Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/677283B0DC8811EF82ECB754762E951A.roa
File: 677283B0DC8811EF82ECB754762E951A.roa (raw, json)
Hash identifier: NN6xeU7PphoMof45/RisNpc1KhF5s9pRKvC0I92MHOc=
Subject key identifier: 83:BA:EB:E5:E7:77:47:07:2F:03:D4:0B:B8:AF:EB:DA:8D:D5:D2:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/677283B0DC8811EF82ECB754762E951A.roa
Signing time: Mon 27 Jan 2025 08:26:28 +0000
ROA not before: Mon 27 Jan 2025 08:26:24 +0000
ROA not after: Tue 04 Mar 2025 08:26:24 +0000
asID: 138995
IP address blocks: 45.192.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70825 (0x114a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 08:26:24 2025 GMT
Not After : Mar 4 08:26:24 2025 GMT
Subject: CN=67974334-4f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:ce:06:5f:ef:e2:89:0c:24:82:4f:23:16:
f7:03:a0:aa:a8:2d:18:10:ef:5e:0f:fb:75:ae:4d:
67:f5:fd:31:a1:74:17:50:36:41:ff:cd:a1:0f:1f:
70:34:c1:35:94:21:49:c7:c9:69:a6:f8:4f:cc:06:
ea:9f:49:42:25:ec:48:73:0e:fe:a5:7d:4e:f9:53:
82:c8:2b:2f:d6:b7:3d:b6:2c:44:7f:0d:b4:89:0e:
d4:6a:d0:78:cd:24:ff:aa:4f:d7:46:f8:76:3b:89:
42:c7:4a:0e:06:ce:66:b7:b6:8c:78:0a:e4:b6:1b:
6a:56:45:0a:2f:b2:2d:d1:2b:24:35:71:76:c4:ea:
8d:e0:40:20:66:93:e2:8a:9b:2e:07:19:55:10:11:
e4:28:4e:a3:b7:a3:6d:8f:ef:13:b4:30:a5:0f:25:
9e:7d:e6:7f:4b:2b:90:74:cc:47:13:35:b4:b9:2e:
aa:db:8f:1b:e8:d5:01:5f:4b:24:e3:98:a5:fb:37:
a7:cd:8e:75:6f:68:85:1d:c2:d1:60:66:c7:08:34:
8f:ca:bf:9d:0a:53:60:b9:6e:c8:f4:0f:41:c1:36:
fd:97:2d:99:76:75:32:8a:23:fb:db:99:f8:38:c3:
2a:cc:c7:94:97:6f:b8:e5:39:37:4a:f5:f6:db:0a:
ba:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BA:EB:E5:E7:77:47:07:2F:03:D4:0B:B8:AF:EB:DA:8D:D5:D2:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/677283B0DC8811EF82ECB754762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.167.0/24
Signature Algorithm: sha256WithRSAEncryption
28:75:74:a2:3b:b9:7a:a8:fb:ea:47:cc:cf:f9:bb:15:42:c6:
6b:e2:9a:ed:5e:53:cd:ad:0c:0c:77:e9:ab:1a:4d:2f:cc:33:
75:ef:0d:d6:4f:65:10:cd:0a:24:8b:53:41:e8:9f:e4:2d:8c:
87:7b:03:30:fe:0d:85:25:23:b0:6f:ba:c7:f5:09:09:a5:9f:
75:1f:86:7b:d7:7b:b0:b9:2f:88:27:37:a8:e8:29:67:fb:cb:
f4:9e:df:23:11:e1:ce:4e:e7:0b:ce:fe:13:82:dc:99:28:50:
a7:b3:a3:98:48:75:36:9f:4a:bb:5e:51:31:2f:b9:c0:fe:79:
50:c8:0a:28:c6:bd:c1:25:a7:0e:24:03:5f:e1:f7:d2:0f:83:
5d:61:2d:bd:7c:80:54:f0:85:7f:6f:1f:b2:15:80:bc:15:84:
67:4f:f7:f5:34:02:7a:f5:e3:43:89:bc:d7:a1:9f:7b:bc:0c:
db:60:0d:c8:1a:0f:2c:b7:e2:df:66:e5:2d:9b:20:08:d8:a0:
1d:eb:c5:eb:ab:27:1e:cb:c3:0b:9b:f3:eb:5f:8e:0f:a8:43:
fb:6d:6b:2f:7c:ff:d9:ac:8f:9a:40:ad:d6:15:91:14:0f:58:
b9:7b:d8:91:33:ec:8d:00:fb:45:17:71:84:21:a5:26:17:f0:
05:b3:4f:d7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARSpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MDgyNjI0WhcNMjUwMzA0MDgyNjI0WjAYMRYw
FAYDVQQDEw02Nzk3NDMzNC00Zjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtZ7OBl/v4okMJIJPIxb3A6CqqC0YEO9eD/t1rk1n9f0xoXQXUDZB/82h
Dx9wNME1lCFJx8lppvhPzAbqn0lCJexIcw7+pX1O+VOCyCsv1rc9tixEfw20iQ7U
atB4zST/qk/XRvh2O4lCx0oOBs5mt7aMeArkthtqVkUKL7It0SskNXF2xOqN4EAg
ZpPiipsuBxlVEBHkKE6jt6Ntj+8TtDClDyWefeZ/SyuQdMxHEzW0uS6q248b6NUB
X0sk45il+zenzY51b2iFHcLRYGbHCDSPyr+dClNguW7I9A9BwTb9ly2ZdnUyiiP7
25n4OMMqzMeUl2+45Tk3SvX22wq61QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIO6
6+Xnd0cHLwPUC7iv69qN1dKbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NzcyODNCMERDODgxMUVGODJFQ0I3NTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcCnMA0GCSqGSIb3DQEBCwUA
A4IBAQAodXSiO7l6qPvqR8zP+bsVQsZr4prtXlPNrQwMd+mrGk0vzDN17w3WT2UQ
zQoki1NB6J/kLYyHewMw/g2FJSOwb7rH9QkJpZ91H4Z713uwuS+IJzeo6Cln+8v0
nt8jEeHOTucLzv4TgtyZKFCns6OYSHU2n0q7XlExL7nA/nlQyAooxr3BJacOJANf
4ffSD4NdYS29fIBU8IV/bx+yFYC8FYRnT/f1NAJ69eNDibzXoZ97vAzbYA3IGg8s
t+LfZuUtmyAI2KAd68Xrqycey8MLm/PrX44PqEP7bWsvfP/ZrI+aQK3WFZEUD1i5
e9iRM+yNAPtFF3GEIaUmF/AFs0/X
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:18:38 2025 by rpki-client