Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D57BAFEDB1311EF917A1280762E951A.roa
File: 7D57BAFEDB1311EF917A1280762E951A.roa (raw, json)
Hash identifier: EaxvB/GTzuFdeE86j7t1NlQ+U6+AEAA9ZIj7otUR0CY=
Subject key identifier: DE:72:E1:D4:61:2A:CC:2F:90:E6:8F:4D:7C:06:95:70:01:EA:34:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01122F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D57BAFEDB1311EF917A1280762E951A.roa
Signing time: Sat 25 Jan 2025 11:57:03 +0000
ROA not before: Sat 25 Jan 2025 11:56:59 +0000
ROA not after: Sun 23 Feb 2025 11:56:59 +0000
asID: 202656
IP address blocks: 45.200.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70191 (0x1122f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 11:56:59 2025 GMT
Not After : Feb 23 11:56:59 2025 GMT
Subject: CN=6794d18e-5649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:39:14:dc:4c:c6:f0:ff:e9:17:7c:e6:84:
2f:e3:10:72:4d:58:89:d9:33:ae:4c:aa:47:17:cb:
ad:63:df:53:2f:77:71:97:a8:b8:a7:d7:a2:a8:a9:
16:aa:ce:32:10:3b:1e:89:1f:39:65:7a:56:e0:d5:
a3:ec:70:97:94:b5:bd:ba:0d:65:2c:f5:22:96:4b:
22:9d:06:3b:86:95:83:31:7c:93:0c:12:a9:a0:a2:
9c:a8:31:e3:a7:04:de:fa:ad:20:e4:d7:5d:c3:f0:
bd:9b:6e:61:f0:90:68:00:d8:84:bc:51:dc:ba:a5:
1f:5c:2a:a6:30:ad:8c:61:40:ae:da:b0:1b:5f:20:
22:54:f1:9f:70:e1:99:34:82:b4:6d:56:96:cf:b8:
dc:52:7f:e2:52:3c:36:b4:64:ab:d3:a9:ce:79:7a:
78:d5:a8:38:81:85:80:88:da:31:82:40:ff:49:7b:
f9:53:af:d2:7a:02:cb:18:9d:67:21:1e:16:68:75:
f1:f0:61:d6:39:aa:27:17:dc:01:d9:29:4b:c9:9e:
64:7a:b6:f8:e3:65:e1:b3:e4:d7:56:44:85:ec:ee:
dc:f1:bc:3b:c1:bc:06:45:0f:1b:28:c9:dd:a9:27:
20:d9:21:cb:9b:8b:a5:94:b3:89:3f:76:14:45:86:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:E1:D4:61:2A:CC:2F:90:E6:8F:4D:7C:06:95:70:01:EA:34:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D57BAFEDB1311EF917A1280762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.161.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8b:fa:cf:6d:e3:ca:05:65:a3:55:e0:57:66:3b:9e:93:2a:
f8:88:96:f4:4a:0c:6f:f5:cc:48:d5:14:d6:fa:36:bd:9c:af:
27:6e:4e:d1:82:2f:9a:46:70:2b:69:72:b9:0c:66:15:12:eb:
18:75:5d:3b:6a:96:03:f0:9b:d9:9c:5c:ca:16:27:1c:5f:f6:
07:64:90:4f:e9:67:80:ac:bb:5f:6b:31:ff:6f:fb:18:12:1e:
49:bb:e6:f7:cd:6d:99:5d:38:b4:74:ea:37:d6:91:b3:a2:bf:
6f:c9:b7:84:81:1f:08:5b:b0:2a:49:94:b9:e3:06:24:ad:97:
25:7a:f1:05:7f:d8:74:0d:88:13:7d:ea:99:98:20:a5:3c:2f:
ff:d8:c6:bd:de:0c:30:49:ba:f0:19:d0:70:51:21:aa:94:b4:
12:f5:8a:4d:db:3d:bd:51:c9:5b:89:44:2f:01:d5:30:e3:f9:
ef:e9:21:67:ef:98:58:2d:ed:d4:92:76:95:51:a4:df:35:38:
94:03:12:93:fd:92:4e:b1:ca:75:f2:c2:9a:b2:32:bb:83:df:
d3:5c:89:60:bd:f1:67:4b:e6:d7:1f:ec:8c:59:e3:d2:4e:22:
5c:cd:1d:78:ce:07:2e:04:90:bf:77:6e:e7:4e:81:f4:b1:ad:
1a:7a:19:aa
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARIvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTE1NjU5WhcNMjUwMjIzMTE1NjU5WjAYMRYw
FAYDVQQDEw02Nzk0ZDE4ZS01NjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmq85FNxMxvD/6Rd85oQv4xByTViJ2TOuTKpHF8utY99TL3dxl6i4p9ei
qKkWqs4yEDseiR85ZXpW4NWj7HCXlLW9ug1lLPUilksinQY7hpWDMXyTDBKpoKKc
qDHjpwTe+q0g5Nddw/C9m25h8JBoANiEvFHcuqUfXCqmMK2MYUCu2rAbXyAiVPGf
cOGZNIK0bVaWz7jcUn/iUjw2tGSr06nOeXp41ag4gYWAiNoxgkD/SXv5U6/SegLL
GJ1nIR4WaHXx8GHWOaonF9wB2SlLyZ5kerb442Xhs+TXVkSF7O7c8bw7wbwGRQ8b
KMndqScg2SHLm4ullLOJP3YURYb/cwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN5y
4dRhKswvkOaPTXwGlXAB6jTJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RDU3QkFGRURCMTMxMUVGOTE3QTEyODA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcihMA0GCSqGSIb3DQEBCwUA
A4IBAQBGi/rPbePKBWWjVeBXZjuekyr4iJb0Sgxv9cxI1RTW+ja9nK8nbk7Rgi+a
RnAraXK5DGYVEusYdV07apYD8JvZnFzKFiccX/YHZJBP6WeArLtfazH/b/sYEh5J
u+b3zW2ZXTi0dOo31pGzor9vybeEgR8IW7AqSZS54wYkrZclevEFf9h0DYgTfeqZ
mCClPC//2Ma93gwwSbrwGdBwUSGqlLQS9YpN2z29UclbiUQvAdUw4/nv6SFn75hY
Le3UknaVUaTfNTiUAxKT/ZJOscp18sKasjK7g9/TXIlgvfFnS+bXH+yMWePSTiJc
zR14zgcuBJC/d27nToH0sa0aehmq
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:57:34 2025 by rpki-client