Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67E12480DA9611EFA029E4AA762E951A.roa
File: 67E12480DA9611EFA029E4AA762E951A.roa (raw, json)
Hash identifier: gJsRpLIqAXK2xkZrUJgxVa//COr3aaul1pkwvs/sMYA=
Subject key identifier: 07:65:DA:4C:32:EF:A6:08:C9:38:4E:80:DC:CA:A9:FD:D0:24:F9:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01109A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67E12480DA9611EFA029E4AA762E951A.roa
Signing time: Fri 24 Jan 2025 21:01:39 +0000
ROA not before: Fri 24 Jan 2025 21:01:36 +0000
ROA not after: Tue 25 Feb 2025 21:01:36 +0000
asID: 202656
IP address blocks: 45.199.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69786 (0x1109a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:01:36 2025 GMT
Not After : Feb 25 21:01:36 2025 GMT
Subject: CN=6793ffb3-f851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ec:86:f4:6e:c6:98:78:7b:ab:51:65:bf:22:
8c:83:28:d5:96:a6:f8:58:ca:21:38:d8:b6:4b:c8:
60:bf:a2:35:d1:c3:7c:7f:43:83:c4:6b:a2:e0:b4:
3e:7a:61:a9:41:87:82:21:22:03:39:ee:59:dc:11:
98:5a:bb:2a:36:02:10:2f:88:12:4b:9a:86:4c:8a:
8e:ab:13:f6:5a:67:3a:22:f0:b5:75:2f:92:11:91:
0c:7e:38:d1:cf:9e:1e:34:81:d6:af:83:38:5b:dc:
0d:4b:f5:da:f2:74:48:70:d6:96:0a:8a:5f:7f:0e:
a2:fa:2a:7f:2f:00:71:72:29:49:a0:6a:a5:93:57:
13:ca:78:ee:6d:9b:69:26:2f:54:8a:86:59:48:40:
e1:a3:ee:39:6d:40:3d:01:23:bd:1d:bc:2d:a7:40:
23:e3:9f:0f:02:3b:ce:eb:f8:73:93:55:06:05:9b:
23:2e:fb:9e:1c:32:51:72:7f:ad:e5:2d:fc:85:82:
ab:97:c2:a5:04:89:4c:e6:86:6f:a0:e7:4e:80:7e:
05:92:da:d3:37:33:b7:de:ef:28:cd:ef:62:e9:a8:
7b:a9:eb:04:df:03:40:08:8f:9d:71:54:33:3b:71:
ae:7b:71:86:dc:3a:16:f7:b5:aa:65:34:a5:c6:18:
1f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:65:DA:4C:32:EF:A6:08:C9:38:4E:80:DC:CA:A9:FD:D0:24:F9:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67E12480DA9611EFA029E4AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.201.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:10:17:70:d2:7c:ac:70:cc:6b:c4:02:6a:3e:03:ae:da:c4:
b1:f1:6c:da:6e:8a:1b:7e:da:d3:fd:20:7d:d9:86:54:11:e7:
89:65:a7:60:73:33:88:1f:16:23:02:43:df:df:0d:8d:8d:51:
34:54:ce:ee:72:aa:2e:21:b7:13:a3:89:c3:4b:51:5d:13:6e:
b7:9c:40:f6:8c:96:14:9c:6c:a0:e3:26:ff:d1:00:53:2e:34:
cd:d2:b5:a2:f4:e6:47:11:72:81:6a:c4:50:5d:6a:ea:0e:e8:
67:76:0f:86:38:90:1a:ae:34:92:d6:93:4b:af:93:9f:55:99:
ec:c1:21:d8:c6:7b:24:ba:2f:0f:ef:fc:40:39:47:9b:cd:82:
c8:94:b8:98:70:39:2c:9d:0b:92:6b:9a:a7:1d:06:c0:13:2e:
89:d1:05:ca:e5:c2:ea:7b:fc:a4:b1:5f:ce:ec:e0:88:35:20:
4c:b0:96:cc:d0:d6:34:b8:d1:fe:c5:68:cc:1a:0d:61:d1:68:
e2:2f:b1:ba:65:38:b2:4a:97:c7:c3:91:69:0b:70:33:a2:bb:
96:6a:fb:fc:b7:e8:14:08:cc:95:5e:bf:34:5b:51:ea:74:42:
51:65:7e:b7:ac:39:29:10:59:2d:da:78:76:c2:fd:29:82:ce:
c9:ad:9f:a1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARCaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MjEwMTM2WhcNMjUwMjI1MjEwMTM2WjAYMRYw
FAYDVQQDEw02NzkzZmZiMy1mODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0eyG9G7GmHh7q1FlvyKMgyjVlqb4WMohONi2S8hgv6I10cN8f0ODxGui
4LQ+emGpQYeCISIDOe5Z3BGYWrsqNgIQL4gSS5qGTIqOqxP2Wmc6IvC1dS+SEZEM
fjjRz54eNIHWr4M4W9wNS/Xa8nRIcNaWCopffw6i+ip/LwBxcilJoGqlk1cTynju
bZtpJi9UioZZSEDho+45bUA9ASO9Hbwtp0Aj458PAjvO6/hzk1UGBZsjLvueHDJR
cn+t5S38hYKrl8KlBIlM5oZvoOdOgH4FktrTNzO33u8oze9i6ah7qesE3wNACI+d
cVQzO3Gue3GG3DoW97WqZTSlxhgflwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAdl
2kwy76YIyThOgNzKqf3QJPlvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82N0UxMjQ4MERBOTYxMUVGQTAyOUU0QUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfJMA0GCSqGSIb3DQEBCwUA
A4IBAQBvEBdw0nyscMxrxAJqPgOu2sSx8WzaboobftrT/SB92YZUEeeJZadgczOI
HxYjAkPf3w2NjVE0VM7ucqouIbcTo4nDS1FdE263nED2jJYUnGyg4yb/0QBTLjTN
0rWi9OZHEXKBasRQXWrqDuhndg+GOJAarjSS1pNLr5OfVZnswSHYxnskui8P7/xA
OUebzYLIlLiYcDksnQuSa5qnHQbAEy6J0QXK5cLqe/yksV/O7OCINSBMsJbM0NY0
uNH+xWjMGg1h0WjiL7G6ZTiySpfHw5FpC3AzoruWavv8t+gUCMyVXr80W1HqdEJR
ZX63rDkpEFkt2nh2wv0pgs7JrZ+h
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:52 2025 by rpki-client