Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/331E7214D80E11EF80DD20B4762E951A.roa
File: 331E7214D80E11EF80DD20B4762E951A.roa (raw, json)
Hash identifier: oNXRaqX+Fk+zzfcrnYGo88r/s4WKdizz0ZSA5MUA2bU=
Subject key identifier: D6:23:D6:DC:8E:E5:BA:72:07:02:C1:2E:D1:A8:C2:D1:CC:20:C5:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/331E7214D80E11EF80DD20B4762E951A.roa
Signing time: Tue 21 Jan 2025 15:41:37 +0000
ROA not before: Tue 21 Jan 2025 15:41:33 +0000
ROA not after: Sat 01 Feb 2025 15:41:33 +0000
asID: 202656
IP address blocks: 45.200.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69204 (0x10e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 15:41:33 2025 GMT
Not After : Feb 1 15:41:33 2025 GMT
Subject: CN=678fc031-dcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b0:9a:6f:c3:30:fc:1c:b3:56:cc:52:7b:6b:
fd:73:78:46:93:69:8b:b5:00:fc:1f:bd:66:bb:d9:
9b:50:4d:7f:1d:66:ad:54:05:c1:45:cf:b9:c5:f1:
8c:48:d5:2d:e1:d8:32:d1:6c:e0:9e:bb:04:fc:c7:
7d:f2:ed:9c:60:19:2e:ef:83:00:35:f8:38:04:b6:
a6:a7:c4:8a:1d:00:88:9a:47:64:0e:64:80:f6:ae:
e1:f0:63:16:27:dc:69:f7:e4:72:5f:5f:26:65:33:
27:a2:76:80:5c:b4:da:17:bc:d7:bb:ba:99:23:50:
b3:f3:26:ae:f6:80:25:cf:ed:67:a1:37:14:e2:4e:
c4:b6:f0:8a:0a:71:63:93:d6:54:07:0c:17:da:03:
c6:aa:62:16:6f:5a:2c:de:e7:89:da:5a:3f:33:0a:
b4:44:e4:e7:55:5e:91:76:50:b8:b3:bd:ea:23:0f:
1e:d7:64:7e:75:78:69:cc:b0:2a:81:d2:d6:60:40:
0a:f4:a9:37:3b:81:2e:58:71:ec:25:c0:d9:94:ec:
0b:06:e0:1d:27:8f:23:db:d4:9a:1b:05:95:3b:c0:
87:db:75:ee:ff:36:a4:d0:0e:cc:ae:f5:0e:c7:c9:
60:3e:8d:f1:e4:11:3e:02:8a:1c:43:b6:71:ea:75:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:23:D6:DC:8E:E5:BA:72:07:02:C1:2E:D1:A8:C2:D1:CC:20:C5:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/331E7214D80E11EF80DD20B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.162.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:44:45:e7:16:91:f3:60:e1:88:06:16:07:af:ef:b3:1c:67:
c6:4a:b6:e2:04:d9:75:8a:16:2f:80:3f:06:d5:c3:df:52:b5:
d7:b2:e8:d7:08:ca:d9:4b:c8:0f:7e:55:f9:ac:b7:46:78:ea:
7d:cf:bd:72:c9:9f:7a:0f:dd:f6:a0:6b:0a:11:1f:9b:f8:81:
a1:a8:08:35:70:f1:1a:b2:44:a3:27:a9:61:42:d2:5d:ec:9c:
f9:14:cf:fa:8c:63:69:d3:58:fe:10:44:17:f0:71:11:23:fc:
a1:2d:33:ba:e5:bf:de:6a:05:30:99:4e:fd:cb:db:a1:6d:41:
4e:d1:a1:fb:67:52:a8:de:c3:b0:23:b4:8e:26:54:f9:a4:df:
eb:90:2a:ee:4b:8f:1a:f1:9f:0f:50:7b:8a:41:a8:db:3e:a3:
bf:be:bf:37:ca:f8:ea:29:97:0b:07:39:56:66:f7:bd:33:81:
5b:0a:e3:a3:5e:4e:27:b2:f6:7f:42:cf:59:f3:67:23:08:48:
62:e7:c3:e0:67:29:8f:87:ec:83:c9:2d:d9:99:38:0c:cb:12:
01:aa:b1:d0:59:41:28:ad:16:ca:e7:af:53:72:cd:f2:3a:91:
44:f2:04:34:c9:b6:40:33:c6:9b:fc:4b:94:89:bf:6e:3e:38:
4f:3a:40:f7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ5UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTU0MTMzWhcNMjUwMjAxMTU0MTMzWjAYMRYw
FAYDVQQDEw02NzhmYzAzMS1kY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5LCab8Mw/ByzVsxSe2v9c3hGk2mLtQD8H71mu9mbUE1/HWatVAXBRc+5
xfGMSNUt4dgy0WzgnrsE/Md98u2cYBku74MANfg4BLamp8SKHQCImkdkDmSA9q7h
8GMWJ9xp9+RyX18mZTMnonaAXLTaF7zXu7qZI1Cz8yau9oAlz+1noTcU4k7EtvCK
CnFjk9ZUBwwX2gPGqmIWb1os3ueJ2lo/Mwq0ROTnVV6RdlC4s73qIw8e12R+dXhp
zLAqgdLWYEAK9Kk3O4EuWHHsJcDZlOwLBuAdJ48j29SaGwWVO8CH23Xu/zak0A7M
rvUOx8lgPo3x5BE+AoocQ7Zx6nWOcQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNYj
1tyO5bpyBwLBLtGowtHMIMV3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMzFFNzIxNEQ4MEUxMUVGODBERDIwQjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALciiMA0GCSqGSIb3DQEBCwUA
A4IBAQCsREXnFpHzYOGIBhYHr++zHGfGSrbiBNl1ihYvgD8G1cPfUrXXsujXCMrZ
S8gPflX5rLdGeOp9z71yyZ96D932oGsKER+b+IGhqAg1cPEaskSjJ6lhQtJd7Jz5
FM/6jGNp01j+EEQX8HERI/yhLTO65b/eagUwmU79y9uhbUFO0aH7Z1Ko3sOwI7SO
JlT5pN/rkCruS48a8Z8PUHuKQajbPqO/vr83yvjqKZcLBzlWZve9M4FbCuOjXk4n
svZ/Qs9Z82cjCEhi58PgZymPh+yDyS3ZmTgMyxIBqrHQWUEorRbK569Tcs3yOpFE
8gQ0ybZAM8ab/EuUib9uPjhPOkD3
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:47:57 2025 by rpki-client