Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AEA8B0003F411F0AE6A7A50762E951A.roa
File: 9AEA8B0003F411F0AE6A7A50762E951A.roa (raw, json)
Hash identifier: sxVbHnoNjCZ0L9cdy+KGZCuK88R+ARkb+gSbBFDS1aQ=
Subject key identifier: 5E:12:E5:BD:D6:97:34:2E:EB:D2:50:94:19:B8:D3:C0:46:55:0E:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AEA8B0003F411F0AE6A7A50762E951A.roa
Signing time: Tue 18 Mar 2025 12:29:15 +0000
ROA not before: Tue 18 Mar 2025 12:29:11 +0000
ROA not after: Sun 27 Apr 2025 12:29:11 +0000
asID: 44559
IP address blocks: 45.199.212.0/24 maxlen: 24
45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
45.199.237.0/24 maxlen: 24
45.199.238.0/24 maxlen: 24
45.199.239.0/24 maxlen: 24
45.199.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83643 (0x146bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 12:29:11 2025 GMT
Not After : Apr 27 12:29:11 2025 GMT
Subject: CN=67d9671b-137a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:79:4e:73:97:13:88:9d:49:91:f2:b5:75:
7a:76:fa:49:46:74:94:7e:f9:20:30:d0:c3:76:2f:
8d:b5:45:f5:6f:f8:0c:26:5b:55:6b:83:ea:19:d6:
8d:e9:c9:99:84:ec:be:dd:fc:16:5d:c8:49:cf:bc:
86:52:63:22:61:3f:95:4a:7d:b8:fa:58:b9:b6:e7:
b8:cb:4e:62:bb:a8:f3:da:a9:4d:27:9d:09:6e:9b:
64:19:bc:0b:89:e7:7c:85:2a:21:9e:2c:79:81:a2:
35:2b:3c:f0:70:02:24:80:df:99:c4:3a:10:0e:90:
d6:f6:7b:2a:18:a6:3f:49:91:c7:aa:4a:34:07:2e:
85:f4:89:1a:64:c7:27:f4:b8:4e:8a:88:f1:c3:8e:
6d:de:40:e8:f3:01:f3:ba:05:ba:21:11:90:9b:41:
1a:62:65:66:f4:69:ef:87:7a:5c:31:b7:a0:cb:f5:
1a:86:53:f0:c0:ed:65:6a:2b:94:98:af:f2:e2:d5:
d9:58:3c:a8:a3:22:f6:a3:15:70:04:8f:3f:9b:cb:
c8:13:70:8c:48:4c:2e:ac:24:89:b1:5f:14:94:ef:
b0:df:79:1f:dc:53:61:8d:b7:00:e7:14:cc:a6:cb:
04:73:3f:40:cc:33:2b:64:e6:55:80:d1:dd:fc:58:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:12:E5:BD:D6:97:34:2E:EB:D2:50:94:19:B8:D3:C0:46:55:0E:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AEA8B0003F411F0AE6A7A50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.212.0/24
45.199.216.0-45.199.220.255
45.199.237.0-45.199.240.255
Signature Algorithm: sha256WithRSAEncryption
a4:81:5b:28:d2:6a:83:f5:6c:f3:a0:fc:36:8c:30:3f:5d:fc:
df:c2:6b:79:a8:f3:53:bd:66:66:e2:58:91:33:ed:86:0f:6b:
9c:cb:e2:a0:6c:44:0f:e8:80:04:6e:8f:93:74:b8:89:2d:48:
4b:32:7a:82:58:3d:27:ae:39:3b:4c:02:6d:29:d3:a4:ed:ab:
ed:37:73:c9:65:4c:18:2c:05:68:0e:c6:9a:23:f6:e9:41:9f:
dc:c4:53:08:e8:a0:c5:26:b3:4b:d5:08:7a:c9:ce:08:f4:90:
be:8b:fa:b9:b7:75:4b:e6:a0:04:84:c3:a9:9e:eb:0a:48:67:
dd:82:cd:1c:14:7d:9e:0d:e7:92:a9:e2:f8:07:5c:02:e7:e8:
af:46:a1:d7:6f:e4:93:e6:93:cb:42:2d:52:76:09:be:87:85:
bc:8a:ea:1a:fb:13:7f:cd:62:e1:ab:c9:0f:c9:2d:f8:99:8f:
58:6d:43:71:78:bc:48:d4:e1:f8:eb:91:c8:51:58:e6:6f:f0:
ea:40:c9:9f:6f:d5:d9:94:02:19:c9:ee:fa:83:06:9a:52:e3:
6f:a3:d2:47:0d:19:78:d8:e2:fe:a9:f8:6a:d1:21:d0:59:ac:
03:54:b8:59:a6:ba:21:9f:3c:41:97:46:ef:ae:d7:4d:0d:98:
ea:ee:a0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:46 2025 by rpki-client