:3b:
29:d7:af:5b:ea:18:c3:46:92:e0:46:25:05:e5:1b:
bc:00:52:60:34:cb:6f:ff:c2:ce:00:6f:67:12:f9:
48:d4:7f:af:b7:90:86:a1:74:f7:5f:42:12:7f:99:
7a:a8:ff:05:41:ba:e0:db:89:d5:7a:b1:79:60:10:
f2:aa:b4:60:f2:5e:3b:cd:e5:e6:76:28:96:10:6c:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:58:39:98:9E:3F:5E:EC:FC:5A:1C:B8:9E:C8:37:53:5C:94:E6:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B6D46CAF64E11EFACE2E478762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.33.0/24
45.201.42.0/24
45.204.69.0/24
45.204.75.0/24
45.204.78.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f4:39:6a:a6:cd:98:d3:2e:bb:21:21:7d:1a:25:ee:8d:b0:
c9:a9:11:f8:81:ce:58:b0:48:4f:bb:6e:a9:11:b5:2b:41:28:
fd:0a:e5:48:2a:37:b1:9c:7b:bc:7d:27:27:5c:bc:d3:cb:32:
43:a7:67:3e:ac:33:27:e1:59:9a:8d:07:55:ba:cd:ed:e4:80:
3c:5f:ad:f8:cf:93:18:21:b9:1e:7b:b5:4c:54:ab:6c:9f:9a:
da:fe:9c:ea:7c:fa:97:52:b0:70:41:d2:51:bc:f0:20:f5:3b:
a4:ca:30:32:8a:82:f9:f9:b7:8d:24:28:bf:f4:2d:42:7c:10:
bf:90:b7:73:96:b7:ae:21:c7:cf:c4:ca:50:6f:dc:78:cf:d6:
5f:7c:d7:0f:3f:c3:55:7a:d9:e7:bf:8c:a2:d6:40:88:1c:23:
3e:96:58:1a:b4:34:4f:59:50:84:e1:01:ef:84:b2:f9:24:80:
79:ad:f8:8a:d7:f5:e6:50:10:37:00:25:81:ac:0b:e8:96:f8:
5f:fe:7a:65:93:f0:65:96:c6:d0:ea:58:3e:4d:87:37:4c:36:
ca:c6:99:ad:01:e8:60:89:78:09:ce:ce:27:93:88:88:7b:ec:
57:14:58:2e:b9:b1:51:4a:09:ae:4b:c9:30:d7:c5:b3:65:a4:
4d:5c:eb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:56 2025 by rpki-client