Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BDC179ED4A311EF96169B52762E951A.roa
File: 3BDC179ED4A311EF96169B52762E951A.roa (raw, json)
Hash identifier: 3nfoO1i8FLmquTki5u1B4U0mdVmmk/98sunZGOHDRz8=
Subject key identifier: E7:B4:55:A6:40:98:E4:C0:3B:6F:E8:C2:AB:B7:9B:38:6D:5F:C2:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01090B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BDC179ED4A311EF96169B52762E951A.roa
Signing time: Fri 17 Jan 2025 07:18:22 +0000
ROA not before: Fri 17 Jan 2025 07:18:18 +0000
ROA not after: Tue 18 Feb 2025 07:18:18 +0000
asID: 401615
IP address blocks: 45.196.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67851 (0x1090b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 07:18:18 2025 GMT
Not After : Feb 18 07:18:18 2025 GMT
Subject: CN=678a043e-066d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:30:af:28:06:c2:38:78:db:65:de:c7:aa:
e3:0f:24:e5:d6:a8:dc:9f:cc:e3:55:61:94:ef:c8:
15:03:36:e3:0b:0d:fe:c0:7e:ff:27:23:d3:72:6f:
e9:32:ef:37:a5:1f:4b:52:c7:a4:4f:7d:cf:3d:7e:
48:c1:e6:bf:9a:b5:57:fa:d8:5a:78:d2:0b:69:1c:
9b:5f:42:11:4e:a7:df:c2:13:f3:2a:09:17:ca:eb:
43:d2:b9:da:22:02:94:20:9a:cb:72:a0:7a:cd:f1:
3f:ea:32:09:39:db:fa:65:66:26:8e:9a:21:a2:2f:
95:98:7f:2d:39:88:75:f8:27:a0:81:e2:97:59:3e:
e4:bd:91:58:7f:dc:c7:dd:70:af:63:60:7f:71:5f:
82:7a:db:5c:98:81:10:61:43:a8:b8:96:4f:53:4f:
5d:19:4f:69:f8:da:1a:5f:2e:60:d8:37:59:77:b8:
a9:5f:16:3a:fe:08:35:2b:41:59:90:73:81:34:8e:
41:f5:23:09:e9:dd:56:36:8d:16:6f:1e:5e:5b:16:
25:a0:51:9c:9d:76:6b:02:55:3d:2b:18:55:8b:f3:
55:eb:68:74:df:0b:8e:c4:1c:66:c6:13:3e:ca:8e:
ab:90:78:8a:24:1a:5a:9a:3e:9f:92:b5:95:c7:99:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B4:55:A6:40:98:E4:C0:3B:6F:E8:C2:AB:B7:9B:38:6D:5F:C2:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BDC179ED4A311EF96169B52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.234.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:70:fa:9c:25:51:d7:86:78:9a:93:6f:29:6c:72:ba:55:67:
6a:fc:43:a9:12:6d:2a:7b:0d:4f:a7:63:2b:d0:ed:93:2f:df:
e3:1a:b1:1c:74:a8:b3:14:b0:b2:60:b6:ab:a4:c3:4f:5c:a3:
20:6c:f1:fa:f0:4d:a7:16:3d:df:08:50:26:1f:3b:5c:78:af:
15:be:12:27:43:57:94:b2:7b:67:1f:1e:8a:33:b6:3c:34:16:
88:ff:93:70:d1:0b:58:0c:c5:7a:a1:66:b7:87:dc:c8:8b:9d:
ef:16:b2:88:a4:3b:18:47:4f:ce:89:b5:72:73:aa:8a:76:06:
e0:0b:fc:a6:ac:55:be:cf:9b:9c:c0:fc:0b:53:14:31:fa:c8:
ad:e1:6b:44:a5:31:b8:41:08:3a:af:d6:45:05:a0:91:b5:22:
f7:12:ab:50:95:f5:96:c5:fc:e5:c1:5b:0b:2e:9f:f6:ba:d3:
e3:ae:83:35:16:f9:41:eb:80:34:6e:a0:ba:61:9c:4f:72:d3:
9e:4a:4f:81:f0:f4:64:e5:9f:f1:72:63:61:cb:89:37:ac:f3:
61:56:d6:80:30:dc:03:91:aa:68:cd:08:44:26:3d:61:77:26:
2a:eb:4a:4c:b5:9c:7b:6b:14:50:00:ae:aa:51:3f:dc:0f:6f:
b6:b8:23:2a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQkLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MDcxODE4WhcNMjUwMjE4MDcxODE4WjAYMRYw
FAYDVQQDEw02NzhhMDQzZS0wNjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqMgwrygGwjh422Xex6rjDyTl1qjcn8zjVWGU78gVAzbjCw3+wH7/JyPT
cm/pMu83pR9LUsekT33PPX5Iwea/mrVX+thaeNILaRybX0IRTqffwhPzKgkXyutD
0rnaIgKUIJrLcqB6zfE/6jIJOdv6ZWYmjpohoi+VmH8tOYh1+CeggeKXWT7kvZFY
f9zH3XCvY2B/cV+CettcmIEQYUOouJZPU09dGU9p+NoaXy5g2DdZd7ipXxY6/gg1
K0FZkHOBNI5B9SMJ6d1WNo0Wbx5eWxYloFGcnXZrAlU9KxhVi/NV62h03wuOxBxm
xhM+yo6rkHiKJBpamj6fkrWVx5kIKwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOe0
VaZAmOTAO2/owqu3mzhtX8JOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQkRDMTc5RUQ0QTMxMUVGOTYxNjlCNTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTqMA0GCSqGSIb3DQEBCwUA
A4IBAQAOcPqcJVHXhniak28pbHK6VWdq/EOpEm0qew1Pp2Mr0O2TL9/jGrEcdKiz
FLCyYLarpMNPXKMgbPH68E2nFj3fCFAmHztceK8VvhInQ1eUsntnHx6KM7Y8NBaI
/5Nw0QtYDMV6oWa3h9zIi53vFrKIpDsYR0/OibVyc6qKdgbgC/ymrFW+z5ucwPwL
UxQx+sit4WtEpTG4QQg6r9ZFBaCRtSL3EqtQlfWWxfzlwVsLLp/2utPjroM1FvlB
64A0bqC6YZxPctOeSk+B8PRk5Z/xcmNhy4k3rPNhVtaAMNwDkapozQhEJj1hdyYq
60pMtZx7axRQAK6qUT/cD2+2uCMq
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:23:12 2025 by rpki-client