Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E687EAEE04BC11F0AE1109B3762E951A.roa
File: E687EAEE04BC11F0AE1109B3762E951A.roa (raw, json)
Hash identifier: 51vqYW73scT6LSdCfr+9ljv8ixPwl+ZHSvcM0aDfsuo=
Subject key identifier: 0A:2B:8E:E3:3D:ED:EB:41:E3:DF:A2:B1:82:93:FA:61:AC:62:11:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014703
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E687EAEE04BC11F0AE1109B3762E951A.roa
Signing time: Wed 19 Mar 2025 12:23:02 +0000
ROA not before: Wed 19 Mar 2025 12:22:57 +0000
ROA not after: Sun 27 Apr 2025 12:22:57 +0000
asID: 202656
IP address blocks: 45.195.175.0/24 maxlen: 24
45.195.176.0/24 maxlen: 24
45.195.177.0/24 maxlen: 24
45.195.178.0/24 maxlen: 24
45.195.179.0/24 maxlen: 24
45.195.180.0/24 maxlen: 24
45.195.181.0/24 maxlen: 24
45.195.182.0/24 maxlen: 24
45.195.183.0/24 maxlen: 24
45.195.184.0/24 maxlen: 24
45.199.206.0/24 maxlen: 24
45.199.207.0/24 maxlen: 24
45.199.208.0/24 maxlen: 24
45.199.255.0/24 maxlen: 24
45.200.160.0/24 maxlen: 24
45.200.161.0/24 maxlen: 24
45.200.162.0/24 maxlen: 24
45.200.163.0/24 maxlen: 24
45.200.164.0/24 maxlen: 24
45.200.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83715 (0x14703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 19 12:22:57 2025 GMT
Not After : Apr 27 12:22:57 2025 GMT
Subject: CN=67dab726-5fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c9:61:c6:4c:b8:1b:18:04:cf:8a:76:5a:04:
b7:66:c4:bb:16:0d:75:e6:f9:ab:30:f7:14:8e:d0:
5b:82:72:28:a7:48:76:8c:f7:4f:ec:5a:c1:81:b8:
6d:8a:62:b8:40:42:76:18:96:95:3d:b9:89:4e:32:
23:7e:7e:4b:56:f5:c2:df:e2:5a:f0:b6:6f:e0:4d:
69:a5:84:b1:35:c1:be:d6:d1:47:91:79:92:19:9f:
86:a4:33:f9:61:89:c6:14:ca:b7:de:d4:9d:cd:5d:
ca:4c:dc:3e:6e:d5:e1:8e:b1:30:09:f2:34:76:42:
d5:3f:6f:cd:27:26:6d:23:c9:69:72:95:a5:7c:0b:
9c:7e:e8:ff:60:50:52:40:6c:50:91:26:8c:95:aa:
67:35:d3:6d:9c:ce:bf:c2:fb:b0:6c:4b:40:03:25:
a2:9f:b7:84:a6:c1:c4:3c:6a:4a:12:52:72:3f:85:
5c:30:c0:02:a6:53:cc:01:57:ae:d1:2e:6c:01:b8:
21:5d:03:c2:f2:da:38:52:6d:c4:36:a8:03:af:66:
71:d7:3c:5a:ff:76:cc:f1:22:c6:b7:b9:28:d8:62:
4e:b8:7c:7c:4b:71:0c:8d:a9:59:34:f0:e4:52:c5:
78:f0:01:10:f4:cd:f1:c6:bd:61:d7:85:2a:07:78:
4a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2B:8E:E3:3D:ED:EB:41:E3:DF:A2:B1:82:93:FA:61:AC:62:11:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E687EAEE04BC11F0AE1109B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.175.0-45.195.184.255
45.199.206.0-45.199.208.255
45.199.255.0/24
45.200.160.0-45.200.165.255
Signature Algorithm: sha256WithRSAEncryption
23:04:11:a4:4b:4f:2e:c0:50:34:b2:b9:44:b6:b0:b6:e5:f8:
3e:64:cd:f3:f6:a9:ee:f5:00:2b:49:9c:0c:98:02:d3:40:c8:
21:08:e8:57:71:6c:01:31:f3:48:9a:0f:b3:3f:a1:14:4c:fa:
60:e1:2c:73:2c:09:50:c8:bc:f8:ab:4d:d4:2e:a2:82:d8:c0:
4e:0e:ba:6c:9d:96:4f:63:2e:0f:ea:f9:45:31:89:14:ba:c9:
b9:7e:e5:14:eb:d8:8d:14:23:04:d8:1d:37:79:84:e4:76:60:
23:72:5a:76:bf:29:8d:a4:b2:8a:ad:83:d6:7c:29:73:6c:fd:
96:ea:07:51:ce:ba:ae:4c:b3:c1:5d:5e:57:d1:7d:7a:74:84:
06:bb:ef:cc:6e:5c:47:4b:e6:b2:d6:57:d8:71:95:c5:ee:71:
85:5b:0d:eb:dc:f5:7d:ea:7a:28:42:68:96:d1:57:6c:b6:9d:
aa:f1:f5:a1:e8:74:5c:a9:b4:f5:be:cf:e3:46:d6:89:4c:f8:
94:31:df:d1:25:93:5c:b3:1c:9a:73:da:40:d0:b9:bc:9f:7d:
af:2f:62:cd:8c:05:01:3c:c1:47:3f:8a:92:4c:f2:f4:85:fb:
54:18:ec:bd:a8:e9:a4:75:77:2f:e5:8c:04:b2:d8:74:c7:1d:
1d:7f:5c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:33 2025 by rpki-client