Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C8FD576DB0E11EF8241995D762E951A.roa
File: 6C8FD576DB0E11EF8241995D762E951A.roa (raw, json)
Hash identifier: 6GpfqeWdh+4Pk47q8W7zo8Zp/s2rvf4THrXHKgHMLD8=
Subject key identifier: 3E:3C:A8:2C:A3:02:51:A6:02:D7:2C:53:F3:F7:4E:82:81:92:FD:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011219
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C8FD576DB0E11EF8241995D762E951A.roa
Signing time: Sat 25 Jan 2025 11:20:47 +0000
ROA not before: Sat 25 Jan 2025 11:20:43 +0000
ROA not after: Sun 23 Feb 2025 11:20:43 +0000
asID: 44559
IP address blocks: 45.199.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70169 (0x11219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 11:20:43 2025 GMT
Not After : Feb 23 11:20:43 2025 GMT
Subject: CN=6794c90f-db6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:84:b4:ff:20:a7:78:24:82:09:76:fa:71:
a1:fb:cb:da:0a:86:64:b9:96:9d:41:50:06:e6:c5:
20:35:f0:e5:4e:87:30:15:04:c8:0c:e1:91:8c:45:
e4:cd:44:33:52:91:79:9f:e4:8c:1b:36:33:5a:26:
f5:dc:59:fe:11:f1:bc:65:8e:11:d2:32:b4:c6:77:
d2:bc:3f:83:7a:27:af:30:b9:8c:7c:cf:f4:f7:4c:
3b:73:83:d4:4e:96:27:5a:99:b8:d6:fc:84:2f:96:
ba:f7:54:5e:3b:3a:5a:78:31:60:91:5b:f5:c9:52:
b4:03:4a:71:96:fc:09:0d:1f:e1:96:d3:d1:2b:0b:
2d:f9:de:70:04:9e:f1:9c:39:77:8e:77:be:a5:7c:
fe:2e:b5:8c:19:63:03:9d:d3:5a:75:e3:f8:f5:0b:
74:27:f1:94:c6:7e:1d:d0:2a:1c:6e:7f:56:49:cd:
da:4f:1e:ec:fb:dd:e8:c4:4b:f2:0a:3a:83:77:c9:
08:4f:ca:ca:e5:fa:ce:b7:a4:7b:b9:50:0a:ad:c2:
d7:e5:d5:94:79:30:88:51:9e:26:d2:fa:35:fe:09:
19:74:c5:4c:a4:85:1d:31:01:61:0f:3b:ef:89:63:
05:b5:c6:ac:3e:fa:04:d4:a2:24:fe:f8:5b:42:e0:
78:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3C:A8:2C:A3:02:51:A6:02:D7:2C:53:F3:F7:4E:82:81:92:FD:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C8FD576DB0E11EF8241995D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e8:09:63:3d:d0:92:43:0c:72:62:14:fb:36:28:fe:59:28:
f6:29:a9:bc:df:cc:56:3b:ad:c0:1a:d4:ff:5c:fe:6d:4d:54:
28:55:bc:58:bb:e1:65:3f:de:b8:88:94:65:f7:16:3e:b4:2a:
cd:3d:43:77:2e:ae:7e:c2:2f:ae:a4:70:99:0d:e2:f5:26:5e:
e9:8b:20:90:fa:d1:67:89:c6:6d:28:c4:4c:2c:0f:3f:ba:ab:
36:72:f9:b8:25:23:7f:b3:7d:83:15:ce:e0:9e:38:1e:d4:c7:
fb:79:90:57:79:f1:43:00:59:dd:85:2a:31:79:41:d9:72:cd:
0a:ff:57:bb:82:5a:fc:98:c5:39:d3:74:9e:73:9a:47:1e:b4:
2f:b6:57:91:eb:57:8d:e2:09:34:8a:ff:cb:43:68:b8:7c:32:
55:5b:a3:49:69:29:3e:3b:ed:f4:be:2b:a8:d2:df:97:f1:2c:
8c:f4:a6:50:b3:1c:87:09:c7:de:9c:f7:84:bd:b0:e6:7f:a5:
16:02:0c:fc:5e:e3:66:99:34:7d:c6:2a:cc:52:15:63:aa:97:
18:b2:65:e6:f0:ea:0f:0c:fe:ed:4e:07:43:53:9d:0c:2b:76:
93:f3:e2:62:39:4a:cf:be:1b:c5:4f:ed:7c:82:70:ef:f2:8b:
87:ab:c4:4b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARIZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTEyMDQzWhcNMjUwMjIzMTEyMDQzWjAYMRYw
FAYDVQQDEw02Nzk0YzkwZi1kYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqJyEtP8gp3gkggl2+nGh+8vaCoZkuZadQVAG5sUgNfDlTocwFQTIDOGR
jEXkzUQzUpF5n+SMGzYzWib13Fn+EfG8ZY4R0jK0xnfSvD+DeievMLmMfM/090w7
c4PUTpYnWpm41vyEL5a691ReOzpaeDFgkVv1yVK0A0pxlvwJDR/hltPRKwst+d5w
BJ7xnDl3jne+pXz+LrWMGWMDndNadeP49Qt0J/GUxn4d0Cocbn9WSc3aTx7s+93o
xEvyCjqDd8kIT8rK5frOt6R7uVAKrcLX5dWUeTCIUZ4m0vo1/gkZdMVMpIUdMQFh
DzvviWMFtcasPvoE1KIk/vhbQuB4PQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD48
qCyjAlGmAtcsU/P3ToKBkv0GMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QzhGRDU3NkRCMEUxMUVGODI0MTk5NUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfWMA0GCSqGSIb3DQEBCwUA
A4IBAQCN6AljPdCSQwxyYhT7Nij+WSj2Kam838xWO63AGtT/XP5tTVQoVbxYu+Fl
P964iJRl9xY+tCrNPUN3Lq5+wi+upHCZDeL1Jl7piyCQ+tFnicZtKMRMLA8/uqs2
cvm4JSN/s32DFc7gnjge1Mf7eZBXefFDAFndhSoxeUHZcs0K/1e7glr8mMU503Se
c5pHHrQvtleR61eN4gk0iv/LQ2i4fDJVW6NJaSk+O+30viuo0t+X8SyM9KZQsxyH
CcfenPeEvbDmf6UWAgz8XuNmmTR9xirMUhVjqpcYsmXm8OoPDP7tTgdDU50MK3aT
8+JiOUrPvhvFT+18gnDv8ouHq8RL
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:23:44 2025 by rpki-client