Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8642E10FF1411EF80688289762E951A.roa
File: A8642E10FF1411EF80688289762E951A.roa (raw, json)
Hash identifier: yO4JomIBjlA/CUoL6/eATP8ypmN6UZ1tkKaQa3Myh6A=
Subject key identifier: FB:90:26:F1:7D:69:4C:BD:E8:F6:29:21:0A:21:9A:54:4D:A7:A1:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8642E10FF1411EF80688289762E951A.roa
Signing time: Wed 12 Mar 2025 07:36:06 +0000
ROA not before: Wed 12 Mar 2025 07:36:02 +0000
ROA not after: Thu 17 Apr 2025 07:36:02 +0000
asID: 6079
IP address blocks: 45.192.64.0/19 maxlen: 24
45.202.32.0/21 maxlen: 24
45.202.40.0/23 maxlen: 24
45.202.42.0/23 maxlen: 24
45.202.44.0/23 maxlen: 24
45.202.124.0/24 maxlen: 24
45.204.78.0/24 maxlen: 24
45.204.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83197 (0x144fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 07:36:02 2025 GMT
Not After : Apr 17 07:36:02 2025 GMT
Subject: CN=67d13966-f63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:b1:4d:b2:ed:09:ee:7d:53:f9:3f:54:28:
43:4a:f3:4a:c7:24:7a:69:5d:13:57:cc:7c:fb:c1:
15:4f:98:f9:91:5e:02:75:69:15:5f:de:50:11:b3:
2d:77:c7:9c:2f:17:6f:b9:21:b3:ac:ce:0c:0f:ad:
22:9c:e5:e4:28:d4:5f:1b:a8:9d:9e:7b:d0:51:4c:
78:e2:9c:8f:5c:83:43:09:f3:6d:98:86:68:be:c2:
a6:10:c1:0d:a6:4b:f6:05:06:84:2c:2b:59:5f:fa:
25:88:16:81:68:8f:1e:32:aa:0a:80:4a:87:fe:a7:
76:1b:f9:b4:b6:ed:00:7c:ff:b8:cf:01:9c:0a:46:
14:65:ab:d3:2d:b4:16:f3:bb:4c:04:5d:46:ab:ce:
7f:73:96:af:e1:17:90:df:51:66:4c:6f:16:2f:51:
a8:56:62:de:e3:83:3d:18:68:c5:af:f7:59:94:10:
b0:dc:4b:3e:c8:ca:ac:10:e1:96:79:fe:db:07:46:
0f:4c:7d:9b:dc:e4:f1:f3:41:5e:cf:e6:bb:3b:f1:
83:3f:ca:1e:0a:72:0b:d8:75:13:cd:c4:19:d4:21:
77:79:6a:69:b2:8c:96:87:74:ea:7c:5c:3a:29:8d:
b0:b6:62:fe:15:f3:aa:57:05:ea:50:b4:e6:60:bc:
bd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:90:26:F1:7D:69:4C:BD:E8:F6:29:21:0A:21:9A:54:4D:A7:A1:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8642E10FF1411EF80688289762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.64.0/19
45.202.32.0-45.202.45.255
45.202.124.0/24
45.204.78.0/24
45.204.112.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:99:ce:67:28:d0:45:93:e7:34:51:01:a5:a4:31:64:07:ad:
b2:65:0b:73:70:0a:5b:87:f8:99:fd:3e:9d:a2:2f:29:9c:8d:
de:1a:78:be:0e:6a:d7:50:94:0e:ab:4c:70:c2:ee:15:a4:6e:
11:d5:53:f8:ec:64:39:4c:e0:67:1b:7c:09:4d:41:0b:7f:d9:
17:37:69:3d:1a:1e:ac:51:2f:02:1d:cc:a7:f0:7c:eb:50:fb:
36:32:0a:67:ea:f0:5f:61:61:1f:cf:65:03:b3:ac:c6:93:80:
f6:6e:f3:e2:29:d7:0c:f3:de:a8:0e:41:fb:e1:7c:ec:4e:fa:
6f:38:f9:a4:da:5d:19:bb:7e:88:17:6a:06:f0:b4:0a:08:3b:
d5:89:59:5a:c5:0d:ed:cf:41:f8:74:5f:b9:c2:be:c2:67:11:
ba:e8:e0:a0:6b:d3:0b:6d:3e:d3:11:81:ad:3c:d6:e9:c5:e0:
e5:cc:e7:dd:e2:5f:bb:01:c3:49:77:1f:bf:df:24:c5:29:73:
f9:d5:eb:b0:5e:ce:9d:10:f0:83:6c:e8:13:36:38:bc:61:7f:
bb:65:a8:21:b3:fc:d0:a6:0d:95:fa:aa:bf:d0:a2:ea:dc:2c:
84:f5:07:cf:e7:88:cc:83:a3:6a:7a:f4:f8:dc:c2:4b:3c:08:
b3:5a:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:11 2025 by rpki-client