Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89595548DB0811EF89E997B6762E951A.roa
File: 89595548DB0811EF89E997B6762E951A.roa (raw, json)
Hash identifier: gMkI42qhRZktIEGj9cUy2Dy1TQOZ9m/PxmT5qR4q88E=
Subject key identifier: 75:C0:0E:B4:10:C2:4B:F7:9C:C1:B3:97:0E:02:20:9A:43:AC:15:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89595548DB0811EF89E997B6762E951A.roa
Signing time: Sat 25 Jan 2025 10:38:38 +0000
ROA not before: Sat 25 Jan 2025 10:38:35 +0000
ROA not after: Sun 23 Feb 2025 10:38:35 +0000
asID: 62240
IP address blocks: 45.192.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70129 (0x111f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 10:38:35 2025 GMT
Not After : Feb 23 10:38:35 2025 GMT
Subject: CN=6794bf2e-4ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:2e:20:15:d1:bd:7e:e3:48:80:90:e7:37:
99:f8:6d:c5:21:c7:99:e3:43:03:51:70:5f:a0:8b:
d4:de:b3:00:7b:33:1a:b1:78:69:ce:5f:ac:65:e5:
ad:ab:7f:26:d5:76:93:75:d7:ca:70:26:9f:27:a7:
75:bd:37:8d:bd:eb:27:f6:04:2d:5c:6f:0c:2a:90:
30:34:99:35:6f:f2:b5:1f:ad:0e:4c:84:0a:82:80:
4b:81:f3:41:f0:0d:ac:f6:29:6b:61:09:74:b7:b6:
47:ed:e2:1e:e2:7c:71:06:15:49:59:f1:b5:ed:44:
0b:1d:aa:06:4c:65:81:cf:4e:a3:55:c1:ac:46:00:
ab:df:66:c1:31:bd:95:66:27:10:d3:9e:85:f0:fb:
a5:2d:41:d1:35:e7:63:17:fd:8d:8f:36:2e:81:d1:
82:51:1c:a3:8a:8a:65:36:f9:58:d2:a3:ff:04:e1:
62:13:e5:fc:a5:3f:07:37:be:6c:59:36:57:48:c5:
c3:1a:eb:db:34:f4:df:88:76:db:73:3c:28:39:1d:
04:ae:31:5b:c0:09:7c:a5:18:32:ab:27:c9:5b:f9:
51:60:1f:71:4a:4e:e7:ce:54:45:61:55:e5:d4:95:
0d:0c:61:a0:83:69:cf:43:99:9d:19:78:07:cc:2a:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C0:0E:B4:10:C2:4B:F7:9C:C1:B3:97:0E:02:20:9A:43:AC:15:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89595548DB0811EF89E997B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.45.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0b:7e:e4:15:e7:d4:1a:c7:ad:3f:f8:66:92:9c:ba:da:11:
34:41:4d:da:5c:36:c1:1b:db:aa:fb:9e:d5:41:28:ec:29:55:
68:2a:71:3f:23:b0:83:70:0e:72:ed:b6:07:df:87:06:d5:48:
f8:71:81:91:5b:bf:40:a7:a1:b3:5a:49:b4:e9:3e:87:7f:40:
df:57:a7:a4:a9:5b:5a:2e:30:6a:bd:bf:db:59:32:e4:43:dd:
5e:8e:62:bf:6b:a0:b5:11:d4:58:e0:76:1d:08:d5:84:b6:c6:
93:30:10:67:c1:62:ea:85:11:d3:2b:0b:48:3b:b6:6f:09:34:
30:33:56:1c:b7:c1:7e:54:c1:03:44:90:71:26:bf:29:97:a5:
48:a8:ef:18:19:a1:e3:78:19:e1:ff:93:ca:10:d9:ca:9b:74:
c2:38:0b:b9:56:a4:71:99:9c:5d:eb:d1:b5:b3:61:a1:f4:c0:
a8:d1:d3:73:30:a5:89:86:56:9b:90:a1:71:78:57:3e:8c:d8:
85:42:a8:3e:6a:6a:f6:c6:9c:94:a8:22:cb:30:f6:da:12:1e:
6b:3b:11:c4:a4:2d:25:21:53:4e:b0:75:63:5e:2d:4b:51:37:
a0:3a:70:9a:4c:74:39:f5:d8:d9:ba:73:83:15:81:d3:87:dd:
7a:ba:63:e3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARHxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTAzODM1WhcNMjUwMjIzMTAzODM1WjAYMRYw
FAYDVQQDEw02Nzk0YmYyZS00ZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxN4uIBXRvX7jSICQ5zeZ+G3FIceZ40MDUXBfoIvU3rMAezMasXhpzl+s
ZeWtq38m1XaTddfKcCafJ6d1vTeNvesn9gQtXG8MKpAwNJk1b/K1H60OTIQKgoBL
gfNB8A2s9ilrYQl0t7ZH7eIe4nxxBhVJWfG17UQLHaoGTGWBz06jVcGsRgCr32bB
Mb2VZicQ056F8PulLUHRNedjF/2NjzYugdGCURyjioplNvlY0qP/BOFiE+X8pT8H
N75sWTZXSMXDGuvbNPTfiHbbczwoOR0ErjFbwAl8pRgyqyfJW/lRYB9xSk7nzlRF
YVXl1JUNDGGgg2nPQ5mdGXgHzCpr8QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHXA
DrQQwkv3nMGzlw4CIJpDrBWoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84OTU5NTU0OERCMDgxMUVGODlFOTk3QjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAtMA0GCSqGSIb3DQEBCwUA
A4IBAQCQC37kFefUGsetP/hmkpy62hE0QU3aXDbBG9uq+57VQSjsKVVoKnE/I7CD
cA5y7bYH34cG1Uj4cYGRW79Ap6GzWkm06T6Hf0DfV6ekqVtaLjBqvb/bWTLkQ91e
jmK/a6C1EdRY4HYdCNWEtsaTMBBnwWLqhRHTKwtIO7ZvCTQwM1Yct8F+VMEDRJBx
Jr8pl6VIqO8YGaHjeBnh/5PKENnKm3TCOAu5VqRxmZxd69G1s2Gh9MCo0dNzMKWJ
hlabkKFxeFc+jNiFQqg+amr2xpyUqCLLMPbaEh5rOxHEpC0lIVNOsHVjXi1LUTeg
OnCaTHQ59djZunODFYHTh916umPj
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:35 2025 by rpki-client