Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C18A9BD4FE4411EF9D7A3151762E951A.roa
File: C18A9BD4FE4411EF9D7A3151762E951A.roa (raw, json)
Hash identifier: iBvP84w9BLblCpVdbhLME52yrP3qxOl3HI+uF/dHCtw=
Subject key identifier: 8B:28:1A:D5:C4:5F:12:38:AF:A1:46:30:10:CD:B6:0B:32:8D:D1:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C18A9BD4FE4411EF9D7A3151762E951A.roa
Signing time: Tue 11 Mar 2025 06:47:53 +0000
ROA not before: Tue 11 Mar 2025 06:47:49 +0000
ROA not after: Thu 08 May 2025 06:47:49 +0000
asID: 150706
IP address blocks: 45.192.178.0/23 maxlen: 24
45.192.180.0/22 maxlen: 24
45.192.184.0/22 maxlen: 24
45.192.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83129 (0x144b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 11 06:47:49 2025 GMT
Not After : May 8 06:47:49 2025 GMT
Subject: CN=67cfdc99-cbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:a7:ad:ea:e3:0c:24:8f:ac:da:14:dd:19:
0c:05:63:0d:1d:cd:c4:08:ac:90:bb:f9:57:97:fd:
f8:b2:75:ac:31:ed:17:73:0b:a1:d5:64:1d:d3:f3:
2a:8a:a0:dc:b8:72:4a:4a:90:d5:a2:8d:f2:24:14:
55:e7:b8:ca:c8:b2:2e:60:a2:40:9a:94:5b:8b:d1:
0d:f7:cd:13:f0:a7:c2:9e:1b:8d:31:8b:59:b7:d6:
f0:bc:63:cf:57:79:b3:81:79:a1:d9:6f:60:16:79:
2a:f4:1c:be:0d:bc:83:5d:76:8f:58:f0:4a:a3:00:
a1:a2:8c:ef:bb:50:8b:f6:6f:b7:f2:2b:42:28:75:
50:16:da:f0:66:d9:bc:95:6c:1a:bf:e3:af:27:03:
31:6e:0b:8a:d3:a5:5c:2c:bb:77:84:20:b0:b6:b7:
6b:1f:cd:b9:40:bd:26:dd:4b:1b:9c:55:31:23:10:
09:6e:22:2d:0d:03:ed:f3:12:12:51:93:f9:3f:ff:
29:12:7a:68:61:8e:0e:34:bd:37:11:a2:c3:c5:24:
b5:af:4e:31:84:ca:b3:aa:38:1c:56:27:b2:58:d4:
58:e5:ca:03:64:6e:9c:66:73:c9:bd:32:a7:44:a4:
a2:31:53:81:40:5c:2f:e2:72:69:31:2b:60:99:be:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:28:1A:D5:C4:5F:12:38:AF:A1:46:30:10:CD:B6:0B:32:8D:D1:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C18A9BD4FE4411EF9D7A3151762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.178.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
0a:c3:5d:6a:1d:81:a5:a7:af:5c:33:9b:a5:0d:28:a2:ab:8c:
b1:6f:d1:8f:c4:56:12:9d:4d:9a:c7:db:5e:8b:a0:e5:2f:01:
be:15:29:b0:87:d6:3f:ff:a6:3e:1a:13:d0:64:7b:25:ef:0d:
6c:dd:3f:4a:99:01:32:28:08:5b:52:67:e3:9c:70:5b:c4:d6:
e8:9a:5e:08:91:9d:ba:03:b4:4a:df:f5:35:38:40:ca:0a:5c:
bd:bf:e2:8d:99:47:4b:cf:6f:0f:a4:0b:c3:a1:ad:da:f8:13:
fe:f8:9b:72:d6:e8:45:5f:a5:22:c6:22:f5:ef:30:cb:e1:b5:
56:1e:2a:70:fe:a1:73:3b:86:12:80:ef:24:eb:12:3e:de:91:
a1:35:16:37:9f:a1:7f:32:f0:09:18:b0:90:3e:0d:8b:08:c2:
bc:6f:4f:b9:02:0e:f2:da:af:4c:25:38:05:9f:c1:a4:7e:1c:
09:01:26:2c:aa:8c:f3:41:77:86:44:b8:31:91:0e:0e:36:fd:
79:4c:20:a3:97:e4:df:39:fa:82:91:2e:79:0b:ef:c7:b7:45:
61:33:c0:bd:7a:28:48:05:fb:eb:01:b6:5b:b9:65:48:e1:c8:
ed:66:3e:ae:ee:a1:20:58:7e:3a:c9:76:e2:27:a0:b7:84:6d:
c5:8d:52:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:40 2025 by rpki-client