Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E56F1A603EC11F0AC3570A0762E951A.roa
File: 8E56F1A603EC11F0AC3570A0762E951A.roa (raw, json)
Hash identifier: EvXIwYIF8Spc+qL1GISx79nIFV+tDNnjKKl0kWum07E=
Subject key identifier: 05:96:CB:B3:27:71:E3:13:C8:A6:18:6C:38:F2:CC:D2:E1:DF:44:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E56F1A603EC11F0AC3570A0762E951A.roa
Signing time: Tue 18 Mar 2025 11:31:38 +0000
ROA not before: Tue 18 Mar 2025 11:31:34 +0000
ROA not after: Sun 27 Apr 2025 11:31:34 +0000
asID: 202656
IP address blocks: 45.192.50.0/24 maxlen: 24
45.192.54.0/24 maxlen: 24
45.192.63.0/24 maxlen: 24
45.195.160.0/24 maxlen: 24
45.199.192.0/24 maxlen: 24
45.199.194.0/24 maxlen: 24
45.199.248.0/24 maxlen: 24
45.199.252.0/24 maxlen: 24
45.199.254.0/24 maxlen: 24
45.200.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83627 (0x146ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 11:31:34 2025 GMT
Not After : Apr 27 11:31:34 2025 GMT
Subject: CN=67d9599a-b335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:43:a2:7b:3c:c4:34:e6:ed:57:dc:e2:8d:
63:bf:6e:db:60:3a:9a:82:37:9f:1f:92:d7:86:01:
65:0f:87:35:01:da:73:d0:81:77:ff:f2:0f:d2:7b:
ff:71:65:c5:af:54:90:c1:7e:03:fa:1c:1e:e8:51:
03:55:28:07:0b:57:e3:eb:3d:39:7a:7b:a9:d0:6a:
78:d7:e7:25:b6:58:1c:73:e8:48:12:c5:c6:f8:78:
71:49:ed:b8:fa:88:2f:18:bf:ee:55:bb:20:0b:bd:
0e:77:1d:2e:ea:8c:07:1d:69:70:fc:64:72:b0:bc:
6d:1f:87:f7:0d:24:49:47:be:5e:a5:01:b0:5f:3c:
a8:bb:8e:31:c2:01:41:5e:01:f5:53:4d:2c:e0:4f:
ef:1b:21:84:67:62:7c:52:34:09:16:60:2e:35:92:
7a:fd:66:e3:07:73:c3:23:b9:8f:ad:fe:74:a7:d9:
b1:2e:2b:11:10:56:29:8e:37:8f:a8:48:27:f4:14:
1a:47:64:b1:9a:ab:73:0a:bb:b5:e3:d2:c2:92:1d:
7f:44:5a:9f:d5:6d:0c:aa:92:6e:c4:36:01:5f:32:
1e:42:dd:12:98:7f:52:77:df:53:07:bf:2f:bb:dd:
f7:57:bd:bc:c4:7f:75:23:ac:5e:bc:c5:62:c2:b6:
01:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:96:CB:B3:27:71:E3:13:C8:A6:18:6C:38:F2:CC:D2:E1:DF:44:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E56F1A603EC11F0AC3570A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.50.0/24
45.192.54.0/24
45.192.63.0/24
45.195.160.0/24
45.199.192.0/24
45.199.194.0/24
45.199.248.0/24
45.199.252.0/24
45.199.254.0/24
45.200.178.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:1f:fb:96:a5:ba:da:fc:d0:fc:f9:db:c7:36:e3:0c:f7:ed:
c4:26:aa:8c:f4:11:ea:6c:80:d7:d1:b4:74:fd:aa:bc:1a:07:
ff:d4:c4:41:e3:f3:57:8d:69:30:73:8b:73:d4:df:8e:3c:70:
c4:f3:8f:7e:6d:88:3e:82:c4:22:96:82:f7:17:b1:0b:c7:64:
a2:5f:22:98:8c:3a:9b:7b:54:90:e6:64:54:d4:cc:de:22:48:
08:1e:e8:0b:84:67:ee:eb:f9:23:17:26:62:61:b9:6b:4c:f5:
0c:14:dc:b5:48:3f:0e:0a:9b:40:42:aa:f9:6f:c7:d2:04:eb:
8d:7c:17:d2:25:6f:56:ae:25:2e:73:c2:0a:ea:9c:d7:e1:b3:
fb:70:5c:8d:3b:98:94:7e:47:b1:9c:0e:34:e1:07:86:0e:53:
2b:b4:94:32:ac:15:2a:3e:eb:9e:2a:7a:44:a7:d3:a6:66:fd:
aa:83:82:a2:70:e7:60:70:4e:81:08:3f:d0:d2:43:3e:cb:e7:
fd:bf:d4:01:4b:a9:fe:c4:40:36:db:44:19:ed:5e:9a:39:48:
99:fc:73:63:38:d4:68:77:e1:7f:af:5d:20:e8:fe:58:18:cf:
40:83:70:33:fc:e7:2c:ae:68:d7:af:29:5d:27:58:a6:8f:ff:
db:76:f3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:49 2025 by rpki-client