Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17321234DC8411EFA049D1B5762E951A.roa
File: 17321234DC8411EFA049D1B5762E951A.roa (raw, json)
Hash identifier: jip3anD3OSsBo7iMLULGNSSf6naFJZJ2MW+X+41payc=
Subject key identifier: E0:84:01:D5:E6:09:D4:DB:55:BE:FD:78:43:3B:91:8C:1F:92:76:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01148D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17321234DC8411EFA049D1B5762E951A.roa
Signing time: Mon 27 Jan 2025 07:55:35 +0000
ROA not before: Mon 27 Jan 2025 07:55:32 +0000
ROA not after: Tue 04 Mar 2025 07:55:32 +0000
asID: 138995
IP address blocks: 45.192.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70797 (0x1148d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 07:55:32 2025 GMT
Not After : Mar 4 07:55:32 2025 GMT
Subject: CN=67973bf7-0069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:c7:23:96:e9:4b:09:63:e9:8c:8d:e9:d1:
08:c0:09:e8:36:16:f2:09:df:43:15:cf:04:58:1f:
35:e5:77:71:d1:4d:cf:59:ca:21:93:f3:c8:50:73:
8b:cd:b1:7a:44:9e:41:ff:f6:4b:f8:10:a4:5d:e5:
20:80:49:c1:59:b4:ba:fd:44:65:fc:b0:31:f3:66:
a9:82:e8:0c:56:41:28:e4:93:a8:f7:ef:aa:1f:a3:
92:28:c1:4e:21:61:f0:a0:ba:55:c3:91:42:4e:b8:
36:c7:b9:4f:b3:1c:73:37:7d:cb:c7:e7:44:b2:a5:
d3:e9:b2:13:4c:45:81:3c:38:a6:8b:4d:3f:36:ad:
55:fe:bc:d0:4c:ee:72:26:48:f6:0d:42:9c:e8:d8:
f0:0a:5d:a1:56:07:ed:3b:0e:ce:41:6a:b6:34:43:
1f:31:98:05:33:4c:ec:34:df:f6:e8:dc:8b:44:3e:
65:20:71:8a:e9:cf:f1:23:64:57:e9:48:6f:43:10:
72:f8:43:1b:5d:a5:f4:fc:4a:1d:19:7f:e9:7f:68:
e3:36:72:59:70:2a:3e:9e:57:70:a4:5e:cc:79:da:
50:4a:14:6a:c6:fd:bf:96:ac:26:8d:44:20:e8:5d:
3f:01:17:35:da:ce:f9:9a:05:86:16:9e:7d:a1:6c:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:84:01:D5:E6:09:D4:DB:55:BE:FD:78:43:3B:91:8C:1F:92:76:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17321234DC8411EFA049D1B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6d:03:be:a9:79:3c:57:47:c7:00:b2:56:a0:bf:fa:41:dc:
29:23:63:88:ad:af:5f:ac:79:0f:0e:e4:da:86:d0:9e:a4:19:
ed:10:a6:60:fe:cd:94:f2:20:5b:fe:b6:b9:60:e7:1e:5a:05:
6c:64:b0:0e:5d:0d:d9:0c:9a:7e:0e:31:bd:1c:26:ab:09:b7:
d1:d3:f4:d0:b6:fe:30:ef:0a:19:f6:51:c0:2e:79:1a:3c:f3:
04:c1:ec:51:90:14:7d:62:87:6c:ac:aa:22:73:f9:84:1c:c0:
d5:d7:e7:4b:95:d3:eb:ef:bd:90:df:18:4d:84:42:60:b8:14:
c1:22:f0:67:b6:ff:0e:90:cc:9c:fa:dc:e9:20:54:4d:31:58:
9e:80:99:9a:65:98:59:10:9a:f7:7b:3f:c9:73:e6:97:05:fe:
76:df:55:9f:76:a1:3d:48:13:00:2a:b4:29:07:fd:e2:07:9a:
d6:af:72:8c:c7:1a:1a:90:ec:be:c4:59:39:46:2f:a0:80:9e:
ec:d9:72:7e:cb:2c:c3:3c:56:2e:79:05:d0:8d:dc:10:45:93:
44:cc:f8:4b:27:87:08:1d:1f:53:1b:8b:f1:ae:8e:d2:1b:87:
1b:90:18:f8:03:4d:f6:52:97:82:b1:4b:d3:a9:7b:61:b3:21:
5b:20:fe:bd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARSNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MDc1NTMyWhcNMjUwMzA0MDc1NTMyWjAYMRYw
FAYDVQQDEw02Nzk3M2JmNy0wMDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsM/HI5bpSwlj6YyN6dEIwAnoNhbyCd9DFc8EWB815Xdx0U3PWcohk/PI
UHOLzbF6RJ5B//ZL+BCkXeUggEnBWbS6/URl/LAx82apgugMVkEo5JOo9++qH6OS
KMFOIWHwoLpVw5FCTrg2x7lPsxxzN33Lx+dEsqXT6bITTEWBPDimi00/Nq1V/rzQ
TO5yJkj2DUKc6NjwCl2hVgftOw7OQWq2NEMfMZgFM0zsNN/26NyLRD5lIHGK6c/x
I2RX6UhvQxBy+EMbXaX0/EodGX/pf2jjNnJZcCo+nldwpF7MedpQShRqxv2/lqwm
jUQg6F0/ARc12s75mgWGFp59oWzCpwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOCE
AdXmCdTbVb79eEM7kYwfknYDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNzMyMTIzNERDODQxMUVGQTA0OUQxQjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcDWMA0GCSqGSIb3DQEBCwUA
A4IBAQAjbQO+qXk8V0fHALJWoL/6QdwpI2OIra9frHkPDuTahtCepBntEKZg/s2U
8iBb/ra5YOceWgVsZLAOXQ3ZDJp+DjG9HCarCbfR0/TQtv4w7woZ9lHALnkaPPME
wexRkBR9YodsrKoic/mEHMDV1+dLldPr772Q3xhNhEJguBTBIvBntv8OkMyc+tzp
IFRNMViegJmaZZhZEJr3ez/Jc+aXBf5231WfdqE9SBMAKrQpB/3iB5rWr3KMxxoa
kOy+xFk5Ri+ggJ7s2XJ+yyzDPFYueQXQjdwQRZNEzPhLJ4cIHR9TG4vxro7SG4cb
kBj4A032UpeCsUvTqXthsyFbIP69
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:15:58 2025 by rpki-client