Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/072AA782DA9711EFA5C19FAD762E951A.roa
File: 072AA782DA9711EFA5C19FAD762E951A.roa (raw, json)
Hash identifier: 1zipAcvry6L0pp25dJMMho3DyrszGCUliYpuvOZ7aBQ=
Subject key identifier: D6:34:58:9D:43:A2:7E:2C:CA:66:2B:8C:DE:36:B9:3A:A0:80:EE:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01109E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/072AA782DA9711EFA5C19FAD762E951A.roa
Signing time: Fri 24 Jan 2025 21:06:07 +0000
ROA not before: Fri 24 Jan 2025 21:06:03 +0000
ROA not after: Tue 25 Feb 2025 21:06:03 +0000
asID: 202656
IP address blocks: 45.199.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69790 (0x1109e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:06:03 2025 GMT
Not After : Feb 25 21:06:03 2025 GMT
Subject: CN=679400bf-b813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:e6:9a:16:8c:c8:5f:f6:18:1f:d1:07:57:
1b:3d:a3:ba:e0:55:8d:c5:de:eb:ff:9e:a6:b1:43:
19:17:3b:24:91:1b:5a:8e:92:9b:ab:25:6c:5e:75:
fc:94:33:75:d7:d9:c2:1f:72:a2:d1:bf:c1:ee:16:
67:5a:ac:4e:0e:0f:f3:9c:f0:cb:02:e3:65:6b:1e:
ea:75:aa:9e:47:30:a6:cb:c2:01:e3:63:7e:1d:b1:
2e:f5:ad:4a:3b:e4:98:66:52:9c:d2:b0:4e:8c:21:
ba:d6:2a:29:3e:c9:3f:79:4e:2e:e3:a9:24:76:01:
c0:b4:3a:0d:8c:2f:55:64:0a:0f:b8:2e:19:0c:35:
70:0c:ae:9a:f8:ac:37:59:de:8d:23:b2:cd:80:bf:
d8:24:60:59:3e:d3:8c:6f:96:f6:0d:88:5b:85:98:
bf:27:56:b8:60:16:d8:51:69:cf:2b:b6:24:6a:54:
07:c9:fc:e7:27:6e:34:a1:cd:6a:bf:cb:81:10:7b:
a9:0c:12:d8:26:24:00:47:12:52:f2:7e:c6:94:aa:
ec:33:16:56:a1:2f:7d:e4:85:fb:36:15:80:1d:7e:
c9:a9:f4:56:a5:b5:15:4b:ad:6f:43:9a:5c:3e:3e:
b8:e6:14:f4:c4:0f:46:b3:cc:c7:20:2d:b7:54:a7:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:34:58:9D:43:A2:7E:2C:CA:66:2B:8C:DE:36:B9:3A:A0:80:EE:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/072AA782DA9711EFA5C19FAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:3a:ff:c1:51:28:65:25:4e:a8:7f:cb:dd:e3:ef:46:6f:9a:
0b:9e:ea:0c:9e:85:f4:11:28:de:1b:61:84:68:ee:36:6d:d8:
45:b0:e4:87:a0:fc:f7:a5:50:d9:c6:9a:2a:7a:8b:77:fc:d3:
d6:87:45:98:70:9f:0e:e1:05:13:2f:1c:fb:0a:ad:67:3e:49:
c3:b1:f1:25:bc:f9:17:2a:66:88:b7:3e:f9:d2:00:f3:b9:ae:
37:b1:5e:fe:57:c8:af:03:45:bc:b3:77:ab:8c:5e:06:bb:9d:
c3:4a:7f:a3:c4:e4:4f:e8:a2:d7:3c:91:78:a2:45:79:cf:1d:
54:4d:27:7a:4c:0a:47:6d:e7:85:13:6c:e2:db:d1:52:1d:77:
24:e9:cf:42:a5:21:5d:19:e1:60:e3:33:3a:67:ec:3f:f7:15:
bb:c1:36:1a:ba:b1:e4:1c:3a:90:96:30:95:fa:b2:02:95:a7:
e7:d8:68:51:33:2c:b1:ba:eb:4c:74:34:90:ca:9e:e6:b1:0a:
39:2c:a3:c3:67:d9:39:ea:8c:4c:4f:cc:8c:64:eb:d8:28:16:
4e:73:0d:68:82:7b:34:13:8b:b9:bf:4c:89:e0:b7:35:dc:b2:
d6:22:8c:14:fd:bd:aa:cf:8a:3b:cc:be:0d:3c:20:38:54:80:
01:e7:92:80
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARCeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MjEwNjAzWhcNMjUwMjI1MjEwNjAzWjAYMRYw
FAYDVQQDEw02Nzk0MDBiZi1iODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxR7mmhaMyF/2GB/RB1cbPaO64FWNxd7r/56msUMZFzskkRtajpKbqyVs
XnX8lDN119nCH3Ki0b/B7hZnWqxODg/znPDLAuNlax7qdaqeRzCmy8IB42N+HbEu
9a1KO+SYZlKc0rBOjCG61iopPsk/eU4u46kkdgHAtDoNjC9VZAoPuC4ZDDVwDK6a
+Kw3Wd6NI7LNgL/YJGBZPtOMb5b2DYhbhZi/J1a4YBbYUWnPK7YkalQHyfznJ240
oc1qv8uBEHupDBLYJiQARxJS8n7GlKrsMxZWoS995IX7NhWAHX7JqfRWpbUVS61v
Q5pcPj645hT0xA9Gs8zHIC23VKe8bQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNY0
WJ1Don4symYrjN42uTqggO4VMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNzJBQTc4MkRBOTcxMUVGQTVDMTlGQUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfLMA0GCSqGSIb3DQEBCwUA
A4IBAQBuOv/BUShlJU6of8vd4+9Gb5oLnuoMnoX0ESjeG2GEaO42bdhFsOSHoPz3
pVDZxpoqeot3/NPWh0WYcJ8O4QUTLxz7Cq1nPknDsfElvPkXKmaItz750gDzua43
sV7+V8ivA0W8s3erjF4Gu53DSn+jxORP6KLXPJF4okV5zx1UTSd6TApHbeeFE2zi
29FSHXck6c9CpSFdGeFg4zM6Z+w/9xW7wTYaurHkHDqQljCV+rIClafn2GhRMyyx
uutMdDSQyp7msQo5LKPDZ9k56oxMT8yMZOvYKBZOcw1ogns0E4u5v0yJ4Lc13LLW
IowU/b2qz4o7zL4NPCA4VIAB55KA
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:04 2025 by rpki-client