Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/798DE72EF57411EF99B75592762E951A.roa
File: 798DE72EF57411EF99B75592762E951A.roa (raw, json)
Hash identifier: YxNEUicN5NnMJGrmQEtji/1RDCTZkvfaQcSTC9i6vx0=
Subject key identifier: 7A:F7:C7:9D:61:A5:23:31:F3:B2:7C:00:54:E8:22:0D:EE:70:CD:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013BB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/798DE72EF57411EF99B75592762E951A.roa
Signing time: Fri 28 Feb 2025 01:36:48 +0000
ROA not before: Fri 28 Feb 2025 01:36:43 +0000
ROA not after: Sat 19 Feb 2028 01:36:43 +0000
asID: 17561
IP address blocks: 45.204.80.0/24 maxlen: 24
45.204.81.0/24 maxlen: 24
45.204.82.0/24 maxlen: 24
45.204.83.0/24 maxlen: 24
45.204.84.0/24 maxlen: 24
45.204.85.0/24 maxlen: 24
45.204.86.0/24 maxlen: 24
45.204.87.0/24 maxlen: 24
45.204.88.0/24 maxlen: 24
45.204.89.0/24 maxlen: 24
45.204.90.0/24 maxlen: 24
45.204.91.0/24 maxlen: 24
45.204.92.0/24 maxlen: 24
45.204.93.0/24 maxlen: 24
45.204.94.0/24 maxlen: 24
45.204.95.0/24 maxlen: 24
45.204.129.0/24 maxlen: 24
45.204.133.0/24 maxlen: 24
45.204.134.0/24 maxlen: 24
45.204.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80822 (0x13bb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 01:36:43 2025 GMT
Not After : Feb 19 01:36:43 2028 GMT
Subject: CN=67c11330-d4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9f:57:19:80:98:f8:7b:15:47:05:82:85:3e:
60:01:24:5b:f4:ff:18:04:b1:8f:3a:db:f0:a6:7f:
d3:c1:8e:b6:65:47:da:2f:af:0b:db:e8:93:bb:7a:
bc:f1:fe:48:6c:e5:08:bb:91:f0:a8:40:7f:d1:f4:
d1:97:00:17:a4:2b:45:fa:66:87:42:38:42:fe:be:
e1:92:58:9b:2a:a7:c6:e9:7a:31:38:8f:27:d7:1d:
bb:46:57:ab:dd:1b:89:96:f1:cb:b7:5f:45:fb:33:
c0:d9:be:88:79:57:ac:e2:19:88:d6:2f:8f:d5:de:
49:2e:f5:7b:5b:0b:84:34:61:10:94:f5:02:43:36:
20:fa:14:30:99:12:b7:fc:5d:e3:56:5c:ae:e9:fb:
4e:a5:8c:9f:05:40:86:a9:73:0c:be:7b:dc:a2:b8:
86:45:04:80:f3:e4:a8:fa:1c:43:7f:34:97:61:4b:
68:80:1c:de:13:e3:1a:17:ea:3b:d6:fe:a6:00:56:
ff:f9:14:1e:e4:b0:54:3d:8f:dd:ef:9e:c8:d3:c3:
4b:f0:de:f5:33:1f:ba:83:f3:5f:7c:a4:a9:97:f8:
b7:02:2e:c4:94:cd:d8:a7:be:a5:5c:7b:af:7f:a5:
bc:1b:7e:15:d0:14:79:49:6d:19:55:ed:02:79:a1:
4d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F7:C7:9D:61:A5:23:31:F3:B2:7C:00:54:E8:22:0D:EE:70:CD:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/798DE72EF57411EF99B75592762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.80.0/20
45.204.129.0/24
45.204.133.0-45.204.135.255
Signature Algorithm: sha256WithRSAEncryption
0b:76:45:a0:0d:f5:bd:40:81:ff:81:36:71:51:8d:f7:d4:c1:
4e:b3:39:9f:4a:a6:cf:d9:4f:ef:07:89:76:b4:bb:90:c3:10:
94:8d:be:41:6c:9d:55:c1:ba:36:11:2b:6f:18:f5:03:f8:f2:
4f:46:5e:5c:bf:3c:cf:d2:77:46:00:8c:b2:a8:ce:0f:7e:11:
b0:a4:bb:01:62:48:c5:b0:2d:77:be:95:a7:c1:90:b8:c7:b3:
7b:b4:e3:57:e2:2d:78:f4:7a:59:a7:50:e9:38:3d:81:93:75:
78:ee:66:be:01:37:30:e4:fe:e1:0e:a7:d6:16:c0:c1:31:c8:
d5:59:76:d9:9f:c7:14:61:d6:2d:f4:39:74:a4:4d:b0:45:4b:
be:2a:59:52:c8:c6:42:ed:63:f7:d5:21:cd:a0:be:e2:37:d6:
97:65:06:86:0c:e8:6f:3a:b1:9e:02:e2:3b:59:7f:6f:0b:16:
de:2c:25:54:88:01:54:11:a1:9d:50:f0:e1:5a:b8:0a:a2:18:
b7:a4:5d:1e:ca:5a:84:6b:71:f3:b5:f0:8f:a8:4d:fd:11:6e:
e7:e4:e6:88:ed:7e:89:75:a9:1f:74:e0:12:ad:37:ba:85:87:
00:36:a4:a8:10:ca:a9:85:29:04:65:dd:24:fe:90:aa:2d:b4:
56:99:87:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:33 2025 by rpki-client