Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F020B30D52111EF941BB183762E951A.roa
File: 3F020B30D52111EF941BB183762E951A.roa (raw, json)
Hash identifier: O2CXNdqIeAitoNol5I3HQs1PD/guwc8Q0VKsqZyUmg8=
Subject key identifier: BF:55:17:98:98:6B:E2:79:87:7D:31:61:12:D9:D2:FE:4D:53:E2:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F020B30D52111EF941BB183762E951A.roa
Signing time: Fri 17 Jan 2025 22:20:24 +0000
ROA not before: Fri 17 Jan 2025 22:20:20 +0000
ROA not after: Sat 22 Feb 2025 22:20:20 +0000
asID: 54801
IP address blocks: 45.200.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68328 (0x10ae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 22:20:20 2025 GMT
Not After : Feb 22 22:20:20 2025 GMT
Subject: CN=678ad7a8-4d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:23:6f:3b:5c:46:69:a0:0b:1e:48:44:f7:
e5:17:54:b4:fd:7a:0f:f2:73:ba:36:f2:02:02:83:
ea:be:ba:ad:55:d7:14:64:24:e3:dd:be:55:85:ec:
21:22:da:55:d9:42:12:78:dd:d9:8d:dc:ed:78:76:
73:75:de:64:09:9a:e5:fd:ab:8a:98:71:db:b0:c6:
f1:ec:40:27:50:61:6c:cd:0e:75:0a:e0:db:43:7e:
2c:53:35:13:25:98:28:e5:a1:bf:66:ae:0d:9c:de:
c5:e7:60:44:94:af:c6:e2:b7:09:00:ad:4c:99:cb:
66:96:d6:9a:d6:a4:78:f4:2e:d5:ec:2f:c3:08:ec:
85:82:83:50:d9:c8:e8:17:bc:9e:9f:a5:d5:ea:7f:
a2:53:84:61:38:5e:12:dd:dd:78:17:0d:29:53:e0:
a5:73:d8:37:9a:90:21:35:12:2f:2c:99:71:78:2d:
c6:ca:c7:3d:36:06:be:90:c6:2d:82:c6:05:fe:70:
84:76:11:66:c0:9a:05:10:21:46:61:7d:bb:b4:c2:
17:ba:63:6a:98:6f:a0:21:56:0c:eb:0e:ac:0c:9c:
4e:c1:45:41:17:02:f2:cf:7f:72:64:95:cc:9b:75:
39:c9:dc:81:53:37:f5:01:09:32:49:bc:59:3f:e5:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:55:17:98:98:6B:E2:79:87:7D:31:61:12:D9:D2:FE:4D:53:E2:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F020B30D52111EF941BB183762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.49.0/24
Signature Algorithm: sha256WithRSAEncryption
af:ba:37:81:e9:09:be:2f:ca:f2:a8:be:95:cc:f4:7b:20:08:
43:5f:5e:02:84:0f:6b:ca:ec:e7:8d:52:11:ce:ad:2d:0e:55:
fc:3f:32:44:12:67:1b:4c:20:cd:45:0a:19:7b:9f:41:2d:4d:
d4:9e:86:72:c8:8d:21:77:8d:16:1a:62:5b:c3:94:2e:bc:29:
2c:89:9c:58:78:49:0e:df:34:61:a5:0d:11:24:b5:f1:ef:90:
30:e8:97:44:83:b9:e7:cd:53:2b:40:0b:0d:62:9b:f8:7a:65:
4a:fe:53:f1:52:11:50:54:53:fb:f9:b8:e2:f1:58:f9:67:32:
42:81:ab:19:1c:fa:32:ef:17:27:c0:f2:13:c2:48:ec:35:0a:
74:37:cf:43:85:ed:b2:38:1e:cd:1c:86:0f:71:f0:f2:3f:46:
f8:f7:d5:99:7f:c4:3b:26:55:2e:0d:ea:da:c9:44:b1:b0:69:
9a:b7:e0:63:24:57:91:cc:c9:86:7b:2c:47:c1:8f:bc:0e:79:
45:bb:b3:30:f3:26:67:90:0c:e4:c3:4c:57:f1:2d:f2:e0:8e:
57:33:cd:de:cf:17:12:3d:02:a2:5c:1b:e9:34:97:56:20:07:
fe:98:12:82:f7:24:df:ad:27:21:a8:f8:7f:f0:10:5f:83:38:
82:e2:52:87
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQroMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MjIyMDIwWhcNMjUwMjIyMjIyMDIwWjAYMRYw
FAYDVQQDEw02NzhhZDdhOC00ZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxmcjbztcRmmgCx5IRPflF1S0/XoP8nO6NvICAoPqvrqtVdcUZCTj3b5V
hewhItpV2UISeN3ZjdzteHZzdd5kCZrl/auKmHHbsMbx7EAnUGFszQ51CuDbQ34s
UzUTJZgo5aG/Zq4NnN7F52BElK/G4rcJAK1Mmctmltaa1qR49C7V7C/DCOyFgoNQ
2cjoF7yen6XV6n+iU4RhOF4S3d14Fw0pU+Clc9g3mpAhNRIvLJlxeC3Gysc9Nga+
kMYtgsYF/nCEdhFmwJoFECFGYX27tMIXumNqmG+gIVYM6w6sDJxOwUVBFwLyz39y
ZJXMm3U5ydyBUzf1AQkySbxZP+UIowIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL9V
F5iYa+J5h30xYRLZ0v5NU+JRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRjAyMEIzMEQ1MjExMUVGOTQxQkIxODM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcgxMA0GCSqGSIb3DQEBCwUA
A4IBAQCvujeB6Qm+L8ryqL6VzPR7IAhDX14ChA9ryuznjVIRzq0tDlX8PzJEEmcb
TCDNRQoZe59BLU3UnoZyyI0hd40WGmJbw5QuvCksiZxYeEkO3zRhpQ0RJLXx75Aw
6JdEg7nnzVMrQAsNYpv4emVK/lPxUhFQVFP7+bji8Vj5ZzJCgasZHPoy7xcnwPIT
wkjsNQp0N89Dhe2yOB7NHIYPcfDyP0b499WZf8Q7JlUuDerayUSxsGmat+BjJFeR
zMmGeyxHwY+8DnlFu7Mw8yZnkAzkw0xX8S3y4I5XM83ezxcSPQKiXBvpNJdWIAf+
mBKC9yTfrSchqPh/8BBfgziC4lKH
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:02 2025 by rpki-client