Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04268E80DAEB11EFB2F46773762E951A.roa
File: 04268E80DAEB11EFB2F46773762E951A.roa (raw, json)
Hash identifier: LUdamM36Fm2fKZ75FOHSyCdXBdFDQhy5guCQT/gZFqc=
Subject key identifier: D7:7D:91:8D:12:90:DF:C9:03:B5:34:86:8D:86:03:42:D8:D4:C6:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04268E80DAEB11EFB2F46773762E951A.roa
Signing time: Sat 25 Jan 2025 07:07:20 +0000
ROA not before: Sat 25 Jan 2025 07:07:16 +0000
ROA not after: Sun 23 Feb 2025 07:07:16 +0000
asID: 202656
IP address blocks: 45.195.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69884 (0x110fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:07:16 2025 GMT
Not After : Feb 23 07:07:16 2025 GMT
Subject: CN=67948da7-7e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:89:7b:61:70:d0:93:22:5a:7a:d7:ec:49:
a6:7a:98:3b:d4:c5:42:21:b4:77:91:fd:ae:2e:f5:
c9:1a:8e:30:4c:05:4c:51:52:11:3a:99:0d:58:e4:
1e:f2:ee:2c:fb:6b:ea:2c:30:ed:aa:b2:f7:a1:93:
b4:1f:b6:ee:b5:cd:57:32:08:d0:48:e0:9e:e3:0d:
5a:98:30:5f:4f:5c:f2:ab:a8:f8:f4:5e:af:df:7b:
eb:56:ca:c9:73:6b:e3:34:c4:45:d4:74:61:28:68:
e3:67:08:24:1c:c0:ee:52:a3:fa:19:df:1c:af:bb:
d1:6f:43:33:4e:8e:43:df:26:68:4e:0b:9a:4b:2b:
cf:98:1f:9b:f8:80:a4:be:7d:17:53:8a:f2:6c:3d:
8f:c4:62:cb:a2:cc:c1:35:3f:8f:0e:91:f5:07:4e:
10:c2:54:2a:78:56:0c:8c:ad:38:b6:12:a5:03:9d:
00:05:ba:2c:d8:4b:af:e7:59:85:42:36:bb:35:40:
7e:2c:6d:63:1a:c2:2b:60:ef:91:10:77:8c:7c:c9:
2b:f8:43:fd:14:7d:28:bb:ff:41:86:74:f1:6a:93:
a5:69:f1:20:38:d4:2c:a4:c1:86:5c:93:e9:26:13:
f9:ad:8b:47:c5:15:18:54:c3:61:32:58:ec:1c:c9:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7D:91:8D:12:90:DF:C9:03:B5:34:86:8D:86:03:42:D8:D4:C6:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04268E80DAEB11EFB2F46773762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.162.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b2:8e:b6:11:36:bd:d8:c2:14:7d:4b:1b:89:ec:51:da:89:
0c:05:59:f1:57:a2:68:69:69:d8:c3:e1:d6:57:ef:d7:cb:bb:
51:d5:c8:90:56:9a:22:ff:05:3e:31:2b:20:5f:3f:54:83:35:
2a:96:15:95:0b:22:78:fe:d6:fd:18:03:01:cb:85:76:20:3c:
02:44:f9:1b:43:84:83:90:cc:3e:1b:f3:1b:ab:3e:bc:ee:09:
6d:d5:18:5d:ef:33:a8:4c:25:7d:ee:cc:72:93:49:b4:b3:f3:
07:07:30:54:3f:b6:45:5b:4c:4b:ae:8c:8e:ea:dc:07:3c:c1:
17:92:a5:5d:45:fe:f8:63:51:07:39:ca:29:7b:d2:d8:93:70:
0a:ba:4a:9a:b4:50:16:b6:05:a1:35:2c:7d:20:f7:91:8b:b3:
01:2b:3e:1d:a3:f4:9e:c3:cb:29:49:78:2e:9d:2d:ec:a8:27:
39:fa:28:f4:8e:b7:17:b7:ae:49:4d:fd:dd:0c:99:83:59:c9:
30:7a:79:ed:ef:de:e3:16:98:b2:89:58:09:e0:a3:89:fa:0f:
cf:88:fd:9a:3c:66:7a:ff:7c:9f:5b:91:b4:43:8b:ee:8e:2f:
b2:9d:9c:7a:e3:5a:a3:04:10:23:08:ce:a1:be:f5:01:67:1f:
46:33:f1:c3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARD8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MDcwNzE2WhcNMjUwMjIzMDcwNzE2WjAYMRYw
FAYDVQQDEw02Nzk0OGRhNy03ZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwgeJe2Fw0JMiWnrX7Emmepg71MVCIbR3kf2uLvXJGo4wTAVMUVIROpkN
WOQe8u4s+2vqLDDtqrL3oZO0H7butc1XMgjQSOCe4w1amDBfT1zyq6j49F6v33vr
VsrJc2vjNMRF1HRhKGjjZwgkHMDuUqP6Gd8cr7vRb0MzTo5D3yZoTguaSyvPmB+b
+ICkvn0XU4rybD2PxGLLoszBNT+PDpH1B04QwlQqeFYMjK04thKlA50ABbos2Euv
51mFQja7NUB+LG1jGsIrYO+REHeMfMkr+EP9FH0ou/9BhnTxapOlafEgONQspMGG
XJPpJhP5rYtHxRUYVMNhMljsHMlKGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNd9
kY0SkN/JA7U0ho2GA0LY1MazMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNDI2OEU4MERBRUIxMUVGQjJGNDY3NzM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOiMA0GCSqGSIb3DQEBCwUA
A4IBAQAiso62ETa92MIUfUsbiexR2okMBVnxV6JoaWnYw+HWV+/Xy7tR1ciQVpoi
/wU+MSsgXz9UgzUqlhWVCyJ4/tb9GAMBy4V2IDwCRPkbQ4SDkMw+G/Mbqz687glt
1Rhd7zOoTCV97sxyk0m0s/MHBzBUP7ZFW0xLroyO6twHPMEXkqVdRf74Y1EHOcop
e9LYk3AKukqatFAWtgWhNSx9IPeRi7MBKz4do/Sew8spSXgunS3sqCc5+ij0jrcX
t65JTf3dDJmDWckwennt797jFpiyiVgJ4KOJ+g/PiP2aPGZ6/3yfW5G0Q4vuji+y
nZx641qjBBAjCM6hvvUBZx9GM/HD
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:51 2025 by rpki-client