Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C957B40D3F411EF94892158762E951A.roa
File: 2C957B40D3F411EF94892158762E951A.roa (raw, json)
Hash identifier: kntXnyy4yKKEbi64po6w1235LrpMzPVuZ78xMYlW0xY=
Subject key identifier: 51:42:36:C2:53:EC:79:7D:04:85:91:AF:53:86:9A:86:4A:67:1B:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C957B40D3F411EF94892158762E951A.roa
Signing time: Thu 16 Jan 2025 10:25:15 +0000
ROA not before: Thu 16 Jan 2025 10:25:11 +0000
ROA not after: Sun 16 Mar 2025 10:25:11 +0000
asID: 17561
IP address blocks: 45.195.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67838 (0x108fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 10:25:11 2025 GMT
Not After : Mar 16 10:25:11 2025 GMT
Subject: CN=6788de8a-8b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:88:12:d3:08:98:71:45:b6:02:04:b9:87:
4e:b4:db:77:53:62:40:bc:ba:67:02:ac:1f:cf:c5:
0b:40:2d:2e:d8:37:d8:7f:a4:1c:4d:9b:fe:31:de:
cf:c1:69:6d:1b:51:7a:bc:49:35:d9:31:d9:4e:17:
d5:e7:33:33:a5:ee:44:61:de:8b:86:1b:55:3a:ed:
91:c8:94:92:b9:35:91:d1:77:1d:de:b8:72:85:25:
ee:d7:76:78:f4:49:77:3a:ad:04:c1:4b:90:db:4a:
e0:b1:78:31:cf:00:20:20:89:71:d3:41:b0:09:23:
82:c8:64:b4:f8:75:14:f0:b6:52:be:fe:57:fb:84:
55:8f:96:b0:3f:21:58:22:c6:b1:14:9a:46:8d:67:
5b:af:1d:d0:d1:44:46:66:0c:fb:24:d1:c1:45:71:
1f:85:89:4c:10:55:49:40:ae:d9:79:a4:e8:19:13:
05:fa:2a:7c:f6:f0:f0:d4:a2:76:7f:36:4f:fb:67:
d9:3c:e6:2a:f1:ee:ee:06:c9:98:9c:8b:92:9f:2a:
49:58:86:1e:0a:f8:84:a0:01:06:62:64:92:f5:a7:
f2:9b:e8:eb:dd:d2:2a:c4:f5:17:76:36:51:a9:0a:
3e:fa:10:00:87:72:9f:19:17:44:61:0e:35:27:17:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:42:36:C2:53:EC:79:7D:04:85:91:AF:53:86:9A:86:4A:67:1B:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C957B40D3F411EF94892158762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.202.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b8:b1:d8:34:a1:c1:ee:7b:ca:0d:cb:b3:8f:24:8e:27:71:
f4:13:3e:dc:81:93:91:9e:59:72:09:a5:5f:fa:a3:c5:92:9a:
39:1f:0b:95:55:69:59:29:a3:8e:9f:b8:ae:a9:fe:f1:1e:19:
bf:74:53:3a:e1:fd:fc:5d:ea:96:f5:11:57:d4:c1:54:cf:7f:
fd:f0:f7:8c:ae:68:44:c3:f6:13:e2:19:00:96:2b:1d:cc:cd:
39:a9:c5:5f:90:49:b1:68:24:0a:1e:f0:62:fb:28:59:31:8b:
61:13:37:5f:5a:26:ea:6b:ff:10:13:93:fe:73:65:e5:fb:b9:
dd:c5:18:a7:ef:28:5f:59:9e:40:72:66:b3:f0:44:ab:54:0f:
bc:d6:22:0a:f7:8a:c5:8f:d4:56:e1:28:3e:c8:0b:78:24:52:
b7:d5:9e:a1:41:e7:e1:86:11:4a:bc:b1:e4:56:35:45:2b:a7:
b8:08:26:b8:79:47:9d:6b:c2:15:f7:c2:25:f9:91:cc:c8:88:
c4:c0:33:c6:d6:70:a3:ec:26:9a:0c:8b:e6:4f:44:8f:89:9e:
02:f6:a6:82:62:2b:9a:7d:e6:0a:06:95:ea:e9:49:84:6a:f7:
b5:da:e3:27:25:fb:a4:3c:60:f5:bd:40:78:68:48:29:8b:a3:
b9:15:17:0e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQj+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE2MTAyNTExWhcNMjUwMzE2MTAyNTExWjAYMRYw
FAYDVQQDEw02Nzg4ZGU4YS04YjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyd+IEtMImHFFtgIEuYdOtNt3U2JAvLpnAqwfz8ULQC0u2DfYf6QcTZv+
Md7PwWltG1F6vEk12THZThfV5zMzpe5EYd6LhhtVOu2RyJSSuTWR0Xcd3rhyhSXu
13Z49El3Oq0EwUuQ20rgsXgxzwAgIIlx00GwCSOCyGS0+HUU8LZSvv5X+4RVj5aw
PyFYIsaxFJpGjWdbrx3Q0URGZgz7JNHBRXEfhYlMEFVJQK7ZeaToGRMF+ip89vDw
1KJ2fzZP+2fZPOYq8e7uBsmYnIuSnypJWIYeCviEoAEGYmSS9afym+jr3dIqxPUX
djZRqQo++hAAh3KfGRdEYQ41JxdPsQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFFC
NsJT7Hl9BIWRr1OGmoZKZxvEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQzk1N0I0MEQzRjQxMUVGOTQ4OTIxNTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcPKMA0GCSqGSIb3DQEBCwUA
A4IBAQBAuLHYNKHB7nvKDcuzjySOJ3H0Ez7cgZORnllyCaVf+qPFkpo5HwuVVWlZ
KaOOn7iuqf7xHhm/dFM64f38XeqW9RFX1MFUz3/98PeMrmhEw/YT4hkAlisdzM05
qcVfkEmxaCQKHvBi+yhZMYthEzdfWibqa/8QE5P+c2Xl+7ndxRin7yhfWZ5Acmaz
8ESrVA+81iIK94rFj9RW4Sg+yAt4JFK31Z6hQefhhhFKvLHkVjVFK6e4CCa4eUed
a8IV98Il+ZHMyIjEwDPG1nCj7CaaDIvmT0SPiZ4C9qaCYiuafeYKBpXq6UmEave1
2uMnJfukPGD1vUB4aEgpi6O5FRcO
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:56:01 2025 by rpki-client