Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89A2057CD72011EFAC92E5A0762E951A.roa
File: 89A2057CD72011EFAC92E5A0762E951A.roa (raw, json)
Hash identifier: 8mAt3feLD4sFO9i3A2ePDXOWq2QG8TH6dlRsYfD7x98=
Subject key identifier: DA:32:DD:3E:D0:92:D8:C6:F2:40:FF:94:47:D7:C0:A7:E0:22:4B:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C39
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89A2057CD72011EFAC92E5A0762E951A.roa
Signing time: Mon 20 Jan 2025 11:20:22 +0000
ROA not before: Mon 20 Jan 2025 11:20:18 +0000
ROA not after: Sat 01 Feb 2025 11:20:18 +0000
asID: 44559
IP address blocks: 45.199.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68665 (0x10c39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 11:20:18 2025 GMT
Not After : Feb 1 11:20:18 2025 GMT
Subject: CN=678e3176-926d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:96:87:09:1f:8d:6e:64:03:ba:e7:67:30:
77:8d:ce:e1:70:c9:64:77:0c:c6:73:77:18:05:59:
8b:63:63:0e:8f:5f:04:29:42:e2:53:d2:fa:79:3e:
93:1e:2c:e8:93:78:e1:b0:c4:50:fd:6b:11:09:6f:
e0:a6:86:bd:cc:fd:9b:6b:43:22:90:e9:ca:8d:50:
7a:2e:ba:72:0b:76:1a:6c:c1:8d:ca:9b:5c:6c:a7:
3d:69:d1:69:4e:d4:71:a9:4a:a1:b3:fe:de:db:01:
40:58:cf:81:b8:b7:7f:db:d0:05:76:ef:e2:21:66:
63:20:ac:07:25:8a:65:32:5d:33:76:1c:09:c4:5b:
96:f6:32:6a:96:c7:d4:77:92:90:27:d7:1d:af:ce:
00:aa:29:ac:db:ee:32:b5:4e:74:71:bb:08:49:82:
da:89:67:e9:0d:d0:ab:58:f9:73:65:1a:6e:6f:77:
11:a5:1e:ad:17:f4:d3:59:9c:6a:97:6f:4e:36:0f:
02:ab:b6:0b:fb:70:10:76:2d:23:d3:96:15:fa:44:
4b:f7:03:18:3a:31:db:53:79:8b:dd:b3:8a:15:41:
b6:77:ae:18:fb:2c:02:fa:d3:ad:0f:1b:26:9a:38:
d1:a8:e4:93:64:b8:d8:70:ce:f2:53:e4:d3:60:cc:
d3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:DD:3E:D0:92:D8:C6:F2:40:FF:94:47:D7:C0:A7:E0:22:4B:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89A2057CD72011EFAC92E5A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.220.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a6:9e:16:66:6f:55:61:ec:6b:8d:5c:46:23:bb:b5:cf:c9:
07:20:bf:ec:85:e8:8c:81:39:c7:15:e5:7b:3f:12:77:4c:3e:
11:57:71:9e:d6:c8:58:ea:ff:4b:8c:d2:a1:41:f1:32:4d:2b:
5e:07:9a:68:85:29:86:fb:d6:54:18:a4:2d:07:ee:fb:a3:97:
de:de:25:94:30:e7:00:0b:2a:26:fc:ab:93:e7:1d:be:34:b5:
ff:48:f4:66:9a:22:c2:2f:47:a8:0a:0b:e3:f6:da:d8:19:c1:
ec:41:86:3b:30:56:5f:d8:b5:38:fe:6d:f1:8b:8e:58:d0:ed:
eb:34:8e:d8:67:cc:12:8b:c8:98:b9:0a:70:17:97:c1:1f:74:
df:a1:d3:cd:15:73:50:29:ba:9a:96:20:74:d7:47:43:db:93:
27:27:38:a1:cd:1e:9d:7e:77:51:ac:37:9e:2a:54:6b:49:14:
45:ce:38:8d:83:56:f1:ec:a4:f2:55:2e:70:b1:44:ce:73:f9:
41:4b:51:10:1e:23:d2:b4:8a:7d:69:ec:a4:b8:ed:b1:ce:69:
4f:be:b7:14:92:9a:22:88:96:7f:fd:b0:70:11:99:ef:80:eb:
cf:71:44:49:2f:6f:a7:29:5a:6c:f7:c6:3c:06:44:9f:3c:86:
c1:88:37:7f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQw5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIwMTEyMDE4WhcNMjUwMjAxMTEyMDE4WjAYMRYw
FAYDVQQDEw02NzhlMzE3Ni05MjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Q6WhwkfjW5kA7rnZzB3jc7hcMlkdwzGc3cYBVmLY2MOj18EKULiU9L6
eT6THizok3jhsMRQ/WsRCW/gpoa9zP2ba0MikOnKjVB6LrpyC3YabMGNyptcbKc9
adFpTtRxqUqhs/7e2wFAWM+BuLd/29AFdu/iIWZjIKwHJYplMl0zdhwJxFuW9jJq
lsfUd5KQJ9cdr84Aqims2+4ytU50cbsISYLaiWfpDdCrWPlzZRpub3cRpR6tF/TT
WZxql29ONg8Cq7YL+3AQdi0j05YV+kRL9wMYOjHbU3mL3bOKFUG2d64Y+ywC+tOt
DxsmmjjRqOSTZLjYcM7yU+TTYMzTGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNoy
3T7QktjG8kD/lEfXwKfgIkuVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84OUEyMDU3Q0Q3MjAxMUVGQUM5MkU1QTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfcMA0GCSqGSIb3DQEBCwUA
A4IBAQAYpp4WZm9VYexrjVxGI7u1z8kHIL/sheiMgTnHFeV7PxJ3TD4RV3Ge1shY
6v9LjNKhQfEyTSteB5pohSmG+9ZUGKQtB+77o5fe3iWUMOcACyom/KuT5x2+NLX/
SPRmmiLCL0eoCgvj9trYGcHsQYY7MFZf2LU4/m3xi45Y0O3rNI7YZ8wSi8iYuQpw
F5fBH3TfodPNFXNQKbqaliB010dD25MnJzihzR6dfndRrDeeKlRrSRRFzjiNg1bx
7KTyVS5wsUTOc/lBS1EQHiPStIp9aeykuO2xzmlPvrcUkpoiiJZ//bBwEZnvgOvP
cURJL2+nKVps98Y8BkSfPIbBiDd/
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:05:40 2025 by rpki-client