Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E38C160DB5711EFAB130B41762E951A.roa
File: 0E38C160DB5711EFAB130B41762E951A.roa (raw, json)
Hash identifier: kJl7kyGgoZxtfPLntuPdHnNM+Lr5mu5swO3mOM3hp80=
Subject key identifier: 7C:74:72:88:4A:6D:D6:54:ED:5F:2B:77:60:50:B4:26:A2:04:DA:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E38C160DB5711EFAB130B41762E951A.roa
Signing time: Sat 25 Jan 2025 20:00:42 +0000
ROA not before: Sat 25 Jan 2025 20:00:38 +0000
ROA not after: Sun 09 Mar 2025 20:00:38 +0000
asID: 63139
IP address blocks: 45.197.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70385 (0x112f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 20:00:38 2025 GMT
Not After : Mar 9 20:00:38 2025 GMT
Subject: CN=679542ea-cea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:b5:6b:a7:da:20:51:c7:65:13:b9:1e:fd:
84:c3:07:ce:b1:bb:05:5b:ab:00:6b:48:41:66:c2:
91:fc:3e:0e:d1:53:56:f8:f5:d1:6a:f7:96:2f:38:
85:9e:ee:29:db:e1:84:ee:91:a0:96:79:e0:25:dd:
e8:21:79:ce:f7:57:80:a5:dc:c8:90:9d:ec:d8:ce:
1c:e3:eb:92:16:7b:52:40:e5:ed:32:62:f1:6e:61:
53:ab:08:80:09:f4:cf:e6:cb:82:9a:c3:17:82:6a:
d9:a3:51:75:bf:18:55:93:07:4c:da:3e:b7:46:7a:
84:49:a9:7d:58:f8:be:cc:e5:fb:b5:1c:03:09:ab:
e2:0f:55:81:d4:de:88:07:6d:78:fc:80:68:7d:aa:
c7:de:49:7f:f0:d2:5d:96:e2:df:3f:4c:8c:d9:29:
7f:e2:7d:4e:11:bd:d2:1b:cf:98:00:0b:f7:e2:7c:
11:bf:06:3f:d0:63:f7:c7:35:76:5e:89:33:70:9d:
54:cf:c2:e3:a3:a9:26:fb:51:b1:a9:a5:cf:d2:62:
08:00:b3:d1:f6:dc:9f:df:6b:f1:d0:75:6f:c6:88:
89:a7:72:46:13:57:f0:6a:de:94:bd:a1:81:11:66:
fa:13:04:77:bf:da:e6:93:b5:f3:8f:a2:83:b0:fa:
be:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:74:72:88:4A:6D:D6:54:ED:5F:2B:77:60:50:B4:26:A2:04:DA:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E38C160DB5711EFAB130B41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.112.0/24
Signature Algorithm: sha256WithRSAEncryption
38:26:fd:0e:24:a6:73:f6:c8:33:5c:ed:12:e9:de:a8:21:47:
09:f9:e0:b9:02:86:86:6d:50:89:c2:d6:6d:e1:70:5e:c5:f4:
51:e4:2b:52:db:87:99:a3:a2:91:81:4d:86:85:5b:d5:4a:ae:
2e:ab:80:3b:0a:20:39:38:78:8b:1a:a8:5b:47:27:21:62:0b:
a6:ca:e3:8f:88:b5:b5:a4:44:62:72:ae:c4:3f:11:31:67:3a:
1c:15:72:24:80:c4:85:44:6a:2f:28:f1:cb:b5:de:46:7a:94:
2b:a1:6f:8b:45:e4:32:a4:de:77:bc:ed:37:6d:78:c8:bb:49:
d6:77:50:24:f9:4d:56:12:57:68:94:82:95:4d:09:98:b8:c5:
bd:73:6c:b3:3b:fb:77:45:4f:85:6d:ad:cd:bc:7f:cf:66:51:
ec:34:8d:f9:82:d7:4d:80:81:d2:a4:cf:93:78:60:8e:bd:e9:
90:3a:e8:39:b7:c8:bf:f6:f4:db:9c:89:46:19:0f:90:ea:7d:
60:97:ac:49:2b:6c:72:52:9b:a7:e6:82:13:9b:39:51:7d:70:
91:83:9f:5a:fb:a3:cd:dc:62:b5:bd:80:b9:c9:05:7a:5f:48:
e7:ed:59:cf:20:33:07:3e:14:05:1c:71:29:58:4c:f7:e9:5d:
1b:65:6f:45
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARLxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MjAwMDM4WhcNMjUwMzA5MjAwMDM4WjAYMRYw
FAYDVQQDEw02Nzk1NDJlYS1jZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxhO1a6faIFHHZRO5Hv2EwwfOsbsFW6sAa0hBZsKR/D4O0VNW+PXRaveW
LziFnu4p2+GE7pGglnngJd3oIXnO91eApdzIkJ3s2M4c4+uSFntSQOXtMmLxbmFT
qwiACfTP5suCmsMXgmrZo1F1vxhVkwdM2j63RnqESal9WPi+zOX7tRwDCaviD1WB
1N6IB214/IBofarH3kl/8NJdluLfP0yM2Sl/4n1OEb3SG8+YAAv34nwRvwY/0GP3
xzV2XokzcJ1Uz8Ljo6km+1GxqaXP0mIIALPR9tyf32vx0HVvxoiJp3JGE1fwat6U
vaGBEWb6EwR3v9rmk7Xzj6KDsPq+BQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHx0
cohKbdZU7V8rd2BQtCaiBNruMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRTM4QzE2MERCNTcxMUVGQUIxMzBCNDE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcVwMA0GCSqGSIb3DQEBCwUA
A4IBAQA4Jv0OJKZz9sgzXO0S6d6oIUcJ+eC5AoaGbVCJwtZt4XBexfRR5CtS24eZ
o6KRgU2GhVvVSq4uq4A7CiA5OHiLGqhbRychYgumyuOPiLW1pERicq7EPxExZzoc
FXIkgMSFRGovKPHLtd5GepQroW+LReQypN53vO03bXjIu0nWd1Ak+U1WEldolIKV
TQmYuMW9c2yzO/t3RU+Fba3NvH/PZlHsNI35gtdNgIHSpM+TeGCOvemQOug5t8i/
9vTbnIlGGQ+Q6n1gl6xJK2xyUpun5oITmzlRfXCRg59a+6PN3GK1vYC5yQV6X0jn
7VnPIDMHPhQFHHEpWEz36V0bZW9F
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:48 2025 by rpki-client