Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/093C60B2D7CA11EF8EDC5B7B762E951A.roa
File: 093C60B2D7CA11EF8EDC5B7B762E951A.roa (raw, json)
Hash identifier: lttKfSCcGm18xr5a4VOK/9W+Y8SX+bHyK8wWc3epPa0=
Subject key identifier: C7:34:2D:F5:54:75:F1:87:D7:2F:AE:C0:B2:72:32:B2:A3:0E:34:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CCA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/093C60B2D7CA11EF8EDC5B7B762E951A.roa
Signing time: Tue 21 Jan 2025 07:33:41 +0000
ROA not before: Tue 21 Jan 2025 07:33:37 +0000
ROA not after: Tue 25 Feb 2025 07:33:37 +0000
asID: 203020
IP address blocks: 45.198.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68810 (0x10cca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:33:37 2025 GMT
Not After : Feb 25 07:33:37 2025 GMT
Subject: CN=678f4dd5-516b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:bd:db:cd:ff:51:86:2f:b3:fb:b4:3d:75:
fc:20:fb:e8:d2:74:3f:d0:6e:85:a3:ea:df:d8:02:
bc:f6:ba:60:cd:8a:0d:7b:bc:d8:21:e4:7c:b6:e2:
d3:10:ae:43:74:d9:92:57:49:10:12:92:ed:46:3e:
d4:d8:92:91:02:49:13:20:cb:8a:d4:2a:81:67:d4:
be:75:ef:d8:1a:ed:95:32:ec:79:3b:ea:5e:ad:fb:
99:4f:bb:82:88:64:1e:0b:fe:04:e4:af:14:ea:9c:
f7:f5:07:2d:17:8e:7e:3a:c0:2b:2b:06:9e:75:94:
39:aa:e5:aa:f7:97:d3:27:14:27:c3:f9:d8:92:6b:
b9:5a:78:eb:e4:03:4d:45:f6:c2:1d:fa:4b:c0:b6:
4c:40:4d:5a:12:dd:15:ff:e4:3e:ca:28:ff:2d:6b:
94:a1:b3:0f:0e:de:aa:38:c1:df:65:fb:d4:d2:90:
2e:d3:a3:ea:0a:c4:79:12:22:57:f3:40:1d:1e:95:
44:9f:d0:fd:35:42:16:b3:16:a6:7f:aa:78:25:23:
8a:e9:87:a4:a6:ab:bd:d0:cd:0f:b6:95:02:83:18:
3f:d5:82:00:01:9a:a1:aa:30:ab:3e:91:0b:fd:a2:
0b:4a:1d:d0:49:dd:ef:0c:19:70:db:da:11:00:3d:
ed:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:34:2D:F5:54:75:F1:87:D7:2F:AE:C0:B2:72:32:B2:A3:0E:34:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/093C60B2D7CA11EF8EDC5B7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.194.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:5e:3a:1a:42:47:65:cd:83:ba:98:80:9d:7e:91:de:af:e4:
56:6f:a5:07:03:d7:14:43:70:5a:a5:dd:1d:ba:4e:02:49:b5:
12:63:98:d6:b0:77:46:4b:28:1e:9c:04:28:87:db:21:7d:ee:
3f:0a:ec:00:36:cc:65:57:a1:91:5c:88:2f:94:2a:e2:6d:56:
86:c1:a0:ee:9f:27:b3:56:92:79:a2:63:7a:9f:a7:de:76:c6:
b6:fd:c7:70:54:01:39:f5:d3:5d:a4:eb:d4:97:33:97:ca:c8:
2a:b2:6c:da:f3:84:c9:f1:9e:32:47:33:b5:5b:12:e0:a8:4e:
36:fe:79:2e:ac:fd:72:ca:e7:b1:46:d9:4c:2a:c1:d2:7b:6f:
0e:b6:18:b6:a0:e2:eb:60:85:2f:d9:35:9b:01:28:b4:86:33:
63:0c:2e:e0:6d:2f:0e:4e:4e:1d:8a:be:8a:a1:90:77:0e:0b:
a3:03:42:85:ac:0e:78:f4:c9:69:5f:a5:aa:a0:5f:4b:23:c4:
a6:c5:e7:68:7a:06:1b:f7:c6:ca:73:4d:83:fd:65:c9:7f:4c:
29:ce:a1:13:83:e5:ee:fe:60:c9:4e:7e:c4:6b:79:a4:9c:8f:
13:58:46:ef:79:e1:3a:38:11:40:08:58:9f:d8:98:e3:14:26:
9d:30:5f:c1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQzKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMDczMzM3WhcNMjUwMjI1MDczMzM3WjAYMRYw
FAYDVQQDEw02NzhmNGRkNS01MTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApl+9283/UYYvs/u0PXX8IPvo0nQ/0G6Fo+rf2AK89rpgzYoNe7zYIeR8
tuLTEK5DdNmSV0kQEpLtRj7U2JKRAkkTIMuK1CqBZ9S+de/YGu2VMux5O+perfuZ
T7uCiGQeC/4E5K8U6pz39QctF45+OsArKwaedZQ5quWq95fTJxQnw/nYkmu5Wnjr
5ANNRfbCHfpLwLZMQE1aEt0V/+Q+yij/LWuUobMPDt6qOMHfZfvU0pAu06PqCsR5
EiJX80AdHpVEn9D9NUIWsxamf6p4JSOK6Yekpqu90M0PtpUCgxg/1YIAAZqhqjCr
PpEL/aILSh3QSd3vDBlw29oRAD3t3wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMc0
LfVUdfGH1y+uwLJyMrKjDjR8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wOTNDNjBCMkQ3Q0ExMUVGOEVEQzVCN0I3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcbCMA0GCSqGSIb3DQEBCwUA
A4IBAQCfXjoaQkdlzYO6mICdfpHer+RWb6UHA9cUQ3Bapd0duk4CSbUSY5jWsHdG
SygenAQoh9shfe4/CuwANsxlV6GRXIgvlCribVaGwaDunyezVpJ5omN6n6fedsa2
/cdwVAE59dNdpOvUlzOXysgqsmza84TJ8Z4yRzO1WxLgqE42/nkurP1yyuexRtlM
KsHSe28Othi2oOLrYIUv2TWbASi0hjNjDC7gbS8OTk4dir6KoZB3DgujA0KFrA54
9MlpX6WqoF9LI8SmxedoegYb98bKc02D/WXJf0wpzqETg+Xu/mDJTn7Ea3mknI8T
WEbveeE6OBFACFif2JjjFCadMF/B
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:40:38 2025 by rpki-client