Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D887C70DC1C11EF9E62CB74762E951A.roa
File: 7D887C70DC1C11EF9E62CB74762E951A.roa (raw, json)
Hash identifier: OjVAvaAM1Kh95LoJnz2jGKmWyjmfpXTxDzbRPmZRvxg=
Subject key identifier: C8:0D:2D:6F:7B:88:29:7A:F4:B7:75:40:A5:4E:C9:D8:E7:21:79:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01145E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D887C70DC1C11EF9E62CB74762E951A.roa
Signing time: Sun 26 Jan 2025 19:34:00 +0000
ROA not before: Sun 26 Jan 2025 19:33:56 +0000
ROA not after: Sat 08 Feb 2025 19:33:56 +0000
asID: 39600
IP address blocks: 45.197.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70750 (0x1145e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 19:33:56 2025 GMT
Not After : Feb 8 19:33:56 2025 GMT
Subject: CN=67968e27-b58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:26:15:c0:d7:ab:0e:52:c5:87:d1:da:7b:
50:8e:6b:41:85:4a:d4:d2:0c:0f:ce:bd:5a:6f:08:
eb:76:97:6a:fb:61:00:30:61:eb:ea:9f:90:b4:7d:
59:0d:3a:32:58:ef:2d:98:15:a3:95:04:3c:d4:17:
a3:aa:75:7c:5e:9d:14:b7:cc:c7:e8:45:cd:a8:bd:
c2:02:62:db:e4:f6:77:a0:25:89:00:ee:77:9b:6a:
ed:44:29:5f:76:c6:b6:61:1b:7b:09:d0:ed:b0:35:
ef:c1:97:f1:5c:79:49:e8:a4:ac:d9:62:c8:26:c4:
6f:be:51:82:9b:c5:df:ff:f5:48:a7:ad:27:d0:0a:
56:f5:14:24:65:fb:d9:11:a7:79:c5:a2:60:0e:50:
2c:6a:bb:85:ee:6d:53:6b:e5:37:3c:b8:35:b8:21:
af:5d:a3:7c:29:5c:86:d1:65:c7:0b:b0:6d:88:6e:
2d:f0:5e:f4:47:af:95:b7:86:1f:0a:9f:79:2e:c0:
86:d6:d1:f4:db:0d:9c:68:bc:dd:af:19:ca:34:aa:
47:df:01:7c:5e:97:03:06:3c:68:7a:d2:f5:5a:87:
d0:af:d6:29:98:ad:e4:f7:39:01:78:c7:82:f2:2d:
77:8c:20:3b:e4:1f:3b:c8:6e:8c:7d:45:39:38:b7:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0D:2D:6F:7B:88:29:7A:F4:B7:75:40:A5:4E:C9:D8:E7:21:79:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D887C70DC1C11EF9E62CB74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.200.0/22
Signature Algorithm: sha256WithRSAEncryption
46:38:d9:99:42:c8:8b:27:bd:2a:f5:aa:56:c1:ef:5b:5d:fb:
43:f2:df:b1:42:08:aa:d1:06:60:6b:cd:4e:68:fe:b0:dc:80:
76:fd:38:0f:b6:61:3d:06:1e:d1:04:cf:6d:81:41:16:35:d3:
08:f0:1e:2f:c3:fd:62:b0:bd:19:92:09:a5:bf:62:ef:b5:ec:
e9:61:b2:51:7d:94:9c:50:26:9b:47:ef:10:05:a6:bc:92:f8:
36:cb:bb:ec:89:25:61:36:a5:47:e5:4b:5a:81:1b:fd:16:e1:
f5:f8:6c:38:22:a9:08:26:b2:22:fd:0f:cf:29:0d:1e:ed:cd:
c4:42:15:1a:e5:92:d0:21:44:12:3a:97:cb:d1:17:0e:31:5b:
d0:2e:47:be:a2:97:03:a9:db:0d:df:61:f7:cc:4f:85:19:89:
32:25:0e:b5:79:e3:94:11:59:ff:98:20:4a:ed:0c:79:74:20:
a1:dd:73:01:25:29:cb:2f:0d:d6:1a:fa:7e:c1:51:c9:73:d3:
77:a8:6f:c1:82:f7:c5:64:36:21:85:fd:55:06:c6:92:b2:99:
ba:3f:02:be:24:2e:ab:e2:85:e4:12:bd:4a:64:b1:16:65:6e:
ec:d5:a0:58:01:e6:05:7e:e8:b1:38:65:1d:5a:35:21:c9:67:
06:df:79:02
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARReMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI2MTkzMzU2WhcNMjUwMjA4MTkzMzU2WjAYMRYw
FAYDVQQDEw02Nzk2OGUyNy1iNThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuM8mFcDXqw5SxYfR2ntQjmtBhUrU0gwPzr1abwjrdpdq+2EAMGHr6p+Q
tH1ZDToyWO8tmBWjlQQ81BejqnV8Xp0Ut8zH6EXNqL3CAmLb5PZ3oCWJAO53m2rt
RClfdsa2YRt7CdDtsDXvwZfxXHlJ6KSs2WLIJsRvvlGCm8Xf//VIp60n0ApW9RQk
ZfvZEad5xaJgDlAsaruF7m1Ta+U3PLg1uCGvXaN8KVyG0WXHC7BtiG4t8F70R6+V
t4YfCp95LsCG1tH02w2caLzdrxnKNKpH3wF8XpcDBjxoetL1WofQr9YpmK3k9zkB
eMeC8i13jCA75B87yG6MfUU5OLejGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMgN
LW97iCl69Ld1QKVOydjnIXm8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RDg4N0M3MERDMUMxMUVGOUU2MkNCNzQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcXIMA0GCSqGSIb3DQEBCwUA
A4IBAQBGONmZQsiLJ70q9apWwe9bXftD8t+xQgiq0QZga81OaP6w3IB2/TgPtmE9
Bh7RBM9tgUEWNdMI8B4vw/1isL0Zkgmlv2LvtezpYbJRfZScUCabR+8QBaa8kvg2
y7vsiSVhNqVH5UtagRv9FuH1+Gw4IqkIJrIi/Q/PKQ0e7c3EQhUa5ZLQIUQSOpfL
0RcOMVvQLke+opcDqdsN32H3zE+FGYkyJQ61eeOUEVn/mCBK7Qx5dCCh3XMBJSnL
Lw3WGvp+wVHJc9N3qG/BgvfFZDYhhf1VBsaSspm6PwK+JC6r4oXkEr1KZLEWZW7s
1aBYAeYFfuixOGUdWjUhyWcG33kC
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:48:25 2025 by rpki-client