Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71F880B0DBDD11EF9E968852762E951A.roa
File: 71F880B0DBDD11EF9E968852762E951A.roa (raw, json)
Hash identifier: n85P7D7ske3wxMK5TSUXfFA7CJ7DyCBChmuCS71J53g=
Subject key identifier: 04:16:15:A7:32:AE:14:C1:AF:66:33:50:0F:AE:F5:F7:1C:C0:9E:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011360
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71F880B0DBDD11EF9E968852762E951A.roa
Signing time: Sun 26 Jan 2025 12:02:42 +0000
ROA not before: Sun 26 Jan 2025 12:02:38 +0000
ROA not after: Tue 25 Mar 2025 12:02:38 +0000
asID: 6079
IP address blocks: 45.197.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70496 (0x11360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:02:38 2025 GMT
Not After : Mar 25 12:02:38 2025 GMT
Subject: CN=67962462-3a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:f1:cb:36:77:48:aa:af:f4:ac:de:45:75:
d3:f9:a9:c2:a1:12:c0:95:9a:08:39:2d:c5:c9:1a:
1b:7d:00:8b:22:14:21:81:73:53:5f:a5:04:34:6c:
fb:56:c0:81:ae:3c:4e:3e:08:54:33:11:bd:5f:20:
ea:21:5a:c1:6b:d5:a9:14:2e:51:16:95:b1:d4:c2:
15:f2:4f:1c:04:fb:8e:47:c6:be:01:11:98:11:60:
15:b5:e8:e1:aa:a0:b8:26:84:76:4b:99:55:bc:c9:
6c:c7:b7:0a:33:52:41:9b:66:9f:32:58:ef:57:6b:
fc:83:0f:1b:ca:dd:2e:e8:25:1e:bd:61:19:1b:d2:
0b:ce:40:f5:ff:4b:28:08:ce:de:14:cd:39:32:d3:
9b:72:a9:32:73:e6:48:a4:c5:83:3d:f5:4e:36:af:
64:c0:49:ea:1a:8b:67:4f:22:bf:96:55:cf:22:b2:
72:b9:8a:91:21:71:f8:a3:ed:66:5c:bf:37:c4:cd:
6d:12:55:34:2c:92:69:33:bd:bd:82:ad:7d:1d:98:
23:98:74:e5:2f:5f:ff:d1:28:f0:66:89:bb:49:98:
d0:82:c2:5d:f2:86:0c:09:81:18:dd:67:68:4d:59:
b3:99:e9:6a:d8:bf:41:5d:58:f1:ce:af:5d:0a:b9:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:16:15:A7:32:AE:14:C1:AF:66:33:50:0F:AE:F5:F7:1C:C0:9E:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71F880B0DBDD11EF9E968852762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:be:71:fb:01:13:db:3d:1b:3e:a4:67:89:26:2e:c3:4e:c5:
52:51:9a:17:32:ec:39:d6:b1:78:ff:f4:33:e8:60:0e:98:a3:
3f:62:9d:ba:f0:86:93:df:4a:f0:c7:bc:bc:8a:ce:8e:ac:d2:
1a:f8:8d:75:98:af:25:3d:49:41:34:00:36:58:83:42:c4:6b:
15:63:6f:57:72:fb:a9:45:d4:f3:19:c3:f0:c8:7c:e7:ce:9e:
ab:4f:79:07:e9:44:7d:34:dd:4f:15:75:d0:7e:6c:72:fe:94:
2d:e8:3b:ee:6f:c2:63:ec:ce:29:e7:a5:d5:5f:eb:ad:db:e5:
f2:02:78:7b:28:15:59:bf:bf:14:05:22:c1:a6:df:9e:99:23:
6b:45:af:2e:ce:51:5b:aa:8c:0c:be:e7:ac:3e:af:8e:cd:4f:
4d:f0:af:da:42:a5:d5:cd:0e:ab:5a:64:da:9a:0f:b0:f0:4d:
36:6f:4c:64:28:2a:75:09:69:ae:33:e7:bb:12:81:44:df:51:
e6:63:73:b9:88:21:45:e8:de:f9:8a:2d:f2:cf:04:eb:b5:da:
dd:c3:87:34:c3:2e:a8:d6:ab:a4:2a:eb:fc:06:3e:cd:e1:ab:
b8:b1:44:7b:cb:c4:9a:79:5f:b2:30:20:7d:6f:76:28:d9:16:
bc:ed:ed:e8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARNgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI2MTIwMjM4WhcNMjUwMzI1MTIwMjM4WjAYMRYw
FAYDVQQDEw02Nzk2MjQ2Mi0zYTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuC7xyzZ3SKqv9KzeRXXT+anCoRLAlZoIOS3FyRobfQCLIhQhgXNTX6UE
NGz7VsCBrjxOPghUMxG9XyDqIVrBa9WpFC5RFpWx1MIV8k8cBPuOR8a+ARGYEWAV
tejhqqC4JoR2S5lVvMlsx7cKM1JBm2afMljvV2v8gw8byt0u6CUevWEZG9ILzkD1
/0soCM7eFM05MtObcqkyc+ZIpMWDPfVONq9kwEnqGotnTyK/llXPIrJyuYqRIXH4
o+1mXL83xM1tElU0LJJpM729gq19HZgjmHTlL1//0SjwZom7SZjQgsJd8oYMCYEY
3WdoTVmzmelq2L9BXVjxzq9dCrnrvwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAQW
FacyrhTBr2YzUA+u9fccwJ5VMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MUY4ODBCMERCREQxMUVGOUU5Njg4NTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcXwMA0GCSqGSIb3DQEBCwUA
A4IBAQCkvnH7ARPbPRs+pGeJJi7DTsVSUZoXMuw51rF4//Qz6GAOmKM/Yp268IaT
30rwx7y8is6OrNIa+I11mK8lPUlBNAA2WINCxGsVY29XcvupRdTzGcPwyHznzp6r
T3kH6UR9NN1PFXXQfmxy/pQt6Dvub8Jj7M4p56XVX+ut2+XyAnh7KBVZv78UBSLB
pt+emSNrRa8uzlFbqowMvuesPq+OzU9N8K/aQqXVzQ6rWmTamg+w8E02b0xkKCp1
CWmuM+e7EoFE31HmY3O5iCFF6N75ii3yzwTrtdrdw4c0wy6o1qukKuv8Bj7N4au4
sUR7y8SaeV+yMCB9b3Yo2Ra87e3o
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:28:01 2025 by rpki-client