Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD1BE0DCFCD111EF9390BE89762E951A.roa
File: AD1BE0DCFCD111EF9390BE89762E951A.roa (raw, json)
Hash identifier: AVU6HRPrEQrSrm0pv2bzYH9gOscoDGgF4/GbYwWLcdk=
Subject key identifier: C2:3D:48:AD:E1:36:58:E8:A5:49:A2:A3:98:D1:6D:C7:A8:F6:04:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014453
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD1BE0DCFCD111EF9390BE89762E951A.roa
Signing time: Sun 09 Mar 2025 10:31:35 +0000
ROA not before: Sun 09 Mar 2025 10:31:30 +0000
ROA not after: Tue 15 Apr 2025 10:31:30 +0000
asID: 395793
IP address blocks: 45.194.1.0/24 maxlen: 24
45.194.4.0/24 maxlen: 24
45.194.5.0/24 maxlen: 24
45.195.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83027 (0x14453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 9 10:31:30 2025 GMT
Not After : Apr 15 10:31:30 2025 GMT
Subject: CN=67cd6e07-2da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c8:0b:a3:65:49:5a:c9:da:9d:a2:61:67:8c:
aa:39:05:4e:7f:ce:10:e1:c0:3a:9d:cd:1e:cd:d2:
83:d6:35:0c:f1:31:9d:2f:1c:8b:61:27:00:e5:d2:
f6:f9:ca:3c:4a:56:2f:3a:df:dd:ff:e9:24:98:a8:
9e:34:2f:68:66:54:f6:2d:d3:5b:b6:7b:48:49:a0:
31:0e:69:2d:f5:bb:03:7a:7e:f8:2e:55:b3:61:cb:
c3:b0:17:b2:36:f7:fd:1d:27:86:2f:96:51:b8:00:
8d:30:71:8f:d4:fa:1a:6e:20:b4:5c:2c:1b:9e:a6:
fe:22:f2:ca:d3:42:6b:96:31:4e:5c:79:38:3f:fa:
88:15:46:09:d0:80:ba:12:eb:45:bb:ae:42:79:93:
38:52:24:02:34:09:d4:fc:4f:ae:80:ee:09:66:db:
16:53:e3:85:0a:05:11:51:a0:fd:4b:b9:13:56:3e:
70:6d:ad:dc:26:36:89:45:27:93:f4:5b:f0:4b:a8:
18:fe:05:60:2e:b2:cf:b8:0f:35:ca:a9:ac:9f:7f:
71:8e:85:d5:a6:3b:6e:83:cf:d4:57:0e:d8:33:43:
ec:d3:d1:ca:3b:10:e0:cc:2c:8a:c9:d9:e8:bd:16:
07:90:6c:42:c5:2e:92:93:1e:a7:f4:e1:5b:67:ec:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3D:48:AD:E1:36:58:E8:A5:49:A2:A3:98:D1:6D:C7:A8:F6:04:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD1BE0DCFCD111EF9390BE89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.1.0/24
45.194.4.0/23
45.195.63.0/24
Signature Algorithm: sha256WithRSAEncryption
98:90:8f:36:14:6e:01:60:06:be:81:0b:39:f6:7f:df:0a:4a:
5e:08:a3:53:e9:87:fa:a5:34:24:d4:65:61:bd:32:ea:f1:c2:
5a:fd:e4:72:1e:c3:ef:70:ec:2b:0b:a5:34:4e:be:da:d0:b0:
b0:a8:ab:9c:25:8e:69:57:73:a9:f4:e8:7d:ab:0c:ec:43:44:
21:f9:ac:75:e2:1c:aa:73:44:09:b9:15:64:d5:84:fe:8b:58:
0d:ea:6b:5c:e7:d1:f0:52:cb:83:a8:62:ea:48:c5:4d:6f:3b:
91:ff:80:50:1a:da:a8:24:b1:6a:92:00:7a:c2:54:7f:40:a4:
68:c4:f4:2a:dd:db:9b:e4:0f:c2:4b:17:37:a0:38:5a:48:17:
bb:19:0a:2e:71:29:40:fc:ce:45:c7:0e:7d:1c:e4:fd:b9:83:
64:ed:85:dd:03:6f:16:06:ac:3b:a0:2f:df:cc:ec:84:43:a7:
0c:37:ba:76:91:a7:90:4b:4c:54:84:1b:c7:54:5b:7c:b6:81:
49:5d:a9:fa:df:c4:61:0f:17:7b:1a:a8:1a:61:fc:33:8c:3d:
14:fa:76:a4:cc:9d:fb:71:2f:95:6d:c3:a3:f8:90:a4:fa:be:
9a:d7:21:7c:8f:47:3c:48:d0:0c:c8:39:54:34:9e:85:8f:4f:
eb:c1:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:56 2025 by rpki-client