Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/685091D2D80A11EFA742B89B762E951A.roa
File: 685091D2D80A11EFA742B89B762E951A.roa (raw, json)
Hash identifier: vSf86H50GbfkuSl81YDzdoiIxrhLlvRS1uXJIJ3hjHQ=
Subject key identifier: 74:F9:31:FA:6A:50:55:02:37:95:24:D5:F1:14:85:74:9E:78:2D:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E3A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/685091D2D80A11EFA742B89B762E951A.roa
Signing time: Tue 21 Jan 2025 15:14:28 +0000
ROA not before: Tue 21 Jan 2025 15:14:25 +0000
ROA not after: Sat 01 Feb 2025 15:14:25 +0000
asID: 44559
IP address blocks: 45.199.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69178 (0x10e3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 15:14:25 2025 GMT
Not After : Feb 1 15:14:25 2025 GMT
Subject: CN=678fb9d4-f2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:18:5f:6a:4e:5c:d6:78:b8:cb:de:e6:85:
e7:b4:d7:97:3d:bf:22:36:51:98:8c:91:96:41:d4:
fe:4e:eb:21:95:71:dd:42:d3:85:e2:86:63:0f:86:
2d:f1:c5:a0:7d:f7:b2:db:80:0a:b4:d4:63:3a:8e:
94:24:71:9b:92:d2:30:aa:ae:7c:3a:b3:28:b7:ce:
6a:77:9d:02:3f:7e:38:da:2a:42:7a:44:00:b3:f2:
a8:61:c9:f7:b5:ac:4b:8c:21:87:94:ad:07:6b:b3:
fb:b2:5b:64:f1:28:d9:98:da:99:b7:e3:42:e9:87:
90:a8:90:00:6d:a9:84:df:7e:35:44:41:42:44:fa:
fb:54:1a:2d:ee:2a:da:2d:f3:12:cb:4c:fe:69:54:
40:14:bb:ca:0e:56:0f:b2:7a:b7:bd:8f:b0:39:92:
a7:1e:1b:fe:38:99:d8:3d:0c:c6:74:69:f4:84:7f:
20:9c:a5:2c:60:dd:c8:da:f6:d5:95:1b:0a:b3:11:
ce:24:23:f5:2c:77:7e:b8:91:b3:01:39:40:43:e9:
80:8d:27:9d:e0:a1:c6:25:d5:6f:14:c9:94:d8:e0:
37:76:6e:ef:c3:f9:7a:62:b5:96:fc:e3:96:11:20:
12:6e:c7:1f:e2:cf:ce:9b:6b:b0:7d:e9:86:2d:c8:
70:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F9:31:FA:6A:50:55:02:37:95:24:D5:F1:14:85:74:9E:78:2D:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/685091D2D80A11EFA742B89B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:60:d9:f8:01:b6:a9:02:6b:90:9c:ec:fb:fe:6c:1e:ad:aa:
e5:fe:8c:f9:2d:f4:9a:5e:02:bd:cc:ba:30:dd:36:cf:43:44:
f0:aa:7b:7b:0b:04:62:26:9e:f9:52:8b:67:78:6d:a1:fd:b2:
c5:cf:75:72:14:bf:ee:76:44:0a:a6:6b:96:7a:eb:5a:9c:a1:
48:dd:60:f2:cc:01:11:ed:5d:f0:0d:4d:32:c1:de:5f:50:3a:
3d:79:6f:1a:08:88:b4:4a:57:64:25:d0:d4:bd:59:d5:14:20:
c4:c4:f8:01:d7:f3:d1:2b:ca:cf:09:fe:75:ad:6c:01:3a:b6:
b5:4f:28:be:bf:e7:96:5e:28:bd:ef:33:86:f6:97:3f:e2:c1:
de:32:1e:fd:23:79:bd:8f:0c:48:a0:22:df:cb:3d:35:4b:b8:
6b:67:48:d8:c4:5d:7d:6f:a8:2f:23:89:1e:91:f8:d8:4d:a0:
4d:dd:2e:70:42:83:0e:17:ba:fc:3f:96:91:fc:29:ff:57:2f:
ab:a1:94:8b:92:32:66:57:fc:35:a5:e2:78:98:25:69:6f:84:
f3:e6:87:65:4e:8d:07:cc:55:34:b9:88:ba:5b:cf:87:f7:c5:
ee:b9:44:9a:5e:64:6b:15:25:25:03:c7:c0:21:b0:4b:3d:2a:
3c:cd:a6:4e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ46MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTUxNDI1WhcNMjUwMjAxMTUxNDI1WjAYMRYw
FAYDVQQDEw02NzhmYjlkNC1mMmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx90YX2pOXNZ4uMve5oXntNeXPb8iNlGYjJGWQdT+TushlXHdQtOF4oZj
D4Yt8cWgffey24AKtNRjOo6UJHGbktIwqq58OrMot85qd50CP3442ipCekQAs/Ko
Ycn3taxLjCGHlK0Ha7P7sltk8SjZmNqZt+NC6YeQqJAAbamE3341REFCRPr7VBot
7iraLfMSy0z+aVRAFLvKDlYPsnq3vY+wOZKnHhv+OJnYPQzGdGn0hH8gnKUsYN3I
2vbVlRsKsxHOJCP1LHd+uJGzATlAQ+mAjSed4KHGJdVvFMmU2OA3dm7vw/l6YrWW
/OOWESASbscf4s/Om2uwfemGLchwfwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHT5
MfpqUFUCN5Uk1fEUhXSeeC0xMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82ODUwOTFEMkQ4MEExMUVGQTc0MkI4OUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfVMA0GCSqGSIb3DQEBCwUA
A4IBAQAbYNn4AbapAmuQnOz7/mwerarl/oz5LfSaXgK9zLow3TbPQ0Twqnt7CwRi
Jp75UotneG2h/bLFz3VyFL/udkQKpmuWeutanKFI3WDyzAER7V3wDU0ywd5fUDo9
eW8aCIi0SldkJdDUvVnVFCDExPgB1/PRK8rPCf51rWwBOra1Tyi+v+eWXii97zOG
9pc/4sHeMh79I3m9jwxIoCLfyz01S7hrZ0jYxF19b6gvI4kekfjYTaBN3S5wQoMO
F7r8P5aR/Cn/Vy+roZSLkjJmV/w1peJ4mCVpb4Tz5odlTo0HzFU0uYi6W8+H98Xu
uUSaXmRrFSUlA8fAIbBLPSo8zaZO
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:34 2025 by rpki-client