Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B29F94CD89F11EF854BC772762E951A.roa
File: 8B29F94CD89F11EF854BC772762E951A.roa (raw, json)
Hash identifier: E7eIXJ3j0WbeQhxl+t7Wyh1vyOUdTrL2lAHOLkO0JmQ=
Subject key identifier: 60:2C:6F:A9:62:01:20:03:E0:2C:B5:2E:0B:5F:57:D1:16:52:C6:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B29F94CD89F11EF854BC772762E951A.roa
Signing time: Wed 22 Jan 2025 09:02:02 +0000
ROA not before: Wed 22 Jan 2025 09:01:58 +0000
ROA not after: Tue 18 Feb 2025 09:01:58 +0000
asID: 61112
IP address blocks: 45.196.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69219 (0x10e63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 22 09:01:58 2025 GMT
Not After : Feb 18 09:01:58 2025 GMT
Subject: CN=6790b40a-c6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:96:2e:fd:f5:01:83:5a:4c:13:a9:ea:b4:
26:31:74:7d:68:fe:c8:0e:a3:18:56:f0:03:63:b3:
f3:f5:df:1c:23:00:f3:31:5e:94:fb:6c:52:4d:97:
b5:03:b8:d3:86:28:83:b6:e5:35:3e:d1:b3:25:ad:
d4:7d:af:d5:c7:2a:e5:75:2c:6e:76:44:fe:5d:6b:
70:9d:5f:08:bd:e2:3a:08:9d:6b:c4:35:bd:3b:7c:
cd:02:63:94:26:63:19:6e:1c:78:cb:83:67:de:c8:
af:f3:dd:5b:e5:d8:9c:3d:4d:50:32:f4:a1:0f:91:
a9:03:b1:68:85:4c:0c:c8:5f:fa:f9:2d:00:f7:df:
dc:19:2f:8b:84:03:f4:f8:aa:2b:01:89:e0:ba:d9:
a5:01:f1:40:c3:75:7b:5a:67:a6:c5:33:df:b6:21:
5f:8b:59:09:be:24:14:a2:8a:21:77:e6:4b:05:9b:
1a:cf:6c:0b:11:1d:d1:fc:2a:fd:61:6e:a7:47:e2:
c3:35:22:e1:2f:99:e8:df:09:3e:85:fd:09:9a:dc:
e7:10:47:14:26:9b:9c:2c:2b:4d:cf:22:d0:7c:5d:
db:e6:f5:5c:03:5c:2d:80:a1:c6:d9:57:21:48:ad:
7c:05:72:a1:2f:b0:ce:07:02:f5:c4:e9:2f:e0:d4:
8b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:6F:A9:62:01:20:03:E0:2C:B5:2E:0B:5F:57:D1:16:52:C6:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B29F94CD89F11EF854BC772762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.234.0/23
Signature Algorithm: sha256WithRSAEncryption
87:6e:68:d1:a7:c9:d8:19:20:32:bf:02:39:6a:b7:94:a5:8f:
91:90:99:69:b9:d7:07:df:91:c0:d5:7a:de:07:21:2d:bf:80:
c7:87:40:90:a9:22:bb:23:14:22:52:3e:85:64:b1:9b:06:f8:
69:de:b5:d6:43:91:fc:35:4a:6e:a3:62:5b:d6:2e:dc:03:19:
6c:29:72:d2:43:a2:c8:fb:c2:31:db:31:9c:23:f7:e7:e4:14:
12:53:d5:3f:8d:df:ee:5f:c0:c1:c4:de:4e:b5:ba:06:7d:88:
fd:e4:bb:8d:12:d7:a2:8c:56:80:94:a5:6e:a1:e8:f2:22:55:
bc:4b:3a:7d:28:3d:eb:ae:32:62:f5:1c:4b:51:ad:cc:78:2e:
70:b7:26:4f:84:5f:97:0a:ab:2f:f2:0b:a9:56:e1:7b:b0:44:
cb:dd:ca:0b:74:60:a9:55:d7:0c:f3:ba:d7:bf:fa:69:cf:0c:
da:78:27:b0:be:88:8e:05:e1:da:5c:f1:f2:b2:d5:6d:ee:ec:
99:2d:90:c8:10:ba:45:9c:fc:61:2b:cc:a8:a4:55:45:d6:74:
06:31:1d:0d:a2:0d:ce:86:33:e5:37:3d:32:72:24:65:4d:78:
88:b9:0b:df:36:d4:23:f5:de:14:64:d9:d7:a3:40:00:37:81:
ee:05:81:75
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ5jMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIyMDkwMTU4WhcNMjUwMjE4MDkwMTU4WjAYMRYw
FAYDVQQDEw02NzkwYjQwYS1jNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuXWWLv31AYNaTBOp6rQmMXR9aP7IDqMYVvADY7Pz9d8cIwDzMV6U+2xS
TZe1A7jThiiDtuU1PtGzJa3Ufa/VxyrldSxudkT+XWtwnV8IveI6CJ1rxDW9O3zN
AmOUJmMZbhx4y4Nn3siv891b5dicPU1QMvShD5GpA7FohUwMyF/6+S0A99/cGS+L
hAP0+KorAYngutmlAfFAw3V7WmemxTPftiFfi1kJviQUooohd+ZLBZsaz2wLER3R
/Cr9YW6nR+LDNSLhL5no3wk+hf0JmtznEEcUJpucLCtNzyLQfF3b5vVcA1wtgKHG
2VchSK18BXKhL7DOBwL1xOkv4NSLUwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGAs
b6liASAD4Cy1LgtfV9EWUsYgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QjI5Rjk0Q0Q4OUYxMUVGODU0QkM3NzI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcTqMA0GCSqGSIb3DQEBCwUA
A4IBAQCHbmjRp8nYGSAyvwI5areUpY+RkJlpudcH35HA1XreByEtv4DHh0CQqSK7
IxQiUj6FZLGbBvhp3rXWQ5H8NUpuo2Jb1i7cAxlsKXLSQ6LI+8Ix2zGcI/fn5BQS
U9U/jd/uX8DBxN5OtboGfYj95LuNEteijFaAlKVuoejyIlW8Szp9KD3rrjJi9RxL
Ua3MeC5wtyZPhF+XCqsv8gupVuF7sETL3coLdGCpVdcM87rXv/ppzwzaeCewvoiO
BeHaXPHystVt7uyZLZDIELpFnPxhK8yopFVF1nQGMR0Nog3OhjPlNz0yciRlTXiI
uQvfNtQj9d4UZNnXo0AAN4HuBYF1
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:14:52 2025 by rpki-client