Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3939B882DB0811EF996C73B4762E951A.roa
File: 3939B882DB0811EF996C73B4762E951A.roa (raw, json)
Hash identifier: QIQ2Zi+1lOtfRM2G5wZ1m7tDBDZgfcI/9MqjXVhMGzQ=
Subject key identifier: 00:5B:5E:02:E7:4F:02:5B:7E:55:FE:46:EA:DC:67:37:C8:09:DA:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3939B882DB0811EF996C73B4762E951A.roa
Signing time: Sat 25 Jan 2025 10:36:24 +0000
ROA not before: Sat 25 Jan 2025 10:36:20 +0000
ROA not after: Sun 23 Feb 2025 10:36:20 +0000
asID: 62240
IP address blocks: 45.192.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70127 (0x111ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 10:36:20 2025 GMT
Not After : Feb 23 10:36:20 2025 GMT
Subject: CN=6794bea8-b515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cf:cc:32:af:f2:b3:8d:aa:41:70:62:11:32:
0d:df:5c:98:7b:b3:df:c6:38:7e:fb:83:59:b7:83:
4c:8f:f2:e6:1e:c8:dd:33:4c:c4:3d:f3:9e:fb:37:
46:57:2f:18:6a:f3:75:1d:0f:77:ec:9e:8e:25:08:
3c:9c:91:f5:84:23:74:d9:f4:b1:02:58:9a:58:40:
e3:06:f7:eb:86:aa:93:eb:d0:3f:b4:10:8b:15:a3:
f7:09:57:8e:7c:4f:2f:ef:fa:d0:36:11:ed:aa:51:
47:23:31:af:9a:6b:e5:af:33:3a:c9:d9:5f:5a:67:
09:32:36:ef:30:72:9e:ab:91:dd:d1:08:ff:6d:96:
1d:99:c3:34:ba:62:cb:f0:b7:8e:d1:40:84:08:92:
2d:c7:59:ae:5a:ec:5b:90:a5:55:b9:be:1c:e4:ab:
cd:91:d4:4c:0c:05:2c:4b:ed:b6:2c:81:ff:6f:46:
01:3d:8a:e8:48:e7:2f:7e:6e:c4:c0:0a:42:70:f9:
bc:b0:bf:e7:ff:6a:56:c6:f6:81:f7:a7:d3:c3:c6:
13:3c:53:38:ec:a0:ea:15:9e:d5:30:81:d2:23:04:
2d:ef:d3:58:0b:59:87:c2:d8:1a:03:6a:70:e8:c4:
d5:1f:d9:04:b5:a4:52:37:a4:2e:60:c7:5a:72:7f:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5B:5E:02:E7:4F:02:5B:7E:55:FE:46:EA:DC:67:37:C8:09:DA:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3939B882DB0811EF996C73B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.44.0/24
Signature Algorithm: sha256WithRSAEncryption
52:22:b2:bf:bf:06:35:a3:47:22:2b:e6:9c:b1:fc:3c:f3:83:
50:3e:73:ef:7c:fc:65:8d:38:78:70:76:37:6b:ef:31:95:16:
33:80:bc:fb:4c:9e:22:59:f7:13:b0:c7:57:4b:ed:2b:72:68:
9d:46:c1:b6:57:a0:39:a0:03:cf:c8:ee:14:ce:be:62:13:aa:
09:98:48:b4:d7:db:39:3a:77:dd:c4:8f:35:4b:a3:1c:de:d9:
34:fd:68:3f:75:f8:d4:13:f3:80:cd:8b:c9:99:bc:06:4b:e3:
04:dd:4c:53:12:e8:7e:da:e1:1f:66:de:54:0b:52:d1:6f:30:
4b:fe:e6:f1:3f:1e:ef:7f:18:d1:14:92:12:d4:76:1a:98:55:
b2:bb:9b:a2:26:e3:39:64:5a:0f:02:4c:1e:88:a3:67:cc:c1:
a3:df:e3:79:0d:0f:63:8e:1e:9d:e4:58:dd:b4:43:9d:64:98:
c2:ac:99:8b:ab:5c:d2:9d:6a:63:10:7d:bf:40:1e:ab:17:4d:
c4:a9:8b:03:8e:07:e2:12:6f:d3:89:7f:f8:a7:da:96:05:ba:
2d:58:2c:49:66:9f:37:b6:ed:47:f8:67:fd:96:3d:3b:8a:de:
65:c5:44:e4:e5:92:7c:aa:c9:01:1b:c0:77:fd:29:89:3e:52:
6f:61:2c:ea
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARHvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTAzNjIwWhcNMjUwMjIzMTAzNjIwWjAYMRYw
FAYDVQQDEw02Nzk0YmVhOC1iNTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6c/MMq/ys42qQXBiETIN31yYe7Pfxjh++4NZt4NMj/LmHsjdM0zEPfOe
+zdGVy8YavN1HQ937J6OJQg8nJH1hCN02fSxAliaWEDjBvfrhqqT69A/tBCLFaP3
CVeOfE8v7/rQNhHtqlFHIzGvmmvlrzM6ydlfWmcJMjbvMHKeq5Hd0Qj/bZYdmcM0
umLL8LeO0UCECJItx1muWuxbkKVVub4c5KvNkdRMDAUsS+22LIH/b0YBPYroSOcv
fm7EwApCcPm8sL/n/2pWxvaB96fTw8YTPFM47KDqFZ7VMIHSIwQt79NYC1mHwtga
A2pw6MTVH9kEtaRSN6QuYMdacn+GYwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFABb
XgLnTwJbflX+RurcZzfICdo2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zOTM5Qjg4MkRCMDgxMUVGOTk2QzczQjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAsMA0GCSqGSIb3DQEBCwUA
A4IBAQBSIrK/vwY1o0ciK+acsfw884NQPnPvfPxljTh4cHY3a+8xlRYzgLz7TJ4i
WfcTsMdXS+0rcmidRsG2V6A5oAPPyO4Uzr5iE6oJmEi019s5OnfdxI81S6Mc3tk0
/Wg/dfjUE/OAzYvJmbwGS+ME3UxTEuh+2uEfZt5UC1LRbzBL/ubxPx7vfxjRFJIS
1HYamFWyu5uiJuM5ZFoPAkweiKNnzMGj3+N5DQ9jjh6d5FjdtEOdZJjCrJmLq1zS
nWpjEH2/QB6rF03EqYsDjgfiEm/TiX/4p9qWBbotWCxJZp83tu1H+Gf9lj07it5l
xUTk5ZJ8qskBG8B3/SmJPlJvYSzq
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:33:35 2025 by rpki-client