Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39D96844D80311EFBA03446F762E951A.roa
File: 39D96844D80311EFBA03446F762E951A.roa (raw, json)
Hash identifier: 8YzLSxQnFXYHnJN8DgtXCIWZh15EEkrkGtpAOKsNFMs=
Subject key identifier: D0:65:49:39:D1:01:33:A4:B6:66:5A:F0:56:87:EE:1B:01:7A:5A:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39D96844D80311EFBA03446F762E951A.roa
Signing time: Tue 21 Jan 2025 14:23:04 +0000
ROA not before: Tue 21 Jan 2025 14:23:00 +0000
ROA not after: Sat 01 Feb 2025 14:23:00 +0000
asID: 62240
IP address blocks: 45.192.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69128 (0x10e08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:23:00 2025 GMT
Not After : Feb 1 14:23:00 2025 GMT
Subject: CN=678fadc8-76a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:7e:22:98:84:4b:58:72:73:d4:95:d4:4b:
b8:33:c3:06:1b:3a:22:87:25:1b:9a:9d:63:cc:3d:
e9:ef:ee:94:c9:99:b5:36:38:15:dd:37:6a:0e:6c:
aa:31:1f:ca:61:a0:99:4a:bf:d2:c6:1d:8f:ed:14:
a4:b2:72:b2:43:9f:95:fd:11:7e:66:37:c5:e4:31:
1b:c3:79:14:4e:2d:1d:65:57:3f:f2:47:85:fb:7a:
1d:cd:f9:08:29:2c:82:e7:75:98:47:01:12:d8:4d:
ee:e8:b3:c7:01:1c:be:8c:4c:45:fd:22:be:2e:45:
48:51:b2:89:01:37:83:f1:1e:db:ab:c2:6c:08:44:
34:57:14:9e:6d:54:56:e0:88:d4:57:54:14:5c:a2:
bb:62:4b:b6:ae:8c:36:32:e5:72:76:48:9f:5d:87:
18:5e:0b:2a:2e:27:bc:11:32:6c:8a:f3:cd:4a:1b:
0d:f1:9c:da:1b:54:3e:e5:21:02:a9:a8:6a:95:37:
10:fa:22:ae:1d:06:df:85:9e:af:90:0e:63:40:e8:
ad:d8:cf:e0:4e:1e:6d:60:32:2f:de:09:65:87:e6:
7f:87:51:64:10:34:73:ef:22:42:38:49:74:65:d3:
a2:de:7f:08:04:60:9d:25:cc:9b:9e:0c:52:9b:9d:
86:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:65:49:39:D1:01:33:A4:B6:66:5A:F0:56:87:EE:1B:01:7A:5A:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39D96844D80311EFBA03446F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:15:a0:22:90:b3:4a:84:e7:a3:90:cd:23:b6:86:37:db:ab:
71:f2:00:d2:96:b0:da:06:ed:5c:63:49:5f:c6:68:d5:06:a1:
d4:bb:39:c6:1d:cb:18:8c:01:e1:50:79:66:d9:21:fb:61:56:
75:b6:29:df:ff:68:62:dd:f2:e7:f1:d0:57:ea:35:84:cf:8f:
61:4c:f9:d3:c5:ce:03:a1:93:af:c5:86:72:bb:99:e0:76:4a:
93:51:f2:4f:da:a0:b3:51:90:e1:6a:17:ff:7d:5c:1c:09:77:
ec:f6:78:98:6b:5e:29:97:2e:65:21:e3:23:42:3f:21:43:17:
7f:c9:32:fd:45:69:ea:1a:07:b6:11:c8:8b:8d:b5:8f:29:e5:
68:8c:51:59:f9:69:db:d8:0b:74:26:44:08:f8:a2:f7:1a:f4:
c2:5a:20:44:9a:ff:f7:0a:1e:f5:1c:73:d9:ba:4a:8c:44:f1:
a4:97:2e:c9:bb:a5:93:6d:05:a5:65:40:50:1d:13:4a:76:e5:
95:81:c4:bf:a4:9e:14:c9:d3:6f:5d:88:37:ff:c2:73:c3:2a:
7b:3a:98:d1:1d:7d:f9:f7:73:3e:79:ae:04:76:16:03:ae:d0:
de:14:59:eb:ba:d7:e1:5e:40:be:d1:f4:40:9b:28:a5:81:b8:
10:d8:ce:70
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ4IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTQyMzAwWhcNMjUwMjAxMTQyMzAwWjAYMRYw
FAYDVQQDEw02NzhmYWRjOC03NmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA03R+IpiES1hyc9SV1Eu4M8MGGzoihyUbmp1jzD3p7+6UyZm1NjgV3Tdq
DmyqMR/KYaCZSr/Sxh2P7RSksnKyQ5+V/RF+ZjfF5DEbw3kUTi0dZVc/8keF+3od
zfkIKSyC53WYRwES2E3u6LPHARy+jExF/SK+LkVIUbKJATeD8R7bq8JsCEQ0VxSe
bVRW4IjUV1QUXKK7Yku2row2MuVydkifXYcYXgsqLie8ETJsivPNShsN8ZzaG1Q+
5SECqahqlTcQ+iKuHQbfhZ6vkA5jQOit2M/gTh5tYDIv3gllh+Z/h1FkEDRz7yJC
OEl0ZdOi3n8IBGCdJcybngxSm52GPQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNBl
STnRATOktmZa8FaH7hsBeloUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zOUQ5Njg0NEQ4MDMxMUVGQkEwMzQ0NkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAnMA0GCSqGSIb3DQEBCwUA
A4IBAQBqFaAikLNKhOejkM0jtoY326tx8gDSlrDaBu1cY0lfxmjVBqHUuznGHcsY
jAHhUHlm2SH7YVZ1tinf/2hi3fLn8dBX6jWEz49hTPnTxc4DoZOvxYZyu5ngdkqT
UfJP2qCzUZDhahf/fVwcCXfs9niYa14ply5lIeMjQj8hQxd/yTL9RWnqGge2EciL
jbWPKeVojFFZ+Wnb2At0JkQI+KL3GvTCWiBEmv/3Ch71HHPZukqMRPGkly7Ju6WT
bQWlZUBQHRNKduWVgcS/pJ4UydNvXYg3/8Jzwyp7OpjRHX3593M+ea4EdhYDrtDe
FFnrutfhXkC+0fRAmyilgbgQ2M5w
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:40 2025 by rpki-client