Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F023FBEDCBD11EF9034B5B2762E951A.roa
File: 6F023FBEDCBD11EF9034B5B2762E951A.roa (raw, json)
Hash identifier: QBNxatRkdHHTwvL6CDjcgBnSspA3JTCBaxwEfIxHjcU=
Subject key identifier: 0B:A5:19:1A:BB:42:1D:CC:A1:7C:34:93:30:42:84:FB:17:83:4C:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01153D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F023FBEDCBD11EF9034B5B2762E951A.roa
Signing time: Mon 27 Jan 2025 14:46:04 +0000
ROA not before: Mon 27 Jan 2025 14:46:01 +0000
ROA not after: Sat 08 Feb 2025 14:46:01 +0000
asID: 138456
IP address blocks: 45.202.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70973 (0x1153d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 14:46:01 2025 GMT
Not After : Feb 8 14:46:01 2025 GMT
Subject: CN=67979c2c-fcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:0e:f8:8f:67:38:e0:6d:ea:9c:19:d7:b8:
2b:18:5a:cc:75:9e:b4:50:07:40:e5:db:e8:4d:c0:
13:48:82:e6:a4:2b:80:73:d9:f4:2c:b6:6c:bb:74:
3e:30:8c:f6:3f:51:ee:a5:43:7d:8a:aa:f9:9d:07:
77:9e:bd:01:8c:56:5a:04:a8:98:1a:57:18:06:94:
6c:4d:6d:6c:fa:61:e8:5a:88:6f:55:09:4a:6d:01:
e2:a7:8c:18:ce:2f:8a:ff:a9:5f:4c:c0:4f:7f:e2:
6e:1b:5b:d4:43:46:d7:1b:d9:1d:e2:45:66:6f:91:
7b:cc:1b:7f:c8:48:14:cc:3c:f8:7b:99:a9:b4:f3:
30:12:0d:15:8b:aa:f7:8f:a9:4c:e6:b5:f7:a9:76:
b6:46:ef:49:c9:5b:67:d0:19:8a:da:a3:d6:22:eb:
7c:26:26:11:a8:8e:27:54:12:1d:d8:fe:17:ea:83:
fb:eb:b4:53:c3:52:17:cb:9a:d7:1b:bd:60:4d:6f:
99:1c:a7:85:13:c3:89:09:7f:ba:87:fc:ce:a9:ff:
63:aa:5d:0d:4c:68:7e:b4:4c:f5:8b:b2:d9:47:f6:
ac:7e:ab:fb:4f:92:ab:fa:bd:4d:1a:47:24:b1:50:
f2:1a:09:4d:01:99:44:11:7d:1c:d6:25:77:cf:e8:
47:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A5:19:1A:BB:42:1D:CC:A1:7C:34:93:30:42:84:FB:17:83:4C:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F023FBEDCBD11EF9034B5B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:cf:fb:0f:7f:18:d3:7d:8d:e0:54:c8:e0:b5:26:46:5d:21:
23:c7:94:cc:b9:7a:59:af:fa:1b:ca:d6:7d:2b:a6:dd:d4:3e:
d6:85:f5:05:25:45:a8:72:77:94:3c:db:b1:27:4b:35:91:c6:
c6:85:29:94:87:b7:09:ed:90:14:c2:f4:fe:07:ce:80:2a:96:
c1:51:27:a0:4a:3c:23:f4:51:59:79:40:c5:b9:ff:6e:c5:dd:
d1:11:d6:a8:1f:7b:9f:c9:04:20:2a:d8:0e:ae:e9:09:a6:7c:
b1:64:51:78:8e:8a:ca:f8:6a:be:0b:f0:a8:7f:b5:a7:ae:8e:
b6:68:fa:c3:e1:f2:73:05:4b:dc:2b:90:4e:f7:4f:3e:e1:8e:
42:e0:35:0f:93:6f:35:71:6a:13:bd:8d:ce:b4:0b:d8:75:67:
6e:ce:a4:91:f8:f3:81:cf:e1:1d:52:b8:13:04:8a:b4:c4:5d:
aa:2a:37:0f:3d:22:61:86:10:0a:24:71:5d:a6:79:fe:d8:8b:
9a:ad:1e:fc:13:19:73:69:ec:1d:3c:75:78:69:78:26:31:0e:
eb:00:07:42:03:6c:fe:08:51:8b:a9:72:62:1e:92:a2:a5:3d:
7d:b5:8a:11:88:8d:92:55:e6:e6:63:67:6d:28:c1:e8:25:4c:
36:6b:1e:3b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARU9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MTQ0NjAxWhcNMjUwMjA4MTQ0NjAxWjAYMRYw
FAYDVQQDEw02Nzk3OWMyYy1mY2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAptoO+I9nOOBt6pwZ17grGFrMdZ60UAdA5dvoTcATSILmpCuAc9n0LLZs
u3Q+MIz2P1HupUN9iqr5nQd3nr0BjFZaBKiYGlcYBpRsTW1s+mHoWohvVQlKbQHi
p4wYzi+K/6lfTMBPf+JuG1vUQ0bXG9kd4kVmb5F7zBt/yEgUzDz4e5mptPMwEg0V
i6r3j6lM5rX3qXa2Ru9JyVtn0BmK2qPWIut8JiYRqI4nVBId2P4X6oP767RTw1IX
y5rXG71gTW+ZHKeFE8OJCX+6h/zOqf9jql0NTGh+tEz1i7LZR/asfqv7T5Kr+r1N
GkcksVDyGglNAZlEEX0c1iV3z+hH2QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAul
GRq7Qh3MoXw0kzBChPsXg0wIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RjAyM0ZCRURDQkQxMUVGOTAzNEI1QjI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcrEMA0GCSqGSIb3DQEBCwUA
A4IBAQCgz/sPfxjTfY3gVMjgtSZGXSEjx5TMuXpZr/obytZ9K6bd1D7WhfUFJUWo
cneUPNuxJ0s1kcbGhSmUh7cJ7ZAUwvT+B86AKpbBUSegSjwj9FFZeUDFuf9uxd3R
EdaoH3ufyQQgKtgOrukJpnyxZFF4jorK+Gq+C/Cof7Wnro62aPrD4fJzBUvcK5BO
908+4Y5C4DUPk281cWoTvY3OtAvYdWduzqSR+POBz+EdUrgTBIq0xF2qKjcPPSJh
hhAKJHFdpnn+2IuarR78ExlzaewdPHV4aXgmMQ7rAAdCA2z+CFGLqXJiHpKipT19
tYoRiI2SVebmY2dtKMHoJUw2ax47
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:23 2025 by rpki-client