Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88922CFCD7C511EF85279C5D762E951A.roa
File: 88922CFCD7C511EF85279C5D762E951A.roa (raw, json)
Hash identifier: ng9hA+ozDQETYW3P9PN4+16+yEBuVj1/73NnJmVbkDk=
Subject key identifier: 16:49:B6:05:3C:B5:A3:63:09:01:28:6A:3D:ED:52:23:4E:80:5B:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88922CFCD7C511EF85279C5D762E951A.roa
Signing time: Tue 21 Jan 2025 07:01:27 +0000
ROA not before: Tue 21 Jan 2025 07:01:23 +0000
ROA not after: Fri 07 Feb 2025 07:01:23 +0000
asID: 214095
IP address blocks: 45.192.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68780 (0x10cac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:01:23 2025 GMT
Not After : Feb 7 07:01:23 2025 GMT
Subject: CN=678f4647-aa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:50:e2:9b:aa:7a:3b:97:a1:a1:13:85:15:
c5:68:b3:1c:96:ab:29:08:40:3c:c9:e0:ef:be:77:
13:60:1e:d9:31:59:10:da:11:ee:ae:e8:b4:5a:45:
ea:6a:83:74:2c:37:43:ad:6c:b3:af:0c:ad:37:36:
89:23:63:a5:10:ed:4b:e2:6c:24:1d:8d:07:ba:24:
17:0b:5e:6a:bc:6a:9b:2c:1f:aa:63:d8:1c:44:e9:
82:e9:bc:a3:0f:60:d1:b9:37:c0:6f:84:1b:f2:2d:
dd:bd:e6:11:cc:e6:9a:6a:ec:7d:9a:87:91:5a:30:
e3:04:40:2d:fd:56:4d:e8:c4:9d:2c:6b:83:fb:58:
05:74:89:01:3b:58:a8:d6:36:02:8d:1b:d8:a4:f8:
44:56:6d:96:4b:92:ab:fd:d7:2b:f2:96:e2:9c:4e:
18:2e:4f:e4:e7:a9:bd:3c:14:e6:d4:57:60:0d:be:
12:34:00:ba:c4:dd:af:d5:7b:6b:c6:3c:0f:a3:98:
c1:e1:46:ec:b2:e1:2d:27:b1:fa:f9:69:0a:2f:43:
2d:9e:39:7a:24:36:e5:a5:0a:ad:34:3f:4b:3c:a2:
fb:8c:a1:86:f6:d0:5f:34:ba:91:45:19:07:fa:5a:
f1:d4:be:6c:af:77:bf:89:be:17:3e:72:30:65:c0:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:49:B6:05:3C:B5:A3:63:09:01:28:6A:3D:ED:52:23:4E:80:5B:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88922CFCD7C511EF85279C5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.245.0/24
Signature Algorithm: sha256WithRSAEncryption
06:17:de:1e:31:45:ed:3f:f8:24:9b:52:23:23:00:55:39:2c:
93:68:cf:6d:60:86:3e:1b:df:2c:06:ca:fc:d9:16:55:d8:ce:
a8:24:a8:6c:4f:64:53:81:bd:38:7d:c4:1c:28:4a:2d:ea:3f:
c0:ad:dc:22:a7:00:eb:bf:a3:29:06:79:9e:ef:cb:25:24:1b:
bf:4d:59:25:8f:01:4b:c9:88:1d:a6:f4:06:00:16:0d:3a:97:
84:4b:7e:d7:22:93:16:74:c3:e8:b8:66:5a:dd:81:d0:b9:cd:
6a:4b:f2:7f:34:6d:31:9b:ce:a0:8d:d7:08:f3:1c:95:67:39:
9d:f9:7f:20:b9:0f:28:ef:3c:a6:9c:9d:93:91:9c:44:7a:74:
fe:51:1f:a3:d1:31:bb:b0:ab:b3:4c:2a:61:c0:9d:c7:d4:12:
e6:d6:cd:e1:98:9a:50:d7:e5:bd:31:08:05:3c:2f:1f:9d:43:
c2:e0:0f:ca:4d:12:cd:58:a7:08:00:b1:89:5a:25:cf:16:9a:
01:7b:67:a2:b7:11:dd:4d:cf:59:1f:4f:97:2d:6c:15:e2:d7:
70:7c:97:9c:7f:80:c1:be:35:0f:f7:04:bd:ec:13:38:40:13:
e4:1e:39:2b:6b:dd:08:fd:1e:4a:92:13:53:34:53:6a:a3:77:
19:b0:ab:e6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQysMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMDcwMTIzWhcNMjUwMjA3MDcwMTIzWjAYMRYw
FAYDVQQDEw02NzhmNDY0Ny1hYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzO1Q4puqejuXoaEThRXFaLMclqspCEA8yeDvvncTYB7ZMVkQ2hHurui0
WkXqaoN0LDdDrWyzrwytNzaJI2OlEO1L4mwkHY0HuiQXC15qvGqbLB+qY9gcROmC
6byjD2DRuTfAb4Qb8i3dveYRzOaaaux9moeRWjDjBEAt/VZN6MSdLGuD+1gFdIkB
O1io1jYCjRvYpPhEVm2WS5Kr/dcr8pbinE4YLk/k56m9PBTm1FdgDb4SNAC6xN2v
1XtrxjwPo5jB4UbssuEtJ7H6+WkKL0Mtnjl6JDblpQqtND9LPKL7jKGG9tBfNLqR
RRkH+lrx1L5sr3e/ib4XPnIwZcCLNwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBZJ
tgU8taNjCQEoaj3tUiNOgFurMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84ODkyMkNGQ0Q3QzUxMUVGODUyNzlDNUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcD1MA0GCSqGSIb3DQEBCwUA
A4IBAQAGF94eMUXtP/gkm1IjIwBVOSyTaM9tYIY+G98sBsr82RZV2M6oJKhsT2RT
gb04fcQcKEot6j/ArdwipwDrv6MpBnme78slJBu/TVkljwFLyYgdpvQGABYNOpeE
S37XIpMWdMPouGZa3YHQuc1qS/J/NG0xm86gjdcI8xyVZzmd+X8guQ8o7zymnJ2T
kZxEenT+UR+j0TG7sKuzTCphwJ3H1BLm1s3hmJpQ1+W9MQgFPC8fnUPC4A/KTRLN
WKcIALGJWiXPFpoBe2eitxHdTc9ZH0+XLWwV4tdwfJecf4DBvjUP9wS97BM4QBPk
Hjkra90I/R5KkhNTNFNqo3cZsKvm
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:58:24 2025 by rpki-client