Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/755506CAD3F411EF90EA5658762E951A.roa
File: 755506CAD3F411EF90EA5658762E951A.roa (raw, json)
Hash identifier: j6PN8CBA+LpMD8N1CiaZlUW/fmP9gNmjYYD1uaW+N8o=
Subject key identifier: 06:49:C6:6C:0B:C5:21:8C:42:6A:19:57:13:1C:C7:AC:D4:BD:A0:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010900
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/755506CAD3F411EF90EA5658762E951A.roa
Signing time: Thu 16 Jan 2025 10:27:17 +0000
ROA not before: Thu 16 Jan 2025 10:27:13 +0000
ROA not after: Sun 16 Mar 2025 10:27:13 +0000
asID: 17561
IP address blocks: 45.195.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67840 (0x10900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 10:27:13 2025 GMT
Not After : Mar 16 10:27:13 2025 GMT
Subject: CN=6788df04-2411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:f4:e7:a2:8e:54:f7:68:f3:ba:18:48:81:
24:98:9a:fe:9b:35:9a:83:4b:e9:c3:fc:4c:6b:a3:
c6:79:ab:80:bc:3c:f3:e3:8e:08:fa:d4:a8:a4:29:
d0:b8:60:be:02:af:8c:1f:bc:25:7b:43:89:70:b2:
fc:c1:04:97:c6:78:c9:0e:32:6a:e6:14:88:67:00:
11:35:d7:e2:2e:20:cb:b0:dc:51:8c:d3:64:14:2f:
1f:47:8c:bd:d7:3a:a4:1e:59:a7:13:4a:ee:e4:29:
cb:a6:5c:ee:ff:a4:bf:26:67:24:04:de:a5:52:b0:
9a:12:c0:bc:55:fc:ab:f7:74:57:35:62:a0:cd:ea:
1d:4d:34:0a:2f:35:ba:b5:a7:03:3b:8b:46:6a:16:
54:1d:dc:3a:93:e2:31:76:c8:e8:4c:0b:71:f8:5d:
ff:3a:7a:1b:f9:d2:6c:40:c1:7a:ef:1e:53:6b:fb:
12:c5:ab:cf:8f:6c:dd:c4:bc:bf:a4:95:68:3e:f8:
a4:37:94:7e:e8:e0:00:a1:b3:33:c7:3b:9c:dd:ae:
7d:c4:fe:a6:1c:34:86:80:28:2a:0b:58:47:01:1f:
20:3f:3c:89:dc:a0:ec:e1:66:50:d8:c0:30:26:a3:
b8:da:ab:7e:67:c5:42:b7:c6:1d:6a:8b:c3:8a:a5:
0b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:49:C6:6C:0B:C5:21:8C:42:6A:19:57:13:1C:C7:AC:D4:BD:A0:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/755506CAD3F411EF90EA5658762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.203.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e2:0f:46:0b:ca:e5:92:8b:ae:57:45:e5:eb:d1:21:73:d9:
78:9f:62:8d:ea:0b:0d:cb:59:a7:06:11:af:a7:f9:a4:86:27:
17:7b:6e:24:ff:7c:f0:98:ac:f0:19:b2:37:62:76:29:ee:a9:
7a:24:3f:ee:13:c3:c5:b3:ef:c3:5e:d1:5c:b5:d5:c2:fb:ea:
3e:6d:ff:7b:0d:58:e6:6c:51:06:89:e5:2c:e9:3a:e3:8c:2b:
e0:d8:74:bb:41:54:09:e2:75:39:49:02:01:6b:09:fc:6a:4f:
45:71:1d:ad:b1:75:94:52:6e:c8:d3:87:79:01:34:46:55:27:
cf:9a:1c:1a:f4:f6:42:f7:93:07:f9:27:c2:5d:5c:f7:12:32:
48:bf:5c:d6:35:27:d7:e7:60:ed:62:26:7b:7e:b8:6a:5c:9a:
9f:73:68:22:bb:a1:97:2d:69:78:da:94:cf:c4:89:c4:a9:d0:
3f:8b:a6:ad:db:ea:7f:70:8c:57:b3:a9:f1:1c:ab:25:36:ad:
21:46:f8:73:99:08:f6:ae:1b:2d:aa:72:4d:f9:1e:a0:75:75:
21:99:36:9a:65:92:a8:27:21:4f:36:57:0a:22:b5:17:17:3d:
6b:d3:62:ea:7c:1e:a1:e5:40:20:64:1a:5b:73:d7:95:73:f8:
62:1b:77:2c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQkAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE2MTAyNzEzWhcNMjUwMzE2MTAyNzEzWjAYMRYw
FAYDVQQDEw02Nzg4ZGYwNC0yNDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA08/056KOVPdo87oYSIEkmJr+mzWag0vpw/xMa6PGeauAvDzz444I+tSo
pCnQuGC+Aq+MH7wle0OJcLL8wQSXxnjJDjJq5hSIZwARNdfiLiDLsNxRjNNkFC8f
R4y91zqkHlmnE0ru5CnLplzu/6S/JmckBN6lUrCaEsC8Vfyr93RXNWKgzeodTTQK
LzW6tacDO4tGahZUHdw6k+IxdsjoTAtx+F3/Onob+dJsQMF67x5Ta/sSxavPj2zd
xLy/pJVoPvikN5R+6OAAobMzxzuc3a59xP6mHDSGgCgqC1hHAR8gPzyJ3KDs4WZQ
2MAwJqO42qt+Z8VCt8YdaovDiqULxQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAZJ
xmwLxSGMQmoZVxMcx6zUvaD1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NTU1MDZDQUQzRjQxMUVGOTBFQTU2NTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcPLMA0GCSqGSIb3DQEBCwUA
A4IBAQCi4g9GC8rlkouuV0Xl69Ehc9l4n2KN6gsNy1mnBhGvp/mkhicXe24k/3zw
mKzwGbI3YnYp7ql6JD/uE8PFs+/DXtFctdXC++o+bf97DVjmbFEGieUs6TrjjCvg
2HS7QVQJ4nU5SQIBawn8ak9FcR2tsXWUUm7I04d5ATRGVSfPmhwa9PZC95MH+SfC
XVz3EjJIv1zWNSfX52DtYiZ7frhqXJqfc2giu6GXLWl42pTPxInEqdA/i6at2+p/
cIxXs6nxHKslNq0hRvhzmQj2rhstqnJN+R6gdXUhmTaaZZKoJyFPNlcKIrUXFz1r
02LqfB6h5UAgZBpbc9eVc/hiG3cs
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:35 2025 by rpki-client