Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/824A74ECD80311EF913E996F762E951A.roa
File: 824A74ECD80311EF913E996F762E951A.roa (raw, json)
Hash identifier: OvLo6Odi1/NLRYKHLGZjEbEZSZnptJySFoYYWEnGs9M=
Subject key identifier: 5E:74:11:C7:AE:F1:DC:5C:89:B0:D8:A4:C7:D9:E6:26:47:7C:81:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/824A74ECD80311EF913E996F762E951A.roa
Signing time: Tue 21 Jan 2025 14:25:05 +0000
ROA not before: Tue 21 Jan 2025 14:25:01 +0000
ROA not after: Sat 01 Feb 2025 14:25:01 +0000
asID: 62240
IP address blocks: 45.192.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69130 (0x10e0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:25:01 2025 GMT
Not After : Feb 1 14:25:01 2025 GMT
Subject: CN=678fae41-be15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:c8:0a:89:e2:f0:f5:2d:1c:82:13:a1:f8:
b4:56:3d:0e:1b:8e:78:87:5c:5d:84:2a:00:e4:1f:
c6:dd:28:d4:6d:45:15:5c:06:12:04:49:c4:d7:02:
93:89:ca:39:24:fa:ba:86:38:4c:b6:fd:26:c3:98:
71:9f:fb:1b:c8:a5:80:d6:7a:24:14:39:59:8c:40:
92:70:20:4c:ca:35:33:f5:f0:b1:0b:85:ae:a6:a0:
3f:88:35:29:99:13:02:2c:e9:25:68:91:08:3c:29:
c3:e6:ba:a5:b3:27:be:52:f8:52:20:da:e0:db:2b:
4e:b3:90:47:8a:eb:51:48:01:33:33:ab:25:ff:0f:
fe:32:01:e5:92:d5:31:1f:d5:ef:67:97:a8:29:f5:
bc:d8:9b:34:a4:d7:ab:56:3f:68:c0:15:d4:99:91:
c5:7e:04:a0:64:e9:29:bb:14:7b:00:ab:62:e9:c0:
03:bc:e9:31:d4:dc:07:82:78:03:83:ef:88:33:32:
58:cc:38:59:2c:8d:ed:40:09:a0:07:ef:8b:af:4b:
95:dd:bb:97:76:ed:4c:c1:f3:18:bb:1b:4e:33:c4:
f1:00:89:e0:28:15:af:c7:a1:a8:e0:f9:b0:94:12:
b1:8e:9e:e4:b5:bd:fb:45:46:2d:4d:2e:e1:50:bc:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:74:11:C7:AE:F1:DC:5C:89:B0:D8:A4:C7:D9:E6:26:47:7C:81:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/824A74ECD80311EF913E996F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.40.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b1:08:37:5b:f3:85:f4:fc:fb:ec:d7:0f:36:07:a5:80:88:
41:73:22:57:2b:fa:cc:28:f9:13:d9:da:b7:23:eb:0e:0d:87:
44:f8:ce:f8:6e:3e:d7:c1:57:c9:a4:9e:2a:4e:d2:aa:19:d2:
a2:aa:d4:77:ce:77:42:be:f2:64:ca:5b:71:7a:59:28:e4:89:
6d:d5:12:4e:da:b1:e6:88:b8:ee:40:ba:9c:db:1f:3e:5c:34:
6b:f4:8b:9d:b5:aa:74:df:54:71:fa:e3:2a:28:13:8d:e5:60:
59:72:e6:55:22:73:7a:8d:9e:e9:76:7a:aa:4d:24:5b:24:83:
1d:b3:23:eb:0d:37:fd:cf:c9:be:4c:b3:fd:2b:b0:62:b2:e9:
46:f7:69:90:5f:5b:c4:f1:56:81:57:a7:6b:82:fd:19:46:2b:
f2:f6:3a:85:d6:85:b7:78:ad:01:c6:54:1c:5c:d6:0d:86:81:
90:70:28:7d:d1:87:62:7a:22:6a:0c:39:4a:cb:f4:7f:1b:e4:
64:c4:38:10:16:47:3c:61:47:b2:ba:85:4d:70:fd:bc:69:f9:
9c:f4:f6:b6:44:7b:65:a1:cf:a6:03:7c:d3:50:ef:18:cf:bd:
82:b1:ce:eb:d7:76:67:c5:72:69:8b:b1:49:f7:dd:f7:1e:34:
81:5f:f8:bb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ4KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTQyNTAxWhcNMjUwMjAxMTQyNTAxWjAYMRYw
FAYDVQQDEw02NzhmYWU0MS1iZTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwSzIConi8PUtHIITofi0Vj0OG454h1xdhCoA5B/G3SjUbUUVXAYSBEnE
1wKTico5JPq6hjhMtv0mw5hxn/sbyKWA1nokFDlZjECScCBMyjUz9fCxC4WupqA/
iDUpmRMCLOklaJEIPCnD5rqlsye+UvhSINrg2ytOs5BHiutRSAEzM6sl/w/+MgHl
ktUxH9XvZ5eoKfW82Js0pNerVj9owBXUmZHFfgSgZOkpuxR7AKti6cADvOkx1NwH
gngDg++IMzJYzDhZLI3tQAmgB++Lr0uV3buXdu1MwfMYuxtOM8TxAIngKBWvx6Go
4PmwlBKxjp7ktb37RUYtTS7hULwlCwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF50
Eceu8dxcibDYpMfZ5iZHfIGOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MjRBNzRFQ0Q4MDMxMUVGOTEzRTk5NkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAoMA0GCSqGSIb3DQEBCwUA
A4IBAQBCsQg3W/OF9Pz77NcPNgelgIhBcyJXK/rMKPkT2dq3I+sODYdE+M74bj7X
wVfJpJ4qTtKqGdKiqtR3zndCvvJkyltxelko5Ilt1RJO2rHmiLjuQLqc2x8+XDRr
9Iudtap031Rx+uMqKBON5WBZcuZVInN6jZ7pdnqqTSRbJIMdsyPrDTf9z8m+TLP9
K7BisulG92mQX1vE8VaBV6drgv0ZRivy9jqF1oW3eK0BxlQcXNYNhoGQcCh90Ydi
eiJqDDlKy/R/G+RkxDgQFkc8YUeyuoVNcP28afmc9Pa2RHtloc+mA3zTUO8Yz72C
sc7r13ZnxXJpi7FJ9933HjSBX/i7
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:40:16 2025 by rpki-client