Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F88835EDA7C11EFB92F4A7E762E951A.roa
File: 7F88835EDA7C11EFB92F4A7E762E951A.roa (raw, json)
Hash identifier: 9AcXHF1tjsi3LkG/Na9PrgyNdluppZ8gAqhq1RQBS58=
Subject key identifier: 75:4B:02:B9:8D:F0:FE:F3:7C:48:34:B1:5A:F4:C3:FE:99:00:8C:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F88835EDA7C11EFB92F4A7E762E951A.roa
Signing time: Fri 24 Jan 2025 17:56:12 +0000
ROA not before: Fri 24 Jan 2025 17:56:09 +0000
ROA not after: Tue 25 Feb 2025 17:56:09 +0000
asID: 202656
IP address blocks: 45.192.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69618 (0x10ff2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 17:56:09 2025 GMT
Not After : Feb 25 17:56:09 2025 GMT
Subject: CN=6793d43c-d548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:31:e6:46:0f:9f:d0:99:fd:06:21:71:ef:
e7:e1:7e:2a:c2:f1:91:7e:79:60:47:7b:84:5b:2b:
32:45:f3:62:79:da:10:71:db:77:99:fb:f3:6d:d6:
45:7d:fb:fc:6b:d0:10:d6:24:96:83:59:0a:4a:0e:
6b:03:58:58:8c:7b:71:31:b2:8a:3a:6a:b5:76:56:
6b:8a:2c:80:a0:58:1f:d3:05:1d:b7:53:fd:cd:8b:
00:9f:e5:1e:8d:de:62:74:f2:bd:25:72:e8:e6:48:
6c:27:89:ec:38:c9:da:ed:e9:92:78:05:25:68:7b:
a7:73:7e:06:26:cf:0d:2c:7e:6c:ba:34:c9:6d:80:
74:ea:c5:0e:53:e8:fd:fe:72:3a:17:f0:45:75:18:
cf:02:bb:8d:79:91:4d:ec:af:0d:14:9e:e3:02:d8:
c0:d2:0b:b1:df:2e:7e:a2:86:ae:cd:e7:1f:1d:5b:
ba:ec:c8:65:24:02:0f:0b:95:b0:34:10:9f:f3:34:
f3:10:93:b3:03:25:cd:a6:09:4c:30:5d:3a:e7:25:
7c:03:b0:63:f0:c0:58:ac:63:f2:97:8f:52:a7:4a:
85:48:a0:e3:58:cd:a7:20:a3:78:3f:eb:f4:16:66:
e3:1c:6e:d6:21:b7:3f:92:12:93:7d:cd:38:b4:00:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4B:02:B9:8D:F0:FE:F3:7C:48:34:B1:5A:F4:C3:FE:99:00:8C:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F88835EDA7C11EFB92F4A7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.48.0/24
Signature Algorithm: sha256WithRSAEncryption
00:28:92:e9:16:07:81:28:0f:f2:e0:0c:f6:6d:2e:fd:3c:08:
9b:65:6c:47:b5:d5:91:48:08:93:6e:fe:0d:0e:68:c5:d1:91:
a7:d2:b0:bd:fc:de:e0:a0:0b:99:47:2f:fc:50:ff:45:25:fb:
da:f7:22:0e:f8:e7:a6:16:15:00:bb:a1:64:49:58:69:95:2e:
03:58:8e:33:fd:39:38:72:84:c7:d5:fa:34:46:91:4f:8d:e9:
ec:d9:32:2c:86:5e:d6:bd:ac:a9:7d:8a:87:c9:1e:5e:7d:75:
01:bf:d4:63:80:77:b2:fc:7a:12:ed:cd:08:33:70:76:5f:fb:
68:48:f8:2c:24:e3:91:b0:8b:98:69:c0:e3:02:41:46:db:02:
d9:23:d9:b5:a4:51:75:cc:43:34:77:a0:40:ee:4e:ab:d0:c6:
28:7a:45:57:34:d6:aa:bc:91:9b:58:10:97:05:2d:77:37:95:
61:7f:4b:d5:b0:0f:da:68:e7:af:47:da:a1:9d:64:49:61:bb:
e3:b9:ca:91:45:6a:4e:a5:9f:e9:2a:38:b2:ec:d2:4a:dc:e3:
64:eb:60:32:68:57:d6:7e:f5:df:a8:68:ac:70:db:c1:9d:6a:
50:15:35:79:e8:68:40:69:6d:d4:2b:9b:e5:49:0d:1c:f6:6d:
41:0c:a5:2e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ/yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MTc1NjA5WhcNMjUwMjI1MTc1NjA5WjAYMRYw
FAYDVQQDEw02NzkzZDQzYy1kNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqM4x5kYPn9CZ/QYhce/n4X4qwvGRfnlgR3uEWysyRfNiedoQcdt3mfvz
bdZFffv8a9AQ1iSWg1kKSg5rA1hYjHtxMbKKOmq1dlZriiyAoFgf0wUdt1P9zYsA
n+Uejd5idPK9JXLo5khsJ4nsOMna7emSeAUlaHunc34GJs8NLH5sujTJbYB06sUO
U+j9/nI6F/BFdRjPAruNeZFN7K8NFJ7jAtjA0gux3y5+ooauzecfHVu67MhlJAIP
C5WwNBCf8zTzEJOzAyXNpglMMF065yV8A7Bj8MBYrGPyl49Sp0qFSKDjWM2nIKN4
P+v0FmbjHG7WIbc/khKTfc04tABNlQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHVL
ArmN8P7zfEg0sVr0w/6ZAIzgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83Rjg4ODM1RURBN0MxMUVGQjkyRjRBN0U3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAwMA0GCSqGSIb3DQEBCwUA
A4IBAQAAKJLpFgeBKA/y4Az2bS79PAibZWxHtdWRSAiTbv4NDmjF0ZGn0rC9/N7g
oAuZRy/8UP9FJfva9yIO+OemFhUAu6FkSVhplS4DWI4z/Tk4coTH1fo0RpFPjens
2TIshl7WvaypfYqHyR5efXUBv9RjgHey/HoS7c0IM3B2X/toSPgsJOORsIuYacDj
AkFG2wLZI9m1pFF1zEM0d6BA7k6r0MYoekVXNNaqvJGbWBCXBS13N5Vhf0vVsA/a
aOevR9qhnWRJYbvjucqRRWpOpZ/pKjiy7NJK3ONk62AyaFfWfvXfqGiscNvBnWpQ
FTV56GhAaW3UK5vlSQ0c9m1BDKUu
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:04:57 2025 by rpki-client