Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71356BDADED911EF93DFAC7E762E951A.roa
File: 71356BDADED911EF93DFAC7E762E951A.roa (raw, json)
Hash identifier: wCPouIxvZuKf0hfUTcYeTw3Cc7G+YwW+qbtk9tMbtls=
Subject key identifier: A6:56:10:DA:34:F0:F9:E8:0A:BC:FE:19:2B:B8:26:CF:D5:03:B9:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71356BDADED911EF93DFAC7E762E951A.roa
Signing time: Thu 30 Jan 2025 07:11:36 +0000
ROA not before: Thu 30 Jan 2025 07:11:31 +0000
ROA not after: Wed 05 Mar 2025 07:11:31 +0000
asID: 147176
IP address blocks: 45.201.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71089 (0x115b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 30 07:11:31 2025 GMT
Not After : Mar 5 07:11:31 2025 GMT
Subject: CN=679b2628-c3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:5d:7b:5c:aa:48:ec:27:24:2f:0c:42:37:
a1:86:dd:ee:69:90:f4:6a:7e:4e:6e:56:22:5f:b8:
ce:85:b8:f9:81:e9:5c:86:2b:8f:2a:78:74:9a:a8:
41:2f:0a:c7:aa:9e:d6:d4:53:ee:be:40:0b:32:23:
fb:c7:34:49:c1:cd:bc:93:01:db:1a:7e:e3:e3:8b:
de:5a:98:1a:7d:84:75:83:e2:2b:66:f3:83:70:ed:
3c:88:7a:aa:5c:77:9a:cc:41:84:5a:d3:a3:67:15:
5d:22:ea:89:41:b2:7e:2a:fb:e4:64:c4:6e:b1:d5:
27:32:b6:6d:57:ed:e1:8e:14:29:33:30:d3:8e:c0:
19:d2:88:0b:5f:f3:c6:3a:a5:22:b4:be:5e:2e:71:
dc:4b:44:18:3b:89:62:93:ae:29:e1:12:af:9e:82:
80:85:ad:ef:30:ce:39:5f:bf:1f:e4:33:b2:e3:60:
14:f2:5d:8e:a1:36:e7:b8:6c:16:ce:70:d7:f3:2e:
22:fe:3b:b8:96:13:bc:6b:d1:41:5c:ed:03:ff:55:
7c:37:d1:dd:91:06:f1:eb:0a:73:3e:89:e3:1d:2a:
50:f4:21:88:dd:04:66:f2:aa:c1:5a:40:03:5a:e7:
26:ff:41:3d:75:ed:cd:f4:c2:51:ed:68:39:17:a2:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:56:10:DA:34:F0:F9:E8:0A:BC:FE:19:2B:B8:26:CF:D5:03:B9:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71356BDADED911EF93DFAC7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.9.0/24
Signature Algorithm: sha256WithRSAEncryption
53:63:31:82:ce:6a:0b:b6:b8:9f:76:17:28:27:e8:cc:b9:76:
26:e8:e7:66:75:76:d9:8e:a8:e6:30:d2:bd:01:d6:b4:4b:90:
b4:a5:34:8e:3e:97:14:da:5d:01:d5:e5:fa:77:95:56:e9:8e:
a8:cc:3e:d0:67:8a:32:4b:f6:7a:49:3a:1b:19:bb:de:7b:15:
6c:e1:5f:e8:16:c4:9a:cd:67:51:4e:54:bc:7f:e0:ed:00:1b:
2f:4c:93:55:d8:0d:7b:39:63:81:35:f9:7e:9e:b3:9b:7a:17:
95:99:30:49:90:fe:ef:03:27:ca:2b:0b:da:4a:7a:e0:55:ce:
49:89:f7:5e:cb:b4:09:a4:07:30:48:8d:be:ae:26:ff:51:29:
fd:7c:39:5d:d5:71:76:ac:f0:84:f0:ee:f4:0f:20:7d:39:b6:
84:15:06:2a:92:3b:5c:74:0b:e2:2d:4a:bc:50:19:09:a5:bc:
2f:2d:32:1e:76:67:f4:53:47:d9:9f:3d:28:ae:e7:77:2e:78:
b4:cf:ff:3a:07:71:d4:5c:be:06:94:1b:97:a4:1d:5e:ca:93:
08:e8:95:76:fd:e3:0c:69:22:f0:69:fa:1e:66:08:a3:68:d3:
0d:a9:dd:f1:33:09:41:5e:b4:2e:94:ce:1f:a3:6a:74:1f:e5:
31:0a:fa:ec
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARWxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTMwMDcxMTMxWhcNMjUwMzA1MDcxMTMxWjAYMRYw
FAYDVQQDEw02NzliMjYyOC1jM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvSJde1yqSOwnJC8MQjehht3uaZD0an5OblYiX7jOhbj5gelchiuPKnh0
mqhBLwrHqp7W1FPuvkALMiP7xzRJwc28kwHbGn7j44veWpgafYR1g+IrZvODcO08
iHqqXHeazEGEWtOjZxVdIuqJQbJ+KvvkZMRusdUnMrZtV+3hjhQpMzDTjsAZ0ogL
X/PGOqUitL5eLnHcS0QYO4lik64p4RKvnoKAha3vMM45X78f5DOy42AU8l2OoTbn
uGwWznDX8y4i/ju4lhO8a9FBXO0D/1V8N9HdkQbx6wpzPonjHSpQ9CGI3QRm8qrB
WkADWucm/0E9de3N9MJR7Wg5F6Iz/wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKZW
ENo08PnoCrz+GSu4Js/VA7nPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MTM1NkJEQURFRDkxMUVGOTNERkFDN0U3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALckJMA0GCSqGSIb3DQEBCwUA
A4IBAQBTYzGCzmoLtrifdhcoJ+jMuXYm6OdmdXbZjqjmMNK9Ada0S5C0pTSOPpcU
2l0B1eX6d5VW6Y6ozD7QZ4oyS/Z6STobGbveexVs4V/oFsSazWdRTlS8f+DtABsv
TJNV2A17OWOBNfl+nrObeheVmTBJkP7vAyfKKwvaSnrgVc5Jifdey7QJpAcwSI2+
rib/USn9fDld1XF2rPCE8O70DyB9ObaEFQYqkjtcdAviLUq8UBkJpbwvLTIedmf0
U0fZnz0orud3Lni0z/86B3HUXL4GlBuXpB1eypMI6JV2/eMMaSLwafoeZgijaNMN
qd3xMwlBXrQulM4fo2p0H+UxCvrs
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:08:48 2025 by rpki-client