Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50A76E4207AE11F08F0DA7AD762E951A.roa
File: 50A76E4207AE11F08F0DA7AD762E951A.roa (raw, json)
Hash identifier: hNQrg6X8x+MY8HHyeC6EQNQ3+C0s7Ux9V1XkrXrRico=
Subject key identifier: 7D:55:3B:D0:0F:AD:4E:D4:25:A5:F4:8F:4F:FE:95:BA:16:53:0A:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50A76E4207AE11F08F0DA7AD762E951A.roa
Signing time: Sun 23 Mar 2025 06:16:11 +0000
ROA not before: Sun 23 Mar 2025 06:16:07 +0000
ROA not after: Tue 08 Apr 2025 06:16:07 +0000
asID: 21859
IP address blocks: 45.196.136.0/24 maxlen: 24
45.196.137.0/24 maxlen: 24
45.196.138.0/24 maxlen: 24
45.204.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83888 (0x147b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 23 06:16:07 2025 GMT
Not After : Apr 8 06:16:07 2025 GMT
Subject: CN=67dfa72b-1fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:ca:46:d8:d3:83:3e:f5:d9:07:92:ff:7e:
c0:c0:49:28:13:33:de:2e:00:89:fe:26:19:3d:27:
e5:27:d9:b1:50:9b:54:5d:5b:8a:52:e2:66:67:04:
4c:91:8d:96:4f:2e:52:31:f7:9a:f7:12:4f:5b:c4:
f5:d8:4f:e0:94:65:fc:2a:ab:81:b4:64:9e:10:48:
fa:89:fb:2c:af:46:c5:ee:e8:bc:fc:8d:e3:14:90:
9c:4b:74:05:4c:5c:97:b4:05:b7:72:bc:3c:4d:2c:
64:b4:40:e0:27:99:0e:33:7b:5b:44:bd:51:0a:69:
e8:6a:8e:9a:c8:9c:a5:88:fe:f8:24:b5:78:4d:f8:
52:8f:37:c7:1d:a1:f3:a6:43:91:f3:ae:80:f6:6d:
97:0f:8e:a4:c3:aa:f7:ac:2b:e6:e4:c5:e0:75:28:
d6:96:ff:d3:42:53:99:c3:48:7d:99:44:47:68:cd:
ea:e5:56:27:fc:20:1f:df:9d:bf:ac:5b:a4:c3:38:
66:f3:22:a9:13:95:c7:a9:bf:4e:6f:a8:bc:02:90:
9b:21:be:7c:61:26:55:a2:b5:63:e0:d7:f3:6b:ad:
46:ca:7e:68:82:2e:7f:56:b9:82:16:b0:f6:4d:18:
b5:54:34:73:8f:5f:c1:00:11:85:95:ba:51:11:71:
34:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:55:3B:D0:0F:AD:4E:D4:25:A5:F4:8F:4F:FE:95:BA:16:53:0A:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50A76E4207AE11F08F0DA7AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.136.0-45.196.138.255
45.204.77.0/24
Signature Algorithm: sha256WithRSAEncryption
18:72:78:05:0a:d4:7a:84:b7:0e:4d:0d:9e:43:b9:e6:53:03:
34:89:e5:81:45:79:06:9b:7c:5a:82:4e:42:c9:b0:c0:d4:00:
67:ca:ce:67:37:50:39:6c:36:65:aa:81:bd:a0:16:d8:78:bb:
19:8d:44:1f:d2:dc:ed:81:2a:47:2c:05:b6:3c:0c:0e:fb:63:
a6:39:67:6b:53:25:38:dd:81:35:97:1b:ac:d1:80:a7:1f:df:
23:72:b0:5b:17:d3:5b:1b:78:6a:1e:10:99:fc:0c:b4:2f:55:
59:84:ba:7f:54:56:d4:16:6e:69:ac:26:66:48:83:b1:28:05:
8c:20:be:17:83:4f:9b:61:a5:17:74:fe:fc:d1:92:b1:65:15:
98:3a:80:da:7f:c5:72:fe:c8:79:90:af:c4:68:81:57:af:99:
2e:98:f6:08:68:f1:45:3a:23:20:96:53:3f:d2:db:a4:27:5c:
8a:4b:b7:3d:87:c6:97:1b:58:41:dd:8e:77:a9:d9:6a:11:be:
80:ac:52:fd:18:c0:1b:f3:ee:6f:b4:b9:f4:2a:d7:5b:fe:d2:
b6:a9:ca:c3:d2:70:49:f3:0c:1e:d3:4f:a2:c4:c5:ac:a6:e4:
ce:42:41:59:3c:87:c9:ab:7f:21:d3:ba:3f:ff:6c:4e:47:a2:
e0:9b:b8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:35 2025 by rpki-client