Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1031CC60A1C11F088A03283762E951A.roa
File: B1031CC60A1C11F088A03283762E951A.roa (raw, json)
Hash identifier: KgH0xsif+iels+U9Fw6LufTd3avkJGjBcsfygYjPubg=
Subject key identifier: 99:B7:F2:76:58:8A:C0:2D:40:C4:8B:AD:8A:A7:73:09:99:E8:3C:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014846
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1031CC60A1C11F088A03283762E951A.roa
Signing time: Wed 26 Mar 2025 08:31:19 +0000
ROA not before: Wed 26 Mar 2025 08:31:15 +0000
ROA not after: Sat 25 Apr 2026 08:31:15 +0000
asID: 984
IP address blocks: 45.196.101.0/24 maxlen: 24
45.196.102.0/24 maxlen: 24
45.196.103.0/24 maxlen: 24
45.201.43.0/24 maxlen: 24
45.202.90.0/24 maxlen: 24
45.206.6.0/24 maxlen: 24
45.206.7.0/24 maxlen: 24
45.206.8.0/24 maxlen: 24
45.206.15.0/24 maxlen: 24
45.206.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84038 (0x14846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 26 08:31:15 2025 GMT
Not After : Apr 25 08:31:15 2026 GMT
Subject: CN=67e3bb57-8646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:7c:68:51:f5:9f:f5:c2:cb:d5:b0:5c:79:
fd:74:03:14:46:f4:5f:d0:1e:1c:42:da:92:9e:40:
62:7a:04:0a:e3:7f:4d:14:0e:60:fc:da:3c:dc:35:
88:89:21:70:ab:ad:54:b3:b5:18:47:7b:1a:a9:cb:
eb:14:86:1c:dc:95:36:81:cf:46:6a:6e:18:fa:81:
ef:3a:b5:03:25:b1:63:8b:66:49:45:08:e5:d1:5a:
b9:8a:a1:0d:24:35:14:50:ee:90:b7:12:db:0e:67:
7f:33:05:69:7f:66:e5:9d:93:d9:f6:7c:50:06:31:
e6:18:7d:51:f1:b3:53:27:f8:57:67:1e:dd:6f:18:
7f:65:03:31:78:6f:40:68:da:77:ec:ad:2f:28:e4:
99:a8:88:ab:ab:1d:ec:37:0d:36:06:9f:15:eb:91:
63:19:9c:67:73:49:c5:e9:09:c8:ba:07:03:97:8b:
67:3a:19:33:ef:11:58:ff:d8:36:a2:26:28:76:ce:
2b:20:d3:f4:46:c7:f9:98:45:6a:25:70:8b:bd:76:
07:5d:e8:8a:50:88:b6:fb:15:f2:09:5b:b9:d7:f6:
7e:60:c6:f1:2a:30:6b:ee:f2:39:85:d3:9d:7f:d9:
b6:5f:66:d6:0a:eb:eb:7b:3b:1e:f2:d7:4f:84:6c:
84:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B7:F2:76:58:8A:C0:2D:40:C4:8B:AD:8A:A7:73:09:99:E8:3C:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1031CC60A1C11F088A03283762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.101.0-45.196.103.255
45.201.43.0/24
45.202.90.0/24
45.206.6.0-45.206.8.255
45.206.15.0/24
45.206.58.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:2b:29:80:a7:a8:f3:be:a4:8e:72:44:99:34:97:d4:b6:b4:
9f:4d:d3:45:4e:8c:57:07:7c:11:21:cf:f8:b3:ad:8d:e8:15:
c2:b2:bc:40:58:b2:22:1d:9f:b2:53:5c:89:bc:f4:7c:5c:40:
8b:bc:20:bf:8e:21:72:dd:68:85:e2:fc:0b:0a:e5:f5:75:d8:
a8:00:e5:6a:3e:ad:30:b2:b5:83:17:c1:27:e0:d0:b4:c8:d3:
9a:0c:fd:03:dd:c0:11:54:12:d2:3e:b7:15:61:11:64:e7:bb:
60:55:b8:ba:fd:12:fa:23:40:ed:cb:de:72:3f:2d:2f:16:bf:
b0:5d:38:b8:27:23:46:d9:d4:97:7c:06:63:7a:d3:63:c4:14:
2c:f3:32:98:02:f4:4f:25:88:33:67:e6:45:b5:31:b7:0b:a3:
70:8e:32:f8:0e:12:d8:f7:ba:55:84:2a:21:32:8f:cd:37:51:
3c:7a:b0:56:ee:0f:2b:be:6c:0f:4c:16:39:1f:e3:a4:95:ee:
3b:6d:55:e8:2e:ad:94:5d:b1:9e:0e:16:0d:4a:3c:97:b6:26:
c6:f2:06:a0:61:98:23:2d:74:39:94:1f:e9:7d:c5:9d:4f:d2:
9d:2b:e1:21:ba:06:aa:16:56:9e:25:2f:b8:ee:c2:84:38:a7:
ad:13:a9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:53 2025 by rpki-client