Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55382EDCDB4011EFB3B8AEAB762E951A.roa
File: 55382EDCDB4011EFB3B8AEAB762E951A.roa (raw, json)
Hash identifier: ke8cGbLeGobxOi/XpCpa34500Ak4yHvWbuxss9OB/X8=
Subject key identifier: 51:4F:B6:6F:95:E8:62:EA:5E:A7:36:E7:04:3D:C6:35:0E:DF:18:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01129B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55382EDCDB4011EFB3B8AEAB762E951A.roa
Signing time: Sat 25 Jan 2025 17:18:03 +0000
ROA not before: Sat 25 Jan 2025 17:17:59 +0000
ROA not after: Sun 09 Mar 2025 17:17:59 +0000
asID: 63139
IP address blocks: 45.197.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70299 (0x1129b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 17:17:59 2025 GMT
Not After : Mar 9 17:17:59 2025 GMT
Subject: CN=67951cca-601b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:78:21:76:e9:34:92:9b:d8:1b:3f:16:e1:
02:22:f8:10:48:de:a7:57:88:c3:d5:85:23:72:c1:
d2:bd:5d:a9:10:16:eb:ca:da:ab:b7:05:0a:18:f7:
f0:35:0f:a6:5c:fe:d8:28:f0:a9:b1:20:98:aa:29:
b3:f2:f0:88:36:7d:92:07:97:14:8c:e4:8e:88:14:
79:3c:23:c3:1c:ce:6b:69:fa:fc:29:26:22:56:15:
db:27:69:75:68:3e:91:7e:80:48:4e:b9:4c:d7:d5:
70:57:d1:dc:3c:50:f8:2b:75:31:86:c4:bc:da:ff:
80:e8:1f:88:5f:40:92:59:bf:ac:2a:04:1b:90:33:
70:97:1e:0a:56:0e:16:af:98:2c:08:8e:9f:79:91:
2d:ad:a3:fe:05:1e:9e:76:40:58:ef:c3:f9:06:42:
f1:4b:f9:90:32:61:66:9d:b5:60:c3:5b:f9:00:b4:
7c:3b:09:23:6f:df:52:ac:00:c2:70:a0:d0:6f:69:
f6:78:44:62:4d:a5:cf:b3:ad:7d:e5:22:ce:3a:58:
f8:d3:9a:2f:fb:69:a7:75:f7:31:02:4f:ba:ef:99:
15:0e:4f:c6:c6:57:15:91:35:9e:11:25:9e:db:e8:
81:a1:0d:15:87:2f:12:04:77:a2:e3:ef:a0:a2:43:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4F:B6:6F:95:E8:62:EA:5E:A7:36:E7:04:3D:C6:35:0E:DF:18:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55382EDCDB4011EFB3B8AEAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fc:ae:69:43:bb:77:19:ea:42:fb:42:ff:ed:8d:da:41:e6:
cb:6a:7e:07:b2:f2:93:04:c7:e4:df:f3:26:88:67:0c:6e:4c:
71:ff:6f:cc:e8:fa:c3:b5:96:4f:5a:5d:1a:7c:20:98:02:75:
d3:9c:0f:49:f9:ec:ce:18:91:ab:31:0b:9c:a8:e2:28:73:ff:
3c:5e:ab:98:ca:32:cb:54:fc:1c:5b:5a:a4:e1:c5:29:37:71:
80:58:87:91:61:40:a5:e9:36:8d:d9:08:d1:47:e3:2c:7b:82:
c4:ce:a8:de:cf:5a:51:3f:38:81:ea:7a:87:3b:54:27:20:5b:
eb:54:6a:ef:d6:95:43:e6:67:f3:6e:e4:61:a1:e4:f3:b7:96:
f3:68:55:fb:30:f4:16:e0:82:a2:b5:07:14:03:c6:00:5b:6c:
93:4b:65:dc:ee:7c:5d:45:f3:43:f2:43:94:05:0d:03:af:20:
78:ce:60:54:c1:2a:6f:0c:1d:23:60:38:87:f2:a1:c2:41:9a:
ae:f9:69:14:3d:e8:65:71:d4:59:37:51:54:be:a8:fb:20:ed:
b2:b8:2e:11:97:a4:85:bf:71:62:57:1e:7b:1e:31:7b:d2:1e:
e6:32:7b:b9:d7:d4:f4:e9:19:79:56:23:f0:ea:d6:85:ca:97:
0e:c9:ee:6b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARKbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTcxNzU5WhcNMjUwMzA5MTcxNzU5WjAYMRYw
FAYDVQQDEw02Nzk1MWNjYS02MDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt8V4IXbpNJKb2Bs/FuECIvgQSN6nV4jD1YUjcsHSvV2pEBbrytqrtwUK
GPfwNQ+mXP7YKPCpsSCYqimz8vCINn2SB5cUjOSOiBR5PCPDHM5rafr8KSYiVhXb
J2l1aD6RfoBITrlM19VwV9HcPFD4K3UxhsS82v+A6B+IX0CSWb+sKgQbkDNwlx4K
Vg4Wr5gsCI6feZEtraP+BR6edkBY78P5BkLxS/mQMmFmnbVgw1v5ALR8Owkjb99S
rADCcKDQb2n2eERiTaXPs6195SLOOlj405ov+2mndfcxAk+675kVDk/GxlcVkTWe
ESWe2+iBoQ0Vhy8SBHei4++gokMO6wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFFP
tm+V6GLqXqc25wQ9xjUO3xiIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NTM4MkVEQ0RCNDAxMUVGQjNCOEFFQUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcVDMA0GCSqGSIb3DQEBCwUA
A4IBAQB9/K5pQ7t3GepC+0L/7Y3aQebLan4HsvKTBMfk3/MmiGcMbkxx/2/M6PrD
tZZPWl0afCCYAnXTnA9J+ezOGJGrMQucqOIoc/88XquYyjLLVPwcW1qk4cUpN3GA
WIeRYUCl6TaN2QjRR+Mse4LEzqjez1pRPziB6nqHO1QnIFvrVGrv1pVD5mfzbuRh
oeTzt5bzaFX7MPQW4IKitQcUA8YAW2yTS2Xc7nxdRfND8kOUBQ0DryB4zmBUwSpv
DB0jYDiH8qHCQZqu+WkUPehlcdRZN1FUvqj7IO2yuC4Rl6SFv3FiVx57HjF70h7m
Mnu519T06Rl5ViPw6taFypcOye5r
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:25:48 2025 by rpki-client