Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FA2607AD3DE11EF8619D44F762E951A.roa
File: 7FA2607AD3DE11EF8619D44F762E951A.roa (raw, json)
Hash identifier: Gl3x8Yds/3PHMtSlbyWxlQQvnpZLRLyWrBBO8XeMPlE=
Subject key identifier: EF:61:2B:7D:FF:33:7F:CC:B6:6B:5E:42:B5:C6:91:81:40:54:B1:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FA2607AD3DE11EF8619D44F762E951A.roa
Signing time: Thu 16 Jan 2025 07:50:05 +0000
ROA not before: Thu 16 Jan 2025 07:50:01 +0000
ROA not after: Fri 28 Feb 2025 07:50:01 +0000
asID: 398478
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67806 (0x108de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 07:50:01 2025 GMT
Not After : Feb 28 07:50:01 2025 GMT
Subject: CN=6788ba2d-c663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:d8:84:5c:68:48:36:5f:5e:35:20:78:5a:
86:aa:ac:98:09:25:d0:f0:ac:f7:ab:4d:d6:ce:63:
fd:91:95:dd:56:4f:b0:06:a5:93:ec:8b:9b:20:fc:
5c:cf:5a:75:3a:f5:0b:26:a9:44:6b:42:ba:3f:11:
bc:76:3d:ae:22:99:27:d0:6d:fb:3d:da:d3:d5:66:
22:e6:97:bd:be:93:d1:b7:1f:7e:76:a8:b3:50:77:
fe:6a:c8:c2:3b:6c:28:55:c3:38:7e:a6:a2:6f:72:
d5:96:31:90:4e:63:69:c1:f7:45:73:b2:1d:23:3d:
dd:30:9f:bc:45:46:b1:85:f3:24:70:15:32:e4:4b:
05:df:ee:ae:0f:47:bd:14:44:0c:6f:ee:68:4a:55:
cb:8d:25:59:fa:54:11:08:19:b0:74:45:0b:c5:f5:
21:5f:36:58:6c:8a:d3:60:1b:c9:97:41:d9:a7:1b:
c8:87:4c:e0:ad:43:21:68:56:df:63:27:3a:6f:b1:
68:de:ff:1a:43:50:fd:00:7e:63:dd:8b:b1:34:62:
d4:8a:d2:2f:65:e8:84:70:14:76:c6:75:3b:56:a0:
10:c7:ed:30:e9:bb:f7:ec:3d:a1:20:df:c2:05:25:
fd:26:97:a6:91:ad:fe:02:be:29:03:39:36:8d:91:
0e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:61:2B:7D:FF:33:7F:CC:B6:6B:5E:42:B5:C6:91:81:40:54:B1:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FA2607AD3DE11EF8619D44F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:79:84:a4:69:3b:e6:f1:c0:35:bd:2a:8f:1a:a4:bc:7c:4a:
fd:7b:9c:c0:b1:3f:48:29:44:b4:82:74:06:2c:6a:4d:19:15:
38:08:d6:10:08:15:1a:7a:bf:3c:bf:9a:b9:6b:92:0d:03:04:
74:d7:af:77:5c:0d:06:cb:a5:98:7f:d3:92:fc:1a:cd:28:c7:
82:69:1b:28:7c:3f:fb:67:e9:d9:94:01:87:f1:e7:16:33:ec:
bb:ee:14:83:10:e1:95:7b:aa:bd:ee:8b:13:7a:14:0c:3c:e3:
b6:e9:35:fa:07:b6:54:e8:d9:76:34:21:db:69:03:41:a4:7f:
7f:bd:95:2b:e1:bb:a4:b6:ba:3a:7d:b7:6b:5e:61:28:78:77:
c1:85:8d:c2:5e:c7:63:84:fa:b9:1f:e4:e0:f2:74:22:34:7b:
8d:3a:b7:09:6e:6b:b0:92:ad:10:06:32:ec:c4:22:39:6f:4f:
ff:82:1e:1f:37:86:de:64:a3:26:6b:24:65:26:01:4f:3e:52:
e0:68:1b:dc:71:1c:3f:48:ee:70:60:9a:c6:84:a1:bb:5d:f6:
f1:f5:41:53:7b:03:ea:b5:d2:54:2c:95:d1:c6:6d:85:76:9a:
6e:b3:1c:dd:02:cd:ea:a3:b0:7d:20:c7:e7:bf:47:51:80:19:
c4:cf:1e:99
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQjeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE2MDc1MDAxWhcNMjUwMjI4MDc1MDAxWjAYMRYw
FAYDVQQDEw02Nzg4YmEyZC1jNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxCPYhFxoSDZfXjUgeFqGqqyYCSXQ8Kz3q03WzmP9kZXdVk+wBqWT7Iub
IPxcz1p1OvULJqlEa0K6PxG8dj2uIpkn0G37PdrT1WYi5pe9vpPRtx9+dqizUHf+
asjCO2woVcM4fqaib3LVljGQTmNpwfdFc7IdIz3dMJ+8RUaxhfMkcBUy5EsF3+6u
D0e9FEQMb+5oSlXLjSVZ+lQRCBmwdEULxfUhXzZYbIrTYBvJl0HZpxvIh0zgrUMh
aFbfYyc6b7Fo3v8aQ1D9AH5j3YuxNGLUitIvZeiEcBR2xnU7VqAQx+0w6bv37D2h
IN/CBSX9Jpemka3+Ar4pAzk2jZEOyQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFO9h
K33/M3/MtmteQrXGkYFAVLGBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RkEyNjA3QUQzREUxMUVGODYxOUQ0NEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcDAMA0GCSqGSIb3DQEBCwUA
A4IBAQBPeYSkaTvm8cA1vSqPGqS8fEr9e5zAsT9IKUS0gnQGLGpNGRU4CNYQCBUa
er88v5q5a5INAwR01693XA0Gy6WYf9OS/BrNKMeCaRsofD/7Z+nZlAGH8ecWM+y7
7hSDEOGVe6q97osTehQMPOO26TX6B7ZU6Nl2NCHbaQNBpH9/vZUr4buktro6fbdr
XmEoeHfBhY3CXsdjhPq5H+Tg8nQiNHuNOrcJbmuwkq0QBjLsxCI5b0//gh4fN4be
ZKMmayRlJgFPPlLgaBvccRw/SO5wYJrGhKG7Xfbx9UFTewPqtdJULJXRxm2Fdppu
sxzdAs3qo7B9IMfnv0dRgBnEzx6Z
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:43 2025 by rpki-client