Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01995A2AD80811EFA7EA658C762E951A.roa
File: 01995A2AD80811EFA7EA658C762E951A.roa (raw, json)
Hash identifier: 5O52SiMDHa5Mgz36l8D4uQ+ErowPyTr3pqiO4MiEKC4=
Subject key identifier: AC:00:98:BF:68:0F:B5:71:AF:1A:1A:2D:25:F8:84:83:2A:D2:79:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01995A2AD80811EFA7EA658C762E951A.roa
Signing time: Tue 21 Jan 2025 14:57:17 +0000
ROA not before: Tue 21 Jan 2025 14:57:14 +0000
ROA not after: Sat 01 Feb 2025 14:57:14 +0000
asID: 44559
IP address blocks: 45.199.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69162 (0x10e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:57:14 2025 GMT
Not After : Feb 1 14:57:14 2025 GMT
Subject: CN=678fb5cd-94d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b0:39:49:26:bb:71:dc:23:12:a7:9f:aa:44:
0f:bd:78:e5:f4:1f:88:e2:26:ca:8e:27:2b:af:3e:
2a:02:70:29:14:9d:d7:7c:58:f3:92:d7:f0:89:2f:
8a:30:b8:9f:92:f2:cb:cf:9e:94:ab:4d:d6:ef:e7:
60:9c:c1:69:91:85:36:f9:8c:a6:d2:ab:a2:06:9c:
07:16:4d:58:a2:ea:89:ac:e3:21:9c:42:c1:4b:ca:
6f:7e:be:b5:0f:ab:14:03:79:f6:14:07:20:f1:02:
99:cc:41:3e:5f:04:03:51:13:53:6a:8e:d9:34:63:
35:e1:db:ac:09:fc:dc:58:3d:38:62:6b:17:54:fb:
cb:c9:81:24:eb:3e:80:a5:d3:c8:f3:70:6c:ce:a9:
d9:40:df:62:78:e5:fc:e0:75:ad:33:ac:e7:9e:8c:
92:70:ca:76:55:de:8d:eb:cb:61:2b:42:87:00:d9:
b7:0f:cb:8e:94:30:9c:da:61:d6:f9:5e:95:5b:27:
a2:a1:52:9b:93:a1:f4:80:6f:86:da:3d:ab:a7:57:
10:43:b0:0f:7c:27:32:1c:a4:29:df:de:93:f4:3f:
e5:8a:f0:f4:3c:5a:c5:03:6e:53:36:df:40:e7:37:
8c:5a:36:e9:7c:92:60:49:67:41:4e:2b:3e:b7:7b:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:00:98:BF:68:0F:B5:71:AF:1A:1A:2D:25:F8:84:83:2A:D2:79:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01995A2AD80811EFA7EA658C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.239.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b2:8c:23:7c:a4:64:ac:a1:90:2d:7f:ef:49:82:c9:2e:f9:
7a:06:3f:5d:12:5b:f3:9c:e9:bf:f1:ea:b4:60:f1:e9:74:70:
b8:c6:b9:03:c5:a5:41:ed:64:11:83:07:af:8f:a0:9e:f0:da:
8d:16:3e:dd:ad:7a:78:96:67:02:08:7d:3c:fe:70:26:6c:1a:
5d:b3:ac:80:15:8f:bf:a9:3d:f8:47:ef:e3:07:1f:fc:83:1d:
7b:3e:f3:5d:bf:15:1b:58:b1:41:1c:70:d3:7f:36:66:b8:b2:
ce:01:61:c4:5c:08:a4:56:ec:90:8f:46:0c:21:8a:b0:f0:9c:
82:7e:4e:51:e8:71:59:42:20:fc:f6:49:37:d8:65:ac:24:3a:
f0:5d:5f:1a:b6:8f:23:e3:3f:e2:64:df:14:7e:20:d4:42:07:
9c:26:c8:92:45:4b:10:89:79:4a:52:28:41:28:ad:df:97:3c:
c3:31:5a:12:60:c7:46:ea:bb:cf:9c:bf:fb:86:51:b4:05:b7:
4f:4d:40:e4:a0:29:9f:88:52:27:25:65:60:aa:45:ab:69:f2:
6d:c2:07:6b:88:41:38:8a:43:6b:5c:ba:1f:5d:b7:11:cd:06:
1e:79:86:93:5d:44:6e:e7:35:8b:6a:0f:68:cc:dd:bb:69:91:
89:06:cf:cd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ4qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTQ1NzE0WhcNMjUwMjAxMTQ1NzE0WjAYMRYw
FAYDVQQDEw02NzhmYjVjZC05NGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA47A5SSa7cdwjEqefqkQPvXjl9B+I4ibKjicrrz4qAnApFJ3XfFjzktfw
iS+KMLifkvLLz56Uq03W7+dgnMFpkYU2+Yym0quiBpwHFk1YouqJrOMhnELBS8pv
fr61D6sUA3n2FAcg8QKZzEE+XwQDURNTao7ZNGM14dusCfzcWD04YmsXVPvLyYEk
6z6ApdPI83BszqnZQN9ieOX84HWtM6znnoyScMp2Vd6N68thK0KHANm3D8uOlDCc
2mHW+V6VWyeioVKbk6H0gG+G2j2rp1cQQ7APfCcyHKQp396T9D/livD0PFrFA25T
Nt9A5zeMWjbpfJJgSWdBTis+t3tVYwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKwA
mL9oD7VxrxoaLSX4hIMq0nnQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMTk5NUEyQUQ4MDgxMUVGQTdFQTY1OEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfvMA0GCSqGSIb3DQEBCwUA
A4IBAQCXsowjfKRkrKGQLX/vSYLJLvl6Bj9dElvznOm/8eq0YPHpdHC4xrkDxaVB
7WQRgwevj6Ce8NqNFj7drXp4lmcCCH08/nAmbBpds6yAFY+/qT34R+/jBx/8gx17
PvNdvxUbWLFBHHDTfzZmuLLOAWHEXAikVuyQj0YMIYqw8JyCfk5R6HFZQiD89kk3
2GWsJDrwXV8ato8j4z/iZN8UfiDUQgecJsiSRUsQiXlKUihBKK3flzzDMVoSYMdG
6rvPnL/7hlG0BbdPTUDkoCmfiFInJWVgqkWrafJtwgdriEE4ikNrXLofXbcRzQYe
eYaTXURu5zWLag9ozN27aZGJBs/N
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:23 2025 by rpki-client