Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2EFF90CFF3411EFABCC7056762E951A.roa
File: B2EFF90CFF3411EFABCC7056762E951A.roa (raw, json)
Hash identifier: 0Q+qF/3im1K5P5YdN2HNm3lbCyrF1nMCkZEWoHFX5MU=
Subject key identifier: FF:31:6F:CE:F9:4F:70:F6:CC:73:ED:8C:06:BD:C1:BB:FE:26:11:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01455B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2EFF90CFF3411EFABCC7056762E951A.roa
Signing time: Wed 12 Mar 2025 11:25:28 +0000
ROA not before: Wed 12 Mar 2025 11:25:24 +0000
ROA not after: Fri 25 Apr 2025 11:25:24 +0000
asID: 140869
IP address blocks: 45.203.213.0/24 maxlen: 24
45.203.214.0/24 maxlen: 24
45.203.215.0/24 maxlen: 24
45.203.216.0/24 maxlen: 24
45.203.217.0/24 maxlen: 24
45.203.218.0/24 maxlen: 24
45.203.219.0/24 maxlen: 24
45.203.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83291 (0x1455b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 11:25:24 2025 GMT
Not After : Apr 25 11:25:24 2025 GMT
Subject: CN=67d16f28-44a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:27:92:e4:34:87:04:c2:b8:8c:e1:24:25:
a4:4a:8f:d9:f0:4a:0c:06:98:a8:14:8a:df:7d:1d:
64:67:26:10:8b:5e:e7:07:c3:6d:e6:b9:df:c3:e2:
14:5e:5a:e4:c3:b9:c7:52:07:81:62:00:40:f5:d6:
5f:5e:b4:09:01:d9:e8:58:72:cc:12:ca:04:5d:82:
99:1d:02:b5:1a:0a:53:4e:18:84:65:98:bb:33:0a:
6f:a3:5a:e0:24:78:98:2d:3e:5b:4b:7d:03:f0:54:
ce:15:c2:96:26:e6:0e:54:5f:f5:e5:83:85:ee:3e:
58:c4:96:08:7f:8a:d6:c1:0a:32:f8:47:dd:26:fa:
66:69:12:73:05:13:c1:63:99:8a:83:c6:21:0a:15:
b4:66:dd:4e:4a:26:65:3e:4d:61:26:61:24:75:df:
a5:d8:14:69:d3:85:1e:fa:96:4c:a6:be:a5:38:8d:
a6:a9:0b:bc:db:7f:25:92:a3:93:9c:bb:41:a7:f1:
26:1b:a5:37:2f:46:b6:6e:4f:80:98:64:e4:52:ad:
07:ac:df:04:79:b9:b1:c2:00:ab:dd:a0:79:6c:d1:
1b:0a:23:bb:c7:92:fd:97:0d:b8:e5:46:d2:59:9b:
05:7d:8f:2f:b3:b1:34:04:13:2d:2f:c4:28:8a:0e:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:31:6F:CE:F9:4F:70:F6:CC:73:ED:8C:06:BD:C1:BB:FE:26:11:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2EFF90CFF3411EFABCC7056762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.213.0-45.203.220.255
Signature Algorithm: sha256WithRSAEncryption
02:28:98:1b:e0:05:b2:54:7f:4c:e9:c9:4d:c3:02:3c:06:82:
bf:5b:04:c3:c9:48:21:8e:fc:4d:58:80:bc:7a:72:fe:e6:78:
85:06:64:3f:59:1a:bb:98:5e:5f:cc:b1:35:fd:6f:26:d0:f3:
1e:69:3c:5f:01:2b:47:e3:45:ef:ce:23:27:00:75:8f:f8:0b:
0c:89:c0:dd:2d:e3:74:1d:98:13:26:70:f3:ef:d7:eb:65:5b:
f7:5f:0f:c0:7b:80:d0:08:e0:08:00:85:cf:5f:3b:81:64:e2:
0a:26:02:c8:7f:fa:e1:39:6e:78:52:12:04:e7:53:0a:d1:5a:
6c:d3:b6:cf:de:74:ca:bd:38:1d:24:16:a0:51:59:1c:ec:2e:
07:a1:48:ed:72:f5:41:52:fb:6a:e9:4f:88:0a:a9:b0:0f:cc:
0e:0b:e2:8a:29:30:a9:42:9a:1a:eb:6b:c7:72:04:83:a7:c0:
55:8a:41:25:52:46:13:d8:46:6b:7d:fd:8f:b0:a1:4b:d7:7f:
b0:b1:4e:14:64:e3:4b:3f:35:3f:e5:81:00:2c:d3:1f:95:08:
7d:a4:48:af:56:a7:9b:e4:b8:15:b6:1b:72:10:ed:a9:c8:b3:
33:d6:e4:0e:46:03:b8:8b:e5:65:1d:ef:4f:4c:5f:24:22:a6:
99:f1:5c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:05 2025 by rpki-client