Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43266B48DC9711EFB969E4B6762E951A.roa
File: 43266B48DC9711EFB969E4B6762E951A.roa (raw, json)
Hash identifier: PFEi9Wa+6nwIN+TFQpLORaMcpEsMzDILJTKmEFIWJvE=
Subject key identifier: C5:76:96:31:DD:EF:C7:86:D4:03:C8:AD:5A:F3:1E:50:31:8B:9A:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43266B48DC9711EFB969E4B6762E951A.roa
Signing time: Mon 27 Jan 2025 10:12:50 +0000
ROA not before: Mon 27 Jan 2025 10:12:46 +0000
ROA not after: Sat 08 Feb 2025 10:12:46 +0000
asID: 7018
IP address blocks: 45.202.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70871 (0x114d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 10:12:46 2025 GMT
Not After : Feb 8 10:12:46 2025 GMT
Subject: CN=67975c22-b351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f9:4b:76:17:f9:ac:ba:52:86:0b:78:92:ed:
b1:ad:a4:a4:9a:ea:11:ff:7e:ca:22:a7:b8:78:87:
86:3a:a7:87:29:68:bc:5c:eb:e2:12:67:42:24:d7:
cd:ca:e7:57:ed:cc:76:57:c5:4e:10:51:f2:86:ac:
d1:ba:cf:90:4d:77:bb:13:80:59:d7:59:38:3f:00:
95:50:b8:ba:2a:d2:7c:a5:97:a0:f5:a8:08:27:4b:
f4:b3:52:bf:7b:e0:5f:8a:fd:b2:e3:73:44:3f:26:
75:fc:10:a2:6a:e6:8f:58:0a:62:11:64:3e:0d:73:
fa:7e:40:3a:81:9b:61:b1:44:e1:4b:98:cc:17:11:
d2:56:5b:99:1b:93:4f:0d:cc:72:e2:ea:92:a5:d6:
a5:26:b1:f5:37:48:8c:56:6e:56:d0:37:2f:d0:07:
45:78:7b:4b:98:75:e0:98:46:f7:b2:61:99:91:5c:
d3:11:79:7a:df:3f:0f:67:10:c7:9d:32:d2:06:a4:
3a:6a:e8:c9:14:a8:aa:32:73:14:ce:35:90:af:36:
3b:70:e0:46:a4:28:7b:41:62:1e:8f:a5:83:87:60:
e4:f0:5c:5c:2d:35:ab:6d:e8:ad:33:d8:fd:dc:e5:
f5:a5:52:5a:12:45:74:35:99:d1:fa:59:a1:0a:a0:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:76:96:31:DD:EF:C7:86:D4:03:C8:AD:5A:F3:1E:50:31:8B:9A:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43266B48DC9711EFB969E4B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.0.0/22
Signature Algorithm: sha256WithRSAEncryption
39:42:d2:dd:2c:27:e7:c9:01:9b:a0:c4:0f:f4:d0:85:56:20:
91:f6:b3:ab:8f:6b:fb:56:1f:a5:53:5c:42:65:7f:d4:34:05:
81:03:dc:ef:89:7a:8e:43:fd:e6:44:cf:49:d0:06:b2:fa:20:
c8:5b:76:dc:b1:db:dc:7c:45:de:9a:1c:0f:7e:0e:8f:49:47:
7e:c3:97:97:8a:9c:91:d5:ea:32:bd:8c:ea:46:8e:3e:b1:3e:
68:60:36:25:33:cc:91:94:99:af:14:00:b1:37:56:c0:8e:2d:
03:65:4a:89:f4:7f:b2:d0:72:5f:dc:99:e7:dd:d6:09:9b:7c:
57:33:80:78:1a:e6:58:3d:3d:cb:3c:28:5e:62:03:ab:1e:ca:
81:c0:b9:33:6b:b4:76:e0:e0:15:a0:b7:c5:9d:83:9f:db:38:
3b:81:35:7d:62:07:09:cf:15:bd:2c:05:73:af:05:b8:8b:32:
8d:a3:b0:5e:ca:2f:91:20:ab:4a:3e:54:9e:dc:7c:31:d9:a8:
68:63:ad:00:2d:cf:de:97:f4:e9:e1:21:b7:51:e7:af:1f:2c:
74:d6:9f:33:4f:0f:05:23:d3:8d:cf:b4:21:fd:ea:95:c6:dc:
bf:7b:95:41:19:62:8c:3b:3d:6c:33:53:e1:b8:2e:6b:58:44:
6a:78:02:89
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARTXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MTAxMjQ2WhcNMjUwMjA4MTAxMjQ2WjAYMRYw
FAYDVQQDEw02Nzk3NWMyMi1iMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9PlLdhf5rLpShgt4ku2xraSkmuoR/37KIqe4eIeGOqeHKWi8XOviEmdC
JNfNyudX7cx2V8VOEFHyhqzRus+QTXe7E4BZ11k4PwCVULi6KtJ8pZeg9agIJ0v0
s1K/e+Bfiv2y43NEPyZ1/BCiauaPWApiEWQ+DXP6fkA6gZthsUThS5jMFxHSVluZ
G5NPDcxy4uqSpdalJrH1N0iMVm5W0Dcv0AdFeHtLmHXgmEb3smGZkVzTEXl63z8P
ZxDHnTLSBqQ6aujJFKiqMnMUzjWQrzY7cOBGpCh7QWIej6WDh2Dk8FxcLTWrbeit
M9j93OX1pVJaEkV0NZnR+lmhCqDj4QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMV2
ljHd78eG1APIrVrzHlAxi5qaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MzI2NkI0OERDOTcxMUVGQjk2OUU0QjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcoAMA0GCSqGSIb3DQEBCwUA
A4IBAQA5QtLdLCfnyQGboMQP9NCFViCR9rOrj2v7Vh+lU1xCZX/UNAWBA9zviXqO
Q/3mRM9J0Aay+iDIW3bcsdvcfEXemhwPfg6PSUd+w5eXipyR1eoyvYzqRo4+sT5o
YDYlM8yRlJmvFACxN1bAji0DZUqJ9H+y0HJf3Jnn3dYJm3xXM4B4GuZYPT3LPChe
YgOrHsqBwLkza7R24OAVoLfFnYOf2zg7gTV9YgcJzxW9LAVzrwW4izKNo7Beyi+R
IKtKPlSe3Hwx2ahoY60ALc/el/Tp4SG3UeevHyx01p8zTw8FI9ONz7Qh/eqVxty/
e5VBGWKMOz1sM1PhuC5rWERqeAKJ
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:41:57 2025 by rpki-client