Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1404B580D7CF11EFAAB8709A762E951A.roa
File: 1404B580D7CF11EFAAB8709A762E951A.roa (raw, json)
Hash identifier: /wUkg1MKJQNhGLphBd9ywCyc3KreECLRdJ6Uey2DMwM=
Subject key identifier: EA:58:67:46:BE:C5:7A:09:B6:A4:5E:63:92:DA:0A:16:BE:04:AE:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1404B580D7CF11EFAAB8709A762E951A.roa
Signing time: Tue 21 Jan 2025 08:09:47 +0000
ROA not before: Tue 21 Jan 2025 08:09:43 +0000
ROA not after: Sat 01 Feb 2025 08:09:43 +0000
asID: 48031
IP address blocks: 45.200.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68844 (0x10cec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 08:09:43 2025 GMT
Not After : Feb 1 08:09:43 2025 GMT
Subject: CN=678f564a-6ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:3a:13:75:4b:ab:9b:2c:04:0f:3b:55:ec:
b4:73:f9:4a:d3:57:30:1c:73:2d:f5:7c:f7:7c:46:
76:30:8d:7f:1a:1b:76:b5:2d:03:6a:d7:d4:ad:54:
4a:4a:0c:27:32:c1:02:f8:52:96:3e:02:4b:91:eb:
aa:3c:a5:8d:e5:c6:3e:d2:2f:20:2f:84:a0:e8:f5:
44:9b:d5:6b:28:13:88:4b:38:65:33:98:93:40:e4:
bf:66:c5:86:c4:ab:27:ce:1c:c6:b6:88:bb:e7:37:
1b:0e:2a:70:0a:e9:a2:87:4c:33:06:7f:ee:d0:ed:
22:f8:54:2e:bc:f1:74:b1:42:07:08:e3:38:21:b3:
d4:ff:28:ec:95:5c:35:be:0b:f7:6f:4c:d9:6e:1f:
c4:98:a9:f0:7b:3b:10:d3:b9:d3:75:ea:8c:49:22:
79:12:a3:a3:1a:66:bd:a5:63:99:88:2a:ab:06:1f:
b8:d8:61:08:9c:4c:6d:06:83:95:94:05:5d:07:b1:
15:a9:0d:9e:60:b2:6a:e6:fc:8a:aa:68:d1:43:75:
e9:41:ab:88:12:d1:ee:8a:87:77:25:71:06:91:d3:
32:7b:4f:b1:89:4d:df:62:b3:73:8e:8b:86:72:d3:
02:69:b6:50:8c:08:63:65:da:07:da:b6:f4:5e:22:
6f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:58:67:46:BE:C5:7A:09:B6:A4:5E:63:92:DA:0A:16:BE:04:AE:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1404B580D7CF11EFAAB8709A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.188.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b5:8f:0f:45:2c:8d:17:a3:10:78:a1:91:55:33:66:36:4d:
a9:2b:a8:60:f0:47:d0:01:ab:45:67:47:22:13:69:13:84:c9:
b6:c0:bd:ac:f5:b6:1e:09:bb:ee:15:a7:57:5b:3e:b4:51:b2:
12:b4:e5:9d:21:0d:fd:c5:b7:73:68:df:3b:37:f8:06:e6:65:
ba:28:58:7b:cf:b1:a5:12:77:c0:e0:b3:39:71:72:61:91:dc:
a0:2a:4b:cc:d4:2d:9e:8a:06:ea:b3:89:2b:3c:bb:07:9a:3a:
ff:89:36:69:cc:83:de:08:83:01:bb:3c:38:c3:50:50:83:63:
64:f3:2e:27:20:3e:ff:b5:7e:cf:fc:76:c8:44:ca:55:6b:bd:
fe:3e:7c:3b:93:95:33:1a:f4:1f:b6:22:45:9e:c2:40:c1:fb:
d7:8d:b7:3b:63:3b:01:f9:28:b0:c2:a5:34:49:bb:89:16:ac:
c6:15:f1:93:aa:66:b8:26:5d:3f:16:e0:e6:d7:a9:82:0f:5f:
48:d1:90:c9:2c:4f:bf:2a:d0:04:00:2d:07:6b:df:04:30:db:
2f:2d:a2:ab:36:fa:5d:63:9b:10:76:b5:f6:95:c0:fe:62:1e:
04:28:17:e4:95:54:cb:5d:6b:6b:30:70:67:10:23:1b:04:6d:
79:f0:7c:c7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQzsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMDgwOTQzWhcNMjUwMjAxMDgwOTQzWjAYMRYw
FAYDVQQDEw02NzhmNTY0YS02Y2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAszk6E3VLq5ssBA87Vey0c/lK01cwHHMt9Xz3fEZ2MI1/Ght2tS0DatfU
rVRKSgwnMsEC+FKWPgJLkeuqPKWN5cY+0i8gL4Sg6PVEm9VrKBOISzhlM5iTQOS/
ZsWGxKsnzhzGtoi75zcbDipwCumih0wzBn/u0O0i+FQuvPF0sUIHCOM4IbPU/yjs
lVw1vgv3b0zZbh/EmKnwezsQ07nTdeqMSSJ5EqOjGma9pWOZiCqrBh+42GEInExt
BoOVlAVdB7EVqQ2eYLJq5vyKqmjRQ3XpQauIEtHuiod3JXEGkdMye0+xiU3fYrNz
jouGctMCabZQjAhjZdoH2rb0XiJvWQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOpY
Z0a+xXoJtqReY5LaCha+BK4uMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNDA0QjU4MEQ3Q0YxMUVGQUFCODcwOUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALci8MA0GCSqGSIb3DQEBCwUA
A4IBAQARtY8PRSyNF6MQeKGRVTNmNk2pK6hg8EfQAatFZ0ciE2kThMm2wL2s9bYe
CbvuFadXWz60UbIStOWdIQ39xbdzaN87N/gG5mW6KFh7z7GlEnfA4LM5cXJhkdyg
KkvM1C2eigbqs4krPLsHmjr/iTZpzIPeCIMBuzw4w1BQg2Nk8y4nID7/tX7P/HbI
RMpVa73+Pnw7k5UzGvQftiJFnsJAwfvXjbc7YzsB+SiwwqU0SbuJFqzGFfGTqma4
Jl0/FuDm16mCD19I0ZDJLE+/KtAEAC0Ha98EMNsvLaKrNvpdY5sQdrX2lcD+Yh4E
KBfklVTLXWtrMHBnECMbBG158HzH
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:15:17 2025 by rpki-client