Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24DF5050D51211EF9CB46E9F762E951A.roa
File: 24DF5050D51211EF9CB46E9F762E951A.roa (raw, json)
Hash identifier: nHUH+rPCEf5YcPx02o+zBXUWZnJcu8ivjKSfB6iFofw=
Subject key identifier: 6C:B8:47:54:EF:EF:77:2F:8D:7F:28:8D:D8:45:ED:13:F5:5D:45:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24DF5050D51211EF9CB46E9F762E951A.roa
Signing time: Fri 17 Jan 2025 20:32:18 +0000
ROA not before: Fri 17 Jan 2025 20:32:14 +0000
ROA not after: Sat 22 Feb 2025 20:32:14 +0000
asID: 139646
IP address blocks: 45.200.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68260 (0x10aa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 20:32:14 2025 GMT
Not After : Feb 22 20:32:14 2025 GMT
Subject: CN=678abe52-effa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:f6:2c:db:26:aa:49:65:67:0f:b7:5e:83:
db:21:c3:fb:6b:97:3a:a9:56:a7:1f:2c:72:9d:26:
8d:76:07:3c:5a:54:75:d2:e9:7d:ab:0d:26:b6:d1:
5e:4b:a5:4a:97:10:34:f4:b2:3f:ad:92:e7:26:80:
a1:b2:75:d4:73:9e:10:09:4c:6a:5e:77:be:6e:34:
61:a3:e7:1b:ba:27:a3:76:36:70:2f:81:50:89:1e:
4e:42:c6:be:6b:bd:8a:97:ea:8c:db:21:80:6a:5f:
24:77:5a:66:9f:c6:ca:53:a4:8c:18:08:26:20:68:
35:ed:a7:79:e1:e0:7e:90:3e:3b:d0:0e:3f:7f:db:
9d:29:57:05:5d:6d:08:09:83:3f:2d:32:db:04:65:
f7:d9:4d:77:9b:3f:9b:d5:47:78:c2:91:b0:6d:cb:
78:18:ab:d4:d7:1b:3b:f3:00:8d:10:4e:52:af:8d:
35:50:8b:52:56:0e:7b:50:9c:be:e1:bb:64:00:07:
4e:1e:d7:9f:f0:2d:87:7e:53:dd:71:bc:d6:61:54:
f7:11:98:6a:ce:1b:4d:ba:e8:6f:f3:13:bc:6e:3a:
8a:65:e8:b1:d4:5a:c3:14:52:19:9c:74:79:0d:ee:
70:42:5f:f1:2a:4a:5e:be:58:41:39:d4:3d:41:5e:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B8:47:54:EF:EF:77:2F:8D:7F:28:8D:D8:45:ED:13:F5:5D:45:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24DF5050D51211EF9CB46E9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.18.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:45:54:75:26:85:b2:e8:e2:dc:04:2b:c7:0c:8f:5d:89:3d:
53:28:44:e2:39:29:08:a3:e3:50:d6:87:c4:30:0c:f4:06:1c:
95:72:7c:7b:12:b5:45:3b:46:fc:24:a8:ec:e6:a5:f0:0f:49:
88:57:df:04:06:1b:d9:16:2d:a1:0d:c9:d3:70:e5:12:ba:1a:
84:e3:53:e8:78:27:2e:0d:d0:3e:49:75:bd:83:19:92:50:d4:
4a:e7:da:59:f6:3c:69:9c:61:4d:62:56:ea:02:1a:87:da:76:
f2:5a:35:50:bf:84:f8:b4:fb:9d:27:02:a3:8f:f8:0a:0c:d1:
68:7d:da:da:83:08:39:f7:83:7c:cf:02:ad:60:f6:89:f5:34:
94:10:2a:63:c6:ec:db:9b:e0:9e:77:a5:4f:3e:4d:ab:75:7c:
c5:37:5a:a9:50:1d:be:ae:5b:d3:44:0b:ff:ae:3c:08:51:67:
f5:e9:45:59:3d:f0:18:3f:c8:3b:02:fe:7f:55:0f:69:d2:01:
9a:55:0e:d7:d3:44:5a:a6:d6:ec:43:78:45:7b:2a:5b:d1:b5:
e8:a1:a8:d6:1b:a7:9d:eb:56:44:9c:b6:2b:a5:0a:89:72:02:
85:9c:67:99:ff:e5:08:aa:2b:57:93:0f:60:54:d0:4e:66:df:
ef:f9:26:bc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQqkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MjAzMjE0WhcNMjUwMjIyMjAzMjE0WjAYMRYw
FAYDVQQDEw02NzhhYmU1Mi1lZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwxX2LNsmqkllZw+3XoPbIcP7a5c6qVanHyxynSaNdgc8WlR10ul9qw0m
ttFeS6VKlxA09LI/rZLnJoChsnXUc54QCUxqXne+bjRho+cbuiejdjZwL4FQiR5O
Qsa+a72Kl+qM2yGAal8kd1pmn8bKU6SMGAgmIGg17ad54eB+kD470A4/f9udKVcF
XW0ICYM/LTLbBGX32U13mz+b1Ud4wpGwbct4GKvU1xs78wCNEE5Sr401UItSVg57
UJy+4btkAAdOHtef8C2HflPdcbzWYVT3EZhqzhtNuuhv8xO8bjqKZeix1FrDFFIZ
nHR5De5wQl/xKkpevlhBOdQ9QV5OIwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGy4
R1Tv73cvjX8ojdhF7RP1XUVcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNERGNTA1MEQ1MTIxMUVGOUNCNDZFOUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcgSMA0GCSqGSIb3DQEBCwUA
A4IBAQAORVR1JoWy6OLcBCvHDI9diT1TKETiOSkIo+NQ1ofEMAz0BhyVcnx7ErVF
O0b8JKjs5qXwD0mIV98EBhvZFi2hDcnTcOUSuhqE41PoeCcuDdA+SXW9gxmSUNRK
59pZ9jxpnGFNYlbqAhqH2nbyWjVQv4T4tPudJwKjj/gKDNFofdragwg594N8zwKt
YPaJ9TSUECpjxuzbm+Ced6VPPk2rdXzFN1qpUB2+rlvTRAv/rjwIUWf16UVZPfAY
P8g7Av5/VQ9p0gGaVQ7X00RaptbsQ3hFeypb0bXooajWG6ed61ZEnLYrpQqJcgKF
nGeZ/+UIqitXkw9gVNBOZt/v+Sa8
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:10:47 2025 by rpki-client