Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C8B3AA4D72F11EFA5F7BA7E762E951A.roa
File: 0C8B3AA4D72F11EFA5F7BA7E762E951A.roa (raw, json)
Hash identifier: Cj3dx8zwEnjkS02BdGmM8LH/RpX6pBhiFB6XSCCDyRg=
Subject key identifier: 53:11:CA:D2:BF:69:B0:8C:A6:23:70:07:84:B3:10:7C:8D:1B:3A:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C93
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C8B3AA4D72F11EFA5F7BA7E762E951A.roa
Signing time: Mon 20 Jan 2025 13:04:15 +0000
ROA not before: Mon 20 Jan 2025 13:04:11 +0000
ROA not after: Sat 01 Feb 2025 13:04:11 +0000
asID: 203020
IP address blocks: 45.198.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68755 (0x10c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 13:04:11 2025 GMT
Not After : Feb 1 13:04:11 2025 GMT
Subject: CN=678e49ce-9b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:2b:5f:2c:92:a5:72:8a:ec:5e:2b:09:f3:
eb:a5:a8:6d:cc:c2:71:f5:bb:d7:03:36:a4:11:39:
50:01:97:dd:08:fc:c6:b5:d5:4b:96:8c:59:ba:64:
b3:b6:4f:e5:1d:79:13:16:95:ce:12:83:77:e7:f7:
90:2b:38:56:24:bd:30:5a:49:2f:78:5f:33:6a:91:
2e:1d:e9:fc:89:8e:5b:dd:e8:02:af:34:ae:73:e5:
c0:a1:39:e5:4a:4d:87:e0:49:03:33:19:a1:5a:ec:
a0:a6:ed:6b:d5:d3:cd:1b:cb:9a:4a:f4:a1:88:88:
02:13:e3:2e:23:77:7c:fc:d1:1c:d4:8f:29:3e:d0:
eb:9a:ac:5d:5f:ee:8c:40:88:c2:82:af:ea:66:d7:
1b:3b:9b:45:1f:b8:3e:e4:5b:4a:79:60:0c:aa:6f:
3c:2b:9d:de:f8:de:be:23:43:16:d7:97:cb:3f:73:
6f:34:aa:33:4b:ea:7e:4d:86:25:12:88:a7:37:8f:
08:49:17:70:94:32:24:b3:82:24:0a:b2:20:e1:d5:
a7:47:04:b7:f8:ed:57:1e:bc:9c:10:3b:08:f7:b5:
eb:fd:01:1e:bc:6a:d5:31:1f:46:db:45:15:19:f8:
c0:43:5b:8f:0d:f3:e9:72:0f:0b:68:d8:e6:ec:8e:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:11:CA:D2:BF:69:B0:8C:A6:23:70:07:84:B3:10:7C:8D:1B:3A:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C8B3AA4D72F11EFA5F7BA7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.196.0/22
Signature Algorithm: sha256WithRSAEncryption
94:fd:22:e1:02:6e:8b:24:4c:f5:6c:91:89:07:a4:c4:99:7a:
6a:b4:a2:88:8a:1b:4e:66:59:f8:72:d2:06:86:f2:e4:32:be:
11:c7:a1:55:73:7d:3d:3e:bc:12:c3:a8:2a:52:44:00:53:1b:
49:9d:5a:14:ee:da:bb:f4:17:3d:44:23:c8:d1:20:d4:f6:62:
71:d0:9a:40:57:81:3b:2b:66:d7:d2:ab:a9:ae:72:26:4f:9d:
f2:ee:ea:81:16:b8:19:7b:e3:2c:e3:4d:cf:b1:35:5d:d8:a2:
1f:e5:8c:9d:35:aa:f7:c0:33:a4:c4:53:ca:38:21:f1:44:0e:
21:e4:9d:e6:5d:fa:0e:c6:77:ad:6f:f0:27:45:bc:db:13:bc:
cd:65:e0:d0:99:a8:a5:06:96:d7:77:4e:71:58:9c:d1:a9:73:
51:8e:96:78:e2:8a:d1:96:b6:e6:9a:19:3b:cf:31:84:15:62:
12:c9:81:27:a5:90:0b:95:51:69:d1:0a:83:4e:b0:ac:83:a3:
ae:fd:95:6f:83:89:50:05:71:32:dd:92:61:cf:64:19:0c:ba:
c5:e6:cb:6e:a1:86:16:b4:c5:1e:36:95:3f:75:9d:04:0d:2f:
1a:59:b1:a6:fb:30:ec:8f:6d:a4:50:57:09:23:0a:40:53:49:
8b:b8:f7:5e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQyTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIwMTMwNDExWhcNMjUwMjAxMTMwNDExWjAYMRYw
FAYDVQQDEw02NzhlNDljZS05YjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu40rXyySpXKK7F4rCfPrpahtzMJx9bvXAzakETlQAZfdCPzGtdVLloxZ
umSztk/lHXkTFpXOEoN35/eQKzhWJL0wWkkveF8zapEuHen8iY5b3egCrzSuc+XA
oTnlSk2H4EkDMxmhWuygpu1r1dPNG8uaSvShiIgCE+MuI3d8/NEc1I8pPtDrmqxd
X+6MQIjCgq/qZtcbO5tFH7g+5FtKeWAMqm88K53e+N6+I0MW15fLP3NvNKozS+p+
TYYlEoinN48ISRdwlDIks4IkCrIg4dWnRwS3+O1XHrycEDsI97Xr/QEevGrVMR9G
20UVGfjAQ1uPDfPpcg8LaNjm7I64twIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFMR
ytK/abCMpiNwB4SzEHyNGzqgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQzhCM0FBNEQ3MkYxMUVGQTVGN0JBN0U3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcbEMA0GCSqGSIb3DQEBCwUA
A4IBAQCU/SLhAm6LJEz1bJGJB6TEmXpqtKKIihtOZln4ctIGhvLkMr4Rx6FVc309
PrwSw6gqUkQAUxtJnVoU7tq79Bc9RCPI0SDU9mJx0JpAV4E7K2bX0quprnImT53y
7uqBFrgZe+Ms403PsTVd2KIf5YydNar3wDOkxFPKOCHxRA4h5J3mXfoOxnetb/An
RbzbE7zNZeDQmailBpbXd05xWJzRqXNRjpZ44orRlrbmmhk7zzGEFWISyYEnpZAL
lVFp0QqDTrCsg6Ou/ZVvg4lQBXEy3ZJhz2QZDLrF5stuoYYWtMUeNpU/dZ0EDS8a
WbGm+zDsj22kUFcJIwpAU0mLuPde
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:40 2025 by rpki-client