Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3320F352D58611EFA64575A6762E951A.roa
File: 3320F352D58611EFA64575A6762E951A.roa (raw, json)
Hash identifier: Ax4vwkE1NJjZ4pWTGUwbMpLHs7sXvCZ/FeCbNhIFZ28=
Subject key identifier: AA:94:03:E7:46:26:77:54:A2:03:99:59:32:32:12:04:10:93:C1:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3320F352D58611EFA64575A6762E951A.roa
Signing time: Sat 18 Jan 2025 10:23:03 +0000
ROA not before: Sat 18 Jan 2025 10:23:00 +0000
ROA not after: Sun 23 Feb 2025 10:23:00 +0000
asID: 395793
IP address blocks: 45.201.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68477 (0x10b7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 10:23:00 2025 GMT
Not After : Feb 23 10:23:00 2025 GMT
Subject: CN=678b8107-c21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:a3:05:f8:14:7f:a2:75:07:15:0f:a7:d3:
05:e0:b1:f8:a4:75:b7:15:12:e5:39:a2:c5:85:31:
b1:9d:c6:5f:89:88:76:c6:ec:33:e8:3c:d8:ff:60:
80:ff:8c:00:26:71:7c:87:bf:f5:cb:a0:c9:1c:ec:
02:fc:e1:74:df:3d:c4:a6:89:b5:bc:1c:a9:cc:2c:
78:f1:1c:15:a7:a8:b0:e9:15:cf:12:62:bd:42:a1:
be:16:e8:48:9e:e0:7c:19:f1:c5:2c:54:71:5d:75:
55:62:04:fc:91:9e:bb:7f:cd:90:a9:2b:1d:99:d7:
94:68:b0:fe:ff:34:b5:d1:dc:e0:2f:10:f8:50:b5:
95:5a:71:c4:5f:06:86:11:36:6a:26:8d:8b:66:89:
62:66:7c:c7:71:5a:5c:c7:22:b2:f5:68:13:71:c9:
aa:8b:62:25:70:62:01:10:73:b2:a0:6e:b2:56:22:
0d:80:19:47:3d:cf:7d:f2:c0:4f:af:03:77:d3:5e:
f9:7d:a4:e6:8b:6c:e8:20:8e:04:bc:26:e2:9e:93:
cf:54:da:9a:d5:74:3f:20:59:38:b6:37:6b:ab:94:
42:21:3a:04:00:be:e0:54:f8:ad:a2:5f:f4:71:6f:
f4:87:3f:bf:ee:18:12:ff:e0:03:27:61:19:4c:95:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:94:03:E7:46:26:77:54:A2:03:99:59:32:32:12:04:10:93:C1:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3320F352D58611EFA64575A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.21.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:7c:92:56:8d:42:45:b1:5b:11:77:9f:20:2b:d3:23:64:8d:
84:eb:a1:e5:1c:a4:29:d0:a3:03:51:8a:a2:3d:e0:b3:ee:b3:
05:4d:db:20:86:8c:13:1d:b3:a4:b5:b0:a5:86:4d:dd:5f:b1:
70:75:c9:db:54:38:db:dc:2e:8c:10:86:ab:6a:7b:f9:76:22:
e8:ae:12:d7:53:8b:39:36:d3:c4:a2:21:59:4c:f5:0a:d7:79:
c6:b7:cd:cd:dc:f3:90:e8:28:bd:60:95:ec:39:13:08:f9:89:
da:71:ca:e4:c4:f5:92:f4:15:58:d5:9b:bb:9e:69:a8:d6:36:
a9:5b:85:42:56:a4:f4:0f:7a:46:28:b1:73:50:53:ad:07:dc:
79:98:de:cb:77:b5:a5:9b:98:4c:b2:2a:ca:b7:91:57:ed:7d:
0d:78:04:50:40:8c:17:40:6e:69:9e:48:60:ec:72:4a:a6:1b:
86:17:00:41:dc:bd:35:39:b5:4d:91:eb:60:c7:fe:71:4f:19:
6d:5c:9e:82:26:cf:62:99:92:2a:e1:99:0a:e5:fd:89:49:90:
dc:0c:1c:7a:71:fb:37:2f:91:ec:29:b4:51:02:a8:26:ea:a3:
3e:d2:92:b2:49:77:07:27:b5:cd:35:ce:e9:b4:f3:12:be:f0:
12:c9:8d:67
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQt9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE4MTAyMzAwWhcNMjUwMjIzMTAyMzAwWjAYMRYw
FAYDVQQDEw02NzhiODEwNy1jMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtKujBfgUf6J1BxUPp9MF4LH4pHW3FRLlOaLFhTGxncZfiYh2xuwz6DzY
/2CA/4wAJnF8h7/1y6DJHOwC/OF03z3Epom1vBypzCx48RwVp6iw6RXPEmK9QqG+
FuhInuB8GfHFLFRxXXVVYgT8kZ67f82QqSsdmdeUaLD+/zS10dzgLxD4ULWVWnHE
XwaGETZqJo2LZoliZnzHcVpcxyKy9WgTccmqi2IlcGIBEHOyoG6yViINgBlHPc99
8sBPrwN30175faTmi2zoII4EvCbinpPPVNqa1XQ/IFk4tjdrq5RCIToEAL7gVPit
ol/0cW/0hz+/7hgS/+ADJ2EZTJV4hQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKqU
A+dGJndUogOZWTIyEgQQk8GYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMzIwRjM1MkQ1ODYxMUVGQTY0NTc1QTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALckVMA0GCSqGSIb3DQEBCwUA
A4IBAQC4fJJWjUJFsVsRd58gK9MjZI2E66HlHKQp0KMDUYqiPeCz7rMFTdsghowT
HbOktbClhk3dX7FwdcnbVDjb3C6MEIaranv5diLorhLXU4s5NtPEoiFZTPUK13nG
t83N3POQ6Ci9YJXsORMI+YnaccrkxPWS9BVY1Zu7nmmo1japW4VCVqT0D3pGKLFz
UFOtB9x5mN7Ld7Wlm5hMsirKt5FX7X0NeARQQIwXQG5pnkhg7HJKphuGFwBB3L01
ObVNketgx/5xTxltXJ6CJs9imZIq4ZkK5f2JSZDcDBx6cfs3L5HsKbRRAqgm6qM+
0pKySXcHJ7XNNc7ptPMSvvASyY1n
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:22:32 2025 by rpki-client