Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D211AD0D57C11EF81FA2B65762E951A.roa
File: 3D211AD0D57C11EF81FA2B65762E951A.roa (raw, json)
Hash identifier: 3tctC4voRgXn3Imh6ea1KTLPmCbqiUEW676xw1I1m4Y=
Subject key identifier: 86:6B:CC:3F:B6:3F:63:C3:E6:42:3E:A4:8A:04:8E:FB:7B:2E:9B:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B3D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D211AD0D57C11EF81FA2B65762E951A.roa
Signing time: Sat 18 Jan 2025 09:11:45 +0000
ROA not before: Sat 18 Jan 2025 09:11:41 +0000
ROA not after: Fri 21 Feb 2025 09:11:41 +0000
asID: 131471
IP address blocks: 45.195.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68413 (0x10b3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 09:11:41 2025 GMT
Not After : Feb 21 09:11:41 2025 GMT
Subject: CN=678b7051-3146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:5f:51:cc:59:70:40:a5:b8:75:ed:d7:b7:
bb:b3:c0:0c:7e:70:9e:6e:ae:89:85:5e:88:ef:d9:
7d:6f:95:ea:a8:ec:d7:4b:75:3f:d1:f9:80:a9:15:
8d:5c:ef:a7:5a:c8:be:9c:4b:72:24:bf:23:cd:eb:
7a:8a:77:49:6d:92:10:f9:ce:73:e2:75:7c:0f:6e:
51:1e:ea:02:74:58:19:63:9e:b6:7b:c9:91:a0:d0:
bc:7a:31:e3:19:6a:b1:a5:a0:8f:25:6e:d2:a0:8e:
c7:18:80:bb:42:18:dc:71:f5:41:2e:5c:41:ea:e5:
ee:48:a9:ee:4b:7e:1f:1f:f2:12:c8:76:67:bb:e6:
17:b3:4f:ba:fc:69:ed:02:ba:08:a6:9d:26:84:ce:
d7:a5:b2:f0:62:02:dd:cf:88:5e:54:3c:43:22:6c:
b5:bb:83:58:f2:c1:de:ab:0d:6f:f1:a1:4c:0b:1d:
61:5a:9e:f5:e8:37:d2:fa:9b:16:d1:67:5a:6d:52:
75:a2:68:51:55:ac:e4:3c:a4:18:f1:53:ae:14:63:
01:09:26:25:c7:a7:fb:28:03:0c:31:2f:ad:d4:be:
f0:3a:06:cf:2f:24:83:15:f0:e0:00:72:d6:da:b6:
8b:72:0f:55:c2:5d:c2:48:8c:f0:70:c3:f7:6e:32:
f8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:CC:3F:B6:3F:63:C3:E6:42:3E:A4:8A:04:8E:FB:7B:2E:9B:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D211AD0D57C11EF81FA2B65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.195.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f8:d0:50:a6:7a:02:43:a1:80:27:fa:66:20:38:98:1e:b3:
66:5f:da:7a:32:f0:7e:20:25:bc:93:fb:2e:91:28:fd:1b:e8:
f6:b3:5a:5b:fb:05:04:df:92:c5:19:1f:5d:0e:cc:c6:d3:64:
3d:5f:5f:9b:05:ae:81:64:42:93:c6:f7:c4:0b:5b:7b:42:5f:
68:8c:11:35:b3:cc:3e:b4:42:e1:55:c5:43:3b:b6:87:20:f8:
8c:c2:ef:21:ea:fc:2e:c7:99:a4:9c:58:7b:b5:b3:cd:1b:4a:
5e:da:d1:37:13:f9:42:7e:50:f0:74:6c:98:7b:a2:c4:aa:3a:
48:53:c4:3d:41:03:5a:81:f0:8c:0a:62:9f:c2:7b:1a:e1:3a:
c7:92:a3:3a:b5:c0:d6:bc:c5:ba:fb:6b:49:cc:70:68:aa:2f:
8d:8d:f4:f9:32:a9:72:e1:67:90:65:69:aa:3c:92:c3:4b:d3:
4b:81:cd:ce:d7:2f:7b:1d:22:a5:ee:dc:8f:4c:46:11:5a:b8:
27:ae:29:23:5d:70:8a:3d:59:ef:c2:c4:f4:ca:55:3d:13:2a:
da:51:f7:0f:c4:ad:b7:84:9c:52:c9:48:dd:da:5a:78:f9:b7:
89:ea:f0:f5:4c:f0:38:39:41:16:89:5e:81:f0:d2:e5:26:6d:
4b:8e:9a:7b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQs9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE4MDkxMTQxWhcNMjUwMjIxMDkxMTQxWjAYMRYw
FAYDVQQDEw02NzhiNzA1MS0zMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr+VfUcxZcECluHXt17e7s8AMfnCebq6JhV6I79l9b5XqqOzXS3U/0fmA
qRWNXO+nWsi+nEtyJL8jzet6indJbZIQ+c5z4nV8D25RHuoCdFgZY562e8mRoNC8
ejHjGWqxpaCPJW7SoI7HGIC7QhjccfVBLlxB6uXuSKnuS34fH/ISyHZnu+YXs0+6
/GntAroIpp0mhM7XpbLwYgLdz4heVDxDImy1u4NY8sHeqw1v8aFMCx1hWp716DfS
+psW0WdabVJ1omhRVazkPKQY8VOuFGMBCSYlx6f7KAMMMS+t1L7wOgbPLySDFfDg
AHLW2raLcg9Vwl3CSIzwcMP3bjL4dQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIZr
zD+2P2PD5kI+pIoEjvt7LpurMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRDIxMUFEMEQ1N0MxMUVGODFGQTJCNjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcPDMA0GCSqGSIb3DQEBCwUA
A4IBAQAl+NBQpnoCQ6GAJ/pmIDiYHrNmX9p6MvB+ICW8k/sukSj9G+j2s1pb+wUE
35LFGR9dDszG02Q9X1+bBa6BZEKTxvfEC1t7Ql9ojBE1s8w+tELhVcVDO7aHIPiM
wu8h6vwux5mknFh7tbPNG0pe2tE3E/lCflDwdGyYe6LEqjpIU8Q9QQNagfCMCmKf
wnsa4TrHkqM6tcDWvMW6+2tJzHBoqi+NjfT5Mqly4WeQZWmqPJLDS9NLgc3O1y97
HSKl7tyPTEYRWrgnrikjXXCKPVnvwsT0ylU9EyraUfcPxK23hJxSyUjd2lp4+beJ
6vD1TPA4OUEWiV6B8NLlJm1Ljpp7
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:46 2025 by rpki-client