Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29F8E9B6DA9E11EF88885D60762E951A.roa
File: 29F8E9B6DA9E11EF88885D60762E951A.roa (raw, json)
Hash identifier: cI7TpASQIveHk7nRtsyXUFU4Npp7eSnvDUZXWHOWcFg=
Subject key identifier: 13:00:97:DB:04:59:45:A1:81:6D:75:39:7A:6C:FB:CC:E7:2C:26:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29F8E9B6DA9E11EF88885D60762E951A.roa
Signing time: Fri 24 Jan 2025 21:57:12 +0000
ROA not before: Fri 24 Jan 2025 21:57:08 +0000
ROA not after: Tue 25 Feb 2025 21:57:08 +0000
asID: 202656
IP address blocks: 45.199.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69836 (0x110cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:57:08 2025 GMT
Not After : Feb 25 21:57:08 2025 GMT
Subject: CN=67940cb7-c106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5a:62:eb:06:c7:cc:48:ee:92:b1:86:e4:6d:
b4:f2:62:ad:38:da:1a:17:71:51:7b:33:ad:be:fc:
fa:35:84:83:33:b9:1e:cf:02:33:cf:37:12:a0:de:
d7:d3:f3:05:43:19:80:38:04:b1:1e:fa:2f:3b:2b:
94:2e:16:07:06:ab:51:4a:51:75:2f:d9:90:27:76:
ea:48:f0:37:c8:58:ac:4f:d9:a6:3d:3a:b1:98:ba:
bb:77:ac:ba:75:8b:d3:01:36:04:be:5e:58:2f:41:
7d:35:71:85:a1:20:39:31:0a:2f:5d:50:c2:b2:06:
3c:8f:44:cd:73:4b:bd:75:c8:c4:10:70:cc:23:20:
03:c6:20:cd:aa:02:93:05:16:5d:ab:6f:d8:95:45:
12:44:38:ee:63:fc:13:30:46:c9:b0:31:d2:ec:57:
bb:37:2f:17:2e:c5:6a:53:c8:25:5b:a5:a0:67:5f:
76:68:d5:18:b0:5a:9b:ed:c5:d7:f3:b9:f7:5d:2a:
77:de:ec:32:7d:34:90:d3:f1:47:7e:e8:fa:51:5a:
11:2f:b9:e4:3e:bc:25:7d:70:0e:e3:cd:d0:6c:df:
aa:59:0b:ae:0b:74:2b:ed:ec:2c:e2:ab:ac:85:f3:
76:8d:f7:f0:68:80:b9:34:65:d4:ba:c6:17:26:36:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:00:97:DB:04:59:45:A1:81:6D:75:39:7A:6C:FB:CC:E7:2C:26:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29F8E9B6DA9E11EF88885D60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:47:70:58:2d:17:d0:14:24:6e:af:6c:6f:82:4c:aa:c0:a5:
1a:5e:be:08:e9:3c:d7:4e:de:93:5f:88:3a:94:1f:7e:20:b3:
5c:ea:a6:16:5c:a6:84:92:9f:3c:41:46:09:42:21:19:09:bc:
aa:58:a4:32:e8:02:5d:5a:9b:4f:c5:2d:1b:4f:90:4c:ff:1f:
27:48:20:14:9b:97:74:d4:04:b6:3a:0e:51:25:a7:a3:a3:78:
44:bb:c5:8b:4b:bc:8c:a7:ef:e7:3b:3e:ff:ae:d6:a7:f6:39:
5b:b9:27:d1:20:7f:e3:fc:e8:8b:21:03:7c:9c:41:fc:23:7a:
5b:78:58:ef:cd:6b:55:0a:13:e4:85:45:ac:18:f6:3f:36:f9:
08:d7:00:18:7f:ba:04:0b:22:43:7b:0e:a6:ce:5b:f0:cf:fd:
e7:55:f5:30:61:c0:39:04:f0:31:4c:5e:5f:58:5d:8f:f3:d4:
84:38:28:95:1e:2e:8b:79:6a:65:57:17:35:64:96:19:ad:83:
4f:25:a6:81:74:b7:a9:f3:ee:de:ee:63:59:76:3e:01:c2:13:
7e:d2:31:26:c1:a9:d4:53:e3:8f:d8:57:2f:5a:f4:95:29:a0:
c4:2e:aa:de:64:ac:eb:de:ca:b7:6e:53:1a:d7:b5:0e:79:0f:
49:9a:4c:89
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARDMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MjE1NzA4WhcNMjUwMjI1MjE1NzA4WjAYMRYw
FAYDVQQDEw02Nzk0MGNiNy1jMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA91pi6wbHzEjukrGG5G208mKtONoaF3FRezOtvvz6NYSDM7kezwIzzzcS
oN7X0/MFQxmAOASxHvovOyuULhYHBqtRSlF1L9mQJ3bqSPA3yFisT9mmPTqxmLq7
d6y6dYvTATYEvl5YL0F9NXGFoSA5MQovXVDCsgY8j0TNc0u9dcjEEHDMIyADxiDN
qgKTBRZdq2/YlUUSRDjuY/wTMEbJsDHS7Fe7Ny8XLsVqU8glW6WgZ192aNUYsFqb
7cXX87n3XSp33uwyfTSQ0/FHfuj6UVoRL7nkPrwlfXAO483QbN+qWQuuC3Qr7ews
4qushfN2jffwaIC5NGXUusYXJjY+bwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBMA
l9sEWUWhgW11OXps+8znLCYoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yOUY4RTlCNkRBOUUxMUVGODg4ODVENjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfxMA0GCSqGSIb3DQEBCwUA
A4IBAQBtR3BYLRfQFCRur2xvgkyqwKUaXr4I6TzXTt6TX4g6lB9+ILNc6qYWXKaE
kp88QUYJQiEZCbyqWKQy6AJdWptPxS0bT5BM/x8nSCAUm5d01AS2Og5RJaejo3hE
u8WLS7yMp+/nOz7/rtan9jlbuSfRIH/j/OiLIQN8nEH8I3pbeFjvzWtVChPkhUWs
GPY/NvkI1wAYf7oECyJDew6mzlvwz/3nVfUwYcA5BPAxTF5fWF2P89SEOCiVHi6L
eWplVxc1ZJYZrYNPJaaBdLep8+7e7mNZdj4BwhN+0jEmwanUU+OP2FcvWvSVKaDE
LqreZKzr3sq3blMa17UOeQ9JmkyJ
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:13:02 2025 by rpki-client