Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99EEAF88F87311EF9BF3337F762E951A.roa
File: 99EEAF88F87311EF9BF3337F762E951A.roa (raw, json)
Hash identifier: jSmyfYf7ZYKnd4jLzD7zb5ZNogY9kcaBC3Oqf3LCKEA=
Subject key identifier: FC:A3:BD:E2:0F:94:0D:EB:A7:46:6B:BE:C6:8F:04:2F:CF:B8:34:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014265
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99EEAF88F87311EF9BF3337F762E951A.roa
Signing time: Mon 03 Mar 2025 21:08:06 +0000
ROA not before: Mon 03 Mar 2025 21:08:02 +0000
ROA not after: Fri 04 Apr 2025 21:08:02 +0000
asID: 395793
IP address blocks: 45.192.165.0/24 maxlen: 24
45.192.166.0/24 maxlen: 24
45.192.227.0/24 maxlen: 24
45.192.228.0/22 maxlen: 24
45.192.232.0/22 maxlen: 24
45.192.244.0/24 maxlen: 24
45.195.133.0/24 maxlen: 24
45.201.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82533 (0x14265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 21:08:02 2025 GMT
Not After : Apr 4 21:08:02 2025 GMT
Subject: CN=67c61a36-0264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:35:1c:98:73:be:4f:e7:94:a8:af:62:21:
c9:7c:45:71:fe:7d:c7:e4:70:89:a5:ea:26:09:55:
46:0b:fc:3c:09:35:85:a3:34:eb:88:11:06:b5:17:
62:39:c3:58:2e:63:b5:8c:1a:b7:42:9f:cd:eb:04:
26:68:5d:32:36:ce:22:14:4c:64:58:c9:55:51:8f:
26:f1:31:dd:39:29:3f:51:7e:25:77:11:e7:1a:c6:
01:bd:9e:d8:b0:ce:b0:e1:98:ea:33:af:ef:53:7b:
4e:0a:8a:5b:3b:de:a0:80:78:95:63:d6:6c:dd:05:
c8:0f:9a:84:66:71:8e:ad:c3:a5:2e:c4:eb:f3:2f:
03:8f:fc:8c:8b:4f:fa:23:e7:5b:0c:26:6a:9d:01:
dd:1f:b8:af:55:2e:ac:6a:3c:2d:89:04:07:22:95:
94:33:76:67:aa:51:29:b8:2d:33:fa:63:93:41:e8:
75:81:ea:30:59:82:76:87:2f:1b:03:2f:35:fb:b1:
73:a5:57:6f:74:a2:f9:a5:f4:03:a9:42:f2:4f:9d:
42:9f:b0:d6:54:d1:e5:bc:8b:28:b1:54:d1:db:75:
b5:05:ef:29:37:5a:1b:e8:e2:b0:87:a8:73:6c:b5:
e1:e1:95:68:1c:5e:30:ab:6a:34:a9:0f:6f:4b:3d:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A3:BD:E2:0F:94:0D:EB:A7:46:6B:BE:C6:8F:04:2F:CF:B8:34:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99EEAF88F87311EF9BF3337F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.165.0-45.192.166.255
45.192.227.0-45.192.235.255
45.192.244.0/24
45.195.133.0/24
45.201.28.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8e:be:a0:56:58:0d:6c:94:96:4f:6e:3e:58:34:77:89:45:
73:ef:51:74:7c:d2:8b:c8:63:4d:09:37:60:ad:69:0c:18:2e:
15:98:a9:8f:28:c3:9c:60:2d:e1:95:a0:a4:3b:e4:e8:ca:f0:
93:ec:b1:55:39:6f:87:57:94:6c:c7:3a:bf:fb:ee:d9:27:e4:
a4:a8:a1:aa:94:d7:54:6e:2b:59:d1:01:dd:96:74:82:58:bf:
50:04:53:24:61:7a:f4:02:a5:fa:93:c8:fa:e5:4c:8c:9d:35:
6a:00:36:ca:1e:e5:87:90:17:2f:35:ea:2f:3e:aa:56:8e:03:
0d:fe:a1:6b:ce:a5:9d:a5:9e:a4:57:53:e8:b1:b5:f4:44:c4:
a1:81:f9:70:f8:47:55:2b:b2:3e:09:a8:95:e8:88:c6:05:61:
9e:61:9b:3e:85:58:19:d6:ad:20:2e:b5:8b:fe:48:f7:eb:21:
83:87:b6:ef:4c:75:9a:17:56:06:45:d0:a6:15:b2:9d:60:b3:
23:5b:a2:3f:08:8d:45:cc:27:2e:59:32:04:1c:3d:a2:1a:2b:
d0:fb:c9:b6:25:73:86:e9:3a:e6:5f:fb:4c:0f:92:aa:7c:31:
d1:f4:ea:77:10:7c:be:b6:70:38:f4:61:85:b7:ef:82:03:53:
f6:df:98:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:50 2025 by rpki-client