Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F501D738F4E511EFB9820E4C762E951A.roa
File: F501D738F4E511EFB9820E4C762E951A.roa (raw, json)
Hash identifier: smfGjEnoY2iXJ8wA8RLArN9ov1A7hzn0sO6D0/qDW2Q=
Subject key identifier: 10:FD:CB:9D:40:BE:23:23:D0:CE:BF:77:E4:DF:F8:7C:37:9D:46:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0139A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F501D738F4E511EFB9820E4C762E951A.roa
Signing time: Thu 27 Feb 2025 08:36:37 +0000
ROA not before: Thu 27 Feb 2025 08:36:33 +0000
ROA not after: Sat 19 Feb 2028 08:36:33 +0000
asID: 17561
IP address blocks: 45.192.18.0/24 maxlen: 24
45.194.84.0/24 maxlen: 24
45.194.112.0/24 maxlen: 24
45.194.113.0/24 maxlen: 24
45.200.0.0/24 maxlen: 24
45.200.1.0/24 maxlen: 24
45.200.2.0/24 maxlen: 24
45.200.3.0/24 maxlen: 24
45.200.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80290 (0x139a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 08:36:33 2025 GMT
Not After : Feb 19 08:36:33 2028 GMT
Subject: CN=67c02415-1851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:84:24:e9:2b:bb:69:8d:6a:e1:a0:df:ac:
00:ce:ec:f7:ac:5e:34:cd:6e:88:04:1b:ad:da:5e:
53:d5:71:80:15:62:11:fc:b9:f4:75:f0:c7:91:51:
50:08:00:45:b0:a3:9d:33:f8:10:7b:c2:54:b6:09:
f4:87:49:2f:78:cd:f8:13:67:1c:b4:9d:2c:41:52:
34:db:54:c2:07:6f:33:09:53:61:23:a6:43:57:20:
de:87:1c:67:53:e3:e4:21:16:33:98:cd:1e:38:c0:
40:c9:89:3a:2b:49:07:36:d8:aa:9d:86:ee:92:cb:
a4:4d:0b:1f:b9:84:8a:f6:f1:e5:b6:cc:b0:c7:53:
2d:e4:61:f5:b9:1e:d5:15:99:53:63:dc:8e:27:38:
10:8c:d1:1f:9e:68:f0:d5:14:e4:50:3e:f3:38:d8:
8b:ec:d9:50:2c:b3:74:47:4e:99:f8:c4:46:73:86:
8f:4f:aa:6f:4e:1b:3f:62:89:9b:d7:38:fb:82:91:
35:d8:2c:92:46:e4:ef:d7:96:67:25:1c:8c:2e:6d:
39:c2:ed:8e:38:e9:24:8d:b9:17:4c:cf:8f:82:b5:
9e:57:55:9b:9a:58:af:d1:0e:cb:56:34:14:74:c3:
70:f5:47:cb:25:d9:1a:2b:86:a8:f6:e2:c8:34:d7:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FD:CB:9D:40:BE:23:23:D0:CE:BF:77:E4:DF:F8:7C:37:9D:46:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F501D738F4E511EFB9820E4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.18.0/24
45.194.84.0/24
45.194.112.0/23
45.200.0.0/22
45.200.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e0:27:cd:db:b7:a8:cf:5b:d0:80:d2:b0:eb:2b:0d:72:ce:
03:1d:96:03:ca:25:d8:a2:9d:58:0b:14:98:73:21:c1:45:7d:
e1:b6:28:7e:73:f0:83:6f:1a:03:81:59:ef:79:2f:3d:9f:fc:
4c:68:74:86:04:63:2d:b1:a7:9c:a1:ba:4b:2e:3a:43:33:fa:
d3:0b:b5:3d:d0:8e:be:bb:53:d9:26:18:e4:40:ff:bc:48:00:
36:3e:13:55:ab:b8:0d:91:f8:db:62:fe:10:dd:e4:8d:7d:e1:
78:c7:9f:82:68:8a:a0:98:b1:55:42:d8:4e:ec:18:4b:b5:05:
de:72:b7:9a:8b:6b:af:e1:ad:88:e2:3e:f9:be:19:e6:e8:eb:
0c:24:3d:6f:ef:01:5a:9d:1d:41:bd:90:47:28:21:42:e9:2c:
da:70:2a:7e:91:25:f5:b5:32:de:00:cb:72:7a:66:c7:fd:b4:
ce:0a:f2:f0:e3:fb:fa:42:44:b1:e0:7c:b0:0a:8d:f8:c8:22:
98:f3:f0:25:3f:e0:44:db:fd:58:89:ad:78:87:a6:31:58:b5:
f4:49:6d:d8:ca:39:b2:6b:42:0f:fd:c9:a1:bf:b5:0f:4f:8c:
93:ab:ae:b2:fc:90:b9:61:d2:ac:68:cf:31:49:f1:74:7b:2a:
ad:66:69:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:54 2025 by rpki-client