Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AD53B50F8B811EF8D0A7860762E951A.roa
File: 6AD53B50F8B811EF8D0A7860762E951A.roa (raw, json)
Hash identifier: zwEbhZ/U8XUkXPfYXrwhPJ+q+F108Vi9eg0Su03OzpY=
Subject key identifier: F7:A1:1D:9E:F8:F8:C9:72:92:59:1B:D3:13:41:65:C9:EA:E0:8E:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014293
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AD53B50F8B811EF8D0A7860762E951A.roa
Signing time: Tue 04 Mar 2025 05:20:42 +0000
ROA not before: Tue 04 Mar 2025 05:20:38 +0000
ROA not after: Wed 04 Mar 2026 05:20:38 +0000
asID: 984
IP address blocks: 45.195.105.0/24 maxlen: 24
45.195.108.0/24 maxlen: 24
45.195.109.0/24 maxlen: 24
45.195.110.0/24 maxlen: 24
45.200.155.0/24 maxlen: 24
45.200.156.0/24 maxlen: 24
45.203.132.0/24 maxlen: 24
45.207.25.0/24 maxlen: 24
45.207.28.0/24 maxlen: 24
45.207.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82579 (0x14293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 05:20:38 2025 GMT
Not After : Mar 4 05:20:38 2026 GMT
Subject: CN=67c68daa-31a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:ab:e5:b9:d6:04:6b:65:56:78:61:0a:70:
ba:dd:ee:a9:1e:3f:a3:13:a7:c9:2a:0e:d9:76:22:
bf:46:7c:38:94:ee:c8:e1:48:0d:0b:32:9e:05:b5:
ad:80:51:2f:15:3b:14:e9:f1:db:c7:24:36:99:d0:
c5:29:f1:46:37:09:49:0b:7c:9c:57:ed:f2:e6:cb:
d9:b0:0f:e0:de:20:7b:e3:3a:50:e6:94:7a:09:5e:
ce:37:b9:d8:39:c9:3c:c6:34:57:31:8f:98:32:a7:
44:80:03:99:e5:97:6d:ec:05:c8:28:9e:fa:50:9f:
1f:ad:9d:27:a1:67:f9:22:63:97:42:ae:a5:69:4b:
f1:f6:f4:74:00:f7:99:7c:88:72:50:c1:6a:d5:79:
80:76:b2:f9:57:fa:d1:78:7b:fa:8b:8b:f0:a4:26:
d9:e1:e3:a3:a7:d2:57:ee:7f:87:d9:4e:84:27:52:
8b:ef:c6:50:71:66:a1:54:87:43:b8:35:13:50:84:
79:5a:a0:f4:78:77:6d:bf:c6:fe:8e:58:8d:f3:2e:
af:30:d4:d9:bd:e2:64:22:8e:75:b5:12:c3:50:cb:
82:a3:7d:60:eb:b5:b9:eb:b2:af:63:a7:b0:18:54:
c5:49:31:54:b5:ff:41:70:d7:98:71:ff:f8:29:8b:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A1:1D:9E:F8:F8:C9:72:92:59:1B:D3:13:41:65:C9:EA:E0:8E:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AD53B50F8B811EF8D0A7860762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.105.0/24
45.195.108.0-45.195.110.255
45.200.155.0-45.200.156.255
45.203.132.0/24
45.207.25.0/24
45.207.28.0/24
45.207.30.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:22:45:48:98:8a:6b:a8:06:2c:9c:8a:62:90:46:20:51:10:
cd:2c:a3:fc:31:47:19:22:2e:50:97:59:c2:6c:29:b2:bd:ff:
31:68:d4:46:f6:9e:7e:ce:91:62:97:b7:ab:5a:23:11:b8:85:
41:78:16:3f:07:86:0b:ba:f5:c5:00:42:11:9a:42:1c:c4:8e:
a0:73:11:b2:2d:f4:0e:59:a8:58:02:c5:d5:66:6f:82:bd:4e:
57:30:60:af:32:83:07:e4:e3:76:9d:46:d9:fc:db:2b:71:d9:
bd:37:49:2d:2f:d2:82:69:83:6b:c2:b9:e1:7d:cd:a7:52:8f:
d4:55:48:5f:6f:3b:33:81:dd:73:df:2e:d6:56:a8:fe:87:3b:
f7:51:67:13:98:2b:8b:c4:52:5d:ef:07:73:e8:3e:9f:7e:ca:
34:ce:00:6a:a1:e4:ac:cf:24:c7:f6:0b:34:e2:b2:ab:54:27:
f9:96:7c:51:44:7c:27:16:24:79:b3:76:7e:34:b7:1e:ff:ce:
9d:e0:ec:ef:0b:2e:79:a7:e1:60:8d:1a:ba:4b:4b:86:51:e7:
ad:b0:4e:b7:bd:06:e1:7c:36:5c:d3:e8:7d:a0:2b:09:1d:db:
91:60:0f:af:6d:be:af:48:f9:82:ca:a4:ac:0b:46:ef:50:91:
44:39:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:32 2025 by rpki-client