Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67D52C52F57611EF9C55819E762E951A.roa
File: 67D52C52F57611EF9C55819E762E951A.roa (raw, json)
Hash identifier: 9RJEVxmR2BJDWQWTh5AXL50mN6KVzKCtEz1/dcl1DGk=
Subject key identifier: A1:BE:00:0F:37:4A:03:C4:14:81:AE:64:DC:C7:7D:1E:BD:8D:BE:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013BBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67D52C52F57611EF9C55819E762E951A.roa
Signing time: Fri 28 Feb 2025 01:50:37 +0000
ROA not before: Fri 28 Feb 2025 01:50:33 +0000
ROA not after: Sat 19 Feb 2028 01:50:33 +0000
asID: 17561
IP address blocks: 45.195.2.0/24 maxlen: 24
45.195.15.0/24 maxlen: 24
45.195.96.0/24 maxlen: 24
45.195.97.0/24 maxlen: 24
45.195.98.0/24 maxlen: 24
45.195.99.0/24 maxlen: 24
45.195.100.0/24 maxlen: 24
45.195.101.0/24 maxlen: 24
45.195.102.0/24 maxlen: 24
45.195.103.0/24 maxlen: 24
45.204.250.0/24 maxlen: 24
45.204.251.0/24 maxlen: 24
45.204.252.0/24 maxlen: 24
45.204.253.0/24 maxlen: 24
45.204.254.0/24 maxlen: 24
45.207.162.0/24 maxlen: 24
45.207.164.0/24 maxlen: 24
45.207.167.0/24 maxlen: 24
45.207.174.0/24 maxlen: 24
45.207.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80828 (0x13bbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 01:50:33 2025 GMT
Not After : Feb 19 01:50:33 2028 GMT
Subject: CN=67c1166d-ab64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:29:cb:fc:e0:51:8f:12:75:95:52:ae:b1:
2b:fe:8f:fc:12:8f:88:9b:d2:c1:bb:95:d3:7d:06:
d4:60:1f:b4:81:62:bd:a3:c5:b1:6a:a6:1f:e6:b5:
68:9a:c7:66:62:9f:76:ba:f4:03:a2:4e:22:d1:9b:
b7:ca:a9:40:e0:24:68:0c:0b:be:97:9f:67:ef:75:
7e:cd:4e:9f:64:a1:b0:93:c3:c5:f4:7e:7f:51:6d:
86:85:cc:fc:f5:38:2c:c1:05:da:b7:f0:97:ad:5b:
27:80:5a:f8:cd:d1:71:e7:d8:ca:4f:75:57:ac:27:
2e:1f:de:68:5a:39:f2:0a:a2:fb:e3:51:54:ea:02:
8c:42:ba:c8:c5:52:05:ea:25:e4:59:a6:9a:82:e8:
68:87:b7:5d:8b:c8:62:9c:34:0f:ac:a8:96:80:96:
2d:78:a7:4f:08:4c:71:a6:f3:6d:34:75:7a:f0:6e:
7a:78:4c:1c:39:00:5a:d1:18:45:e1:82:ed:4c:e2:
e1:b9:16:6f:c4:7e:e9:6f:3c:db:5a:51:4f:f2:fb:
a3:d4:84:de:2c:d6:fd:45:f8:aa:a5:98:df:95:d6:
a2:a7:2f:a5:0a:a9:01:f8:4e:25:d3:be:45:6f:43:
c5:4c:8e:18:cf:c5:50:5b:95:b1:5a:a9:47:46:10:
45:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BE:00:0F:37:4A:03:C4:14:81:AE:64:DC:C7:7D:1E:BD:8D:BE:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67D52C52F57611EF9C55819E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.2.0/24
45.195.15.0/24
45.195.96.0/21
45.204.250.0-45.204.254.255
45.207.162.0/24
45.207.164.0/24
45.207.167.0/24
45.207.174.0/23
Signature Algorithm: sha256WithRSAEncryption
98:54:9a:84:19:8f:d0:72:8b:b9:41:22:66:2e:ae:d1:28:22:
bd:d2:9a:d4:3b:e3:bc:19:83:25:2a:78:0a:8d:74:db:8b:b6:
3e:59:b1:7d:71:e6:50:f3:4a:37:92:31:31:c5:6f:64:4e:6d:
dc:14:aa:b0:8b:e8:f1:5e:df:eb:ec:7f:9a:29:e4:b5:ee:b9:
ff:23:51:c4:69:f1:82:b3:58:c4:2e:96:a8:15:71:5b:80:37:
14:1d:94:26:88:99:35:54:2c:8a:f3:89:3e:55:04:aa:81:58:
ca:f2:16:08:7d:cd:fa:ca:f3:d9:9e:88:a1:d7:73:f7:c9:b6:
e9:b3:91:86:97:21:80:7a:97:ae:77:09:bb:33:4c:b7:c2:d1:
28:87:17:3a:f2:6c:cc:aa:b9:a6:71:06:81:e8:8d:ce:a2:52:
60:e0:84:38:f3:28:a3:fc:2f:00:0d:75:ea:59:47:bc:5d:87:
a6:ba:c1:f5:4e:c0:ab:9e:0f:ef:76:61:d2:54:f7:da:de:0a:
d1:fe:b6:01:b0:03:02:34:88:1b:e5:79:c2:8b:e7:9e:bb:b5:
cf:5f:75:6a:56:27:0e:f8:73:ff:6f:9b:1a:de:2c:da:00:69:
e6:6b:17:69:d7:b8:35:c2:73:b1:fc:dd:3a:c7:2e:35:d4:fd:
cd:3d:c7:4c
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIDATu8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI4MDE1MDMzWhcNMjgwMjE5MDE1MDMzWjAYMRYw
FAYDVQQDEw02N2MxMTY2ZC1hYjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2Espy/zgUY8SdZVSrrEr/o/8Eo+Im9LBu5XTfQbUYB+0gWK9o8WxaqYf
5rVomsdmYp92uvQDok4i0Zu3yqlA4CRoDAu+l59n73V+zU6fZKGwk8PF9H5/UW2G
hcz89TgswQXat/CXrVsngFr4zdFx59jKT3VXrCcuH95oWjnyCqL741FU6gKMQrrI
xVIF6iXkWaaaguhoh7ddi8hinDQPrKiWgJYteKdPCExxpvNtNHV68G56eEwcOQBa
0RhF4YLtTOLhuRZvxH7pbzzbWlFP8vuj1ITeLNb9RfiqpZjfldaipy+lCqkB+E4l
075Fb0PFTI4Yz8VQW5WxWqlHRhBFSQIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFKG+
AA83SgPEFIGuZNzHfR69jb6+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82N0Q1MkM1MkY1NzYxMUVGOUM1NTgxOUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQALcMCAwQALcMPAwQDLcNgMAwD
BAEtzPoDBAAtzP4DBAAtz6IDBAAtz6QDBAAtz6cDBAEtz64wDQYJKoZIhvcNAQEL
BQADggEBAJhUmoQZj9Byi7lBImYurtEoIr3SmtQ747wZgyUqeAqNdNuLtj5ZsX1x
5lDzSjeSMTHFb2RObdwUqrCL6PFe3+vsf5op5LXuuf8jUcRp8YKzWMQulqgVcVuA
NxQdlCaImTVULIrziT5VBKqBWMryFgh9zfrK89meiKHXc/fJtumzkYaXIYB6l653
CbszTLfC0SiHFzrybMyquaZxBoHojc6iUmDghDjzKKP8LwANdepZR7xdh6a6wfVO
wKueD+92YdJU99reCtH+tgGwAwI0iBvlecKL5567tc9fdWpWJw74c/9vmxreLNoA
aeZrF2nXuDXCc7H83TrHLjXU/c09x0w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:56 2025 by rpki-client