Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D2CEC4AD80111EF95C7E260762E951A.roa
File: 1D2CEC4AD80111EF95C7E260762E951A.roa (raw, json)
Hash identifier: QVLUCfEet5Nba+NZDZrZAcS8dlLysm6qrNH2CSWFizg=
Subject key identifier: 08:64:69:BE:52:0C:81:99:9F:37:83:07:D8:80:43:C9:72:4D:43:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DFA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D2CEC4AD80111EF95C7E260762E951A.roa
Signing time: Tue 21 Jan 2025 14:07:57 +0000
ROA not before: Tue 21 Jan 2025 14:07:53 +0000
ROA not after: Sat 01 Feb 2025 14:07:53 +0000
asID: 62240
IP address blocks: 45.192.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69114 (0x10dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:07:53 2025 GMT
Not After : Feb 1 14:07:53 2025 GMT
Subject: CN=678faa3d-8889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:19:a5:9f:f3:38:0f:1b:95:29:62:f0:3c:84:
e8:0a:04:f4:c1:e4:fa:d5:0a:4a:97:46:ee:c3:18:
c8:d6:1c:a7:ad:b4:cc:4c:6f:3b:d0:84:16:d9:82:
cc:75:92:37:c2:20:69:65:04:3b:c4:2a:05:6c:d5:
37:ef:b7:62:8d:2a:41:1f:4c:97:ca:5b:af:8c:bf:
94:4e:ab:48:22:30:ec:ae:85:d3:1c:17:44:3e:b5:
d7:f8:d0:b8:a0:1e:97:7b:94:ae:12:5e:98:bc:cd:
8e:54:4e:22:9f:bb:bf:3c:38:42:b9:d3:f9:e2:81:
a4:cb:37:b1:3f:39:33:cb:2e:80:4b:4e:65:ba:9b:
bc:26:48:5e:60:cf:e9:d0:e7:28:29:c6:35:e6:70:
04:bd:fe:ba:e6:75:a8:10:03:9c:8d:85:67:3f:6b:
1f:5d:3e:35:94:ee:da:cd:e7:e0:22:7e:af:3a:04:
f5:d9:5c:ba:7b:bf:9e:36:b9:fc:7c:a8:b7:18:11:
4c:07:96:f0:78:4b:a9:ca:4f:55:50:47:1e:6e:16:
aa:f8:80:5f:4d:ff:c4:d9:db:5e:47:87:1f:48:2d:
ca:09:e2:4f:e0:21:52:e5:88:8b:b3:02:71:39:5d:
30:c6:d1:63:d6:7e:04:53:d8:03:83:2a:90:11:c4:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:64:69:BE:52:0C:81:99:9F:37:83:07:D8:80:43:C9:72:4D:43:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D2CEC4AD80111EF95C7E260762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.32.0/24
Signature Algorithm: sha256WithRSAEncryption
69:93:dc:f9:7a:0d:4f:8d:48:6b:6f:8e:13:71:64:f9:55:74:
13:85:c9:22:1a:c9:6d:59:d8:d8:36:d9:49:f4:b3:ae:ab:f2:
d6:32:cb:aa:7d:c5:13:33:3b:88:ee:24:e6:c2:13:f3:28:b1:
4b:b7:80:c0:81:c0:92:6d:9e:7f:48:49:84:48:43:fb:db:33:
5a:51:e6:c5:ed:ac:c8:4c:ec:43:52:12:72:fb:63:27:45:85:
26:26:12:f6:06:3d:1f:73:26:c0:a3:9a:7e:56:60:74:c5:e9:
6a:3c:b1:50:d5:03:88:75:04:93:ec:93:26:4d:6e:28:87:35:
0f:b1:86:c8:b9:52:33:63:43:08:62:93:85:00:da:45:9e:81:
1f:ae:27:55:63:a8:c3:da:e7:85:09:85:b0:7e:3a:a6:a7:d6:
0f:0b:46:e3:ff:1e:ea:19:71:08:e3:be:8d:8e:8c:1a:ed:f7:
1c:ac:1e:0b:dd:89:bf:d5:e0:32:c2:6b:1a:bb:8a:bf:1f:51:
7c:57:02:a9:53:fc:42:73:ec:3d:52:73:d9:7e:fa:ed:0a:ac:
d4:37:26:b0:86:75:14:6a:26:be:4f:a9:b5:ca:55:b4:c1:a3:
44:bf:16:42:b9:6b:35:46:b3:0b:05:b6:b5:31:34:72:7a:42:
46:aa:9b:5d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ36MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTQwNzUzWhcNMjUwMjAxMTQwNzUzWjAYMRYw
FAYDVQQDEw02NzhmYWEzZC04ODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2hmln/M4DxuVKWLwPIToCgT0weT61QpKl0buwxjI1hynrbTMTG870IQW
2YLMdZI3wiBpZQQ7xCoFbNU377dijSpBH0yXyluvjL+UTqtIIjDsroXTHBdEPrXX
+NC4oB6Xe5SuEl6YvM2OVE4in7u/PDhCudP54oGkyzexPzkzyy6AS05lupu8Jkhe
YM/p0OcoKcY15nAEvf665nWoEAOcjYVnP2sfXT41lO7azefgIn6vOgT12Vy6e7+e
Nrn8fKi3GBFMB5bweEupyk9VUEcebhaq+IBfTf/E2dteR4cfSC3KCeJP4CFS5YiL
swJxOV0wxtFj1n4EU9gDgyqQEcSefwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAhk
ab5SDIGZnzeDB9iAQ8lyTUOhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRDJDRUM0QUQ4MDExMUVGOTVDN0UyNjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAgMA0GCSqGSIb3DQEBCwUA
A4IBAQBpk9z5eg1PjUhrb44TcWT5VXQThckiGsltWdjYNtlJ9LOuq/LWMsuqfcUT
MzuI7iTmwhPzKLFLt4DAgcCSbZ5/SEmESEP72zNaUebF7azITOxDUhJy+2MnRYUm
JhL2Bj0fcybAo5p+VmB0xelqPLFQ1QOIdQST7JMmTW4ohzUPsYbIuVIzY0MIYpOF
ANpFnoEfridVY6jD2ueFCYWwfjqmp9YPC0bj/x7qGXEI476Njowa7fccrB4L3Ym/
1eAywmsau4q/H1F8VwKpU/xCc+w9UnPZfvrtCqzUNyawhnUUaia+T6m1ylW0waNE
vxZCuWs1RrMLBba1MTRyekJGqptd
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:39:18 2025 by rpki-client