Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BA6AAA6D7FE11EFBF5D344F762E951A.roa
File: 8BA6AAA6D7FE11EFBF5D344F762E951A.roa (raw, json)
Hash identifier: rKEHSREsp7I/E9pJpaDokTq8FVn5IQF542QmYw3rgr0=
Subject key identifier: 23:B5:11:F3:72:B4:9D:C6:E4:51:9A:2F:89:45:FB:72:D4:50:CB:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BA6AAA6D7FE11EFBF5D344F762E951A.roa
Signing time: Tue 21 Jan 2025 13:49:34 +0000
ROA not before: Tue 21 Jan 2025 13:49:30 +0000
ROA not after: Sat 01 Feb 2025 13:49:30 +0000
asID: 202656
IP address blocks: 45.192.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69100 (0x10dec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:49:30 2025 GMT
Not After : Feb 1 13:49:30 2025 GMT
Subject: CN=678fa5ee-062b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:1e:e2:d1:14:5b:f8:2a:60:f1:54:07:a9:
6b:02:0d:8c:4b:e3:d3:41:79:c7:81:d4:58:af:28:
e7:3d:70:ad:a1:d9:3a:c4:8b:e2:ce:05:49:32:04:
30:29:52:81:ac:53:ba:90:65:7a:e0:fe:60:f3:9e:
a8:f1:4b:be:f3:a9:e3:7e:f2:2d:e4:5c:3e:e0:71:
c0:6e:ee:07:08:14:f6:11:70:e9:eb:b6:90:0d:a3:
3b:8f:28:e2:69:fd:4b:a1:5f:4f:87:44:32:52:df:
30:36:50:a6:93:74:d6:be:3a:19:49:7a:2d:7f:41:
7f:22:f3:8c:f1:c2:1b:ca:86:9b:bb:97:8d:08:9e:
e2:4d:50:bd:5c:4c:a2:b2:e4:c2:9b:ef:ef:5b:e7:
92:8a:5f:57:3a:05:85:fd:c4:d9:74:6d:15:c8:25:
5d:a9:82:48:20:82:8d:34:6b:e0:d5:e4:49:93:3b:
59:40:45:65:a0:b1:d4:97:6d:aa:82:6f:c7:a2:6a:
b1:67:f1:91:a0:bd:22:fb:5d:d7:d9:03:36:ba:51:
0b:8e:72:59:cd:9c:6f:3d:23:d5:04:0f:5f:8b:9a:
86:46:72:39:c9:1f:1b:e3:fb:a4:45:68:e9:ed:23:
8a:67:49:c9:78:34:a4:ce:cf:c4:7b:2c:84:37:dc:
61:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B5:11:F3:72:B4:9D:C6:E4:51:9A:2F:89:45:FB:72:D4:50:CB:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BA6AAA6D7FE11EFBF5D344F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:4c:5e:8c:bd:b6:cf:a0:8a:a5:bd:71:fb:a6:15:e7:73:e3:
ef:f7:ad:67:ba:35:1b:2b:34:8e:be:d2:66:af:b5:a8:40:04:
13:c0:9e:00:a4:57:34:43:fb:60:5a:c5:0f:31:3b:82:45:90:
12:cc:9a:0c:a4:71:00:55:2c:4b:db:55:de:39:fe:7b:a7:81:
23:5c:76:74:01:52:fc:04:45:94:5e:bf:29:5c:f7:64:59:67:
34:fa:6d:ae:d9:89:f2:60:7a:7b:a4:9f:60:6c:a9:5d:9f:64:
93:31:c8:c5:1c:27:24:60:9f:2d:08:3c:07:f4:b4:99:74:a9:
0a:97:5e:c9:d1:b9:b8:bc:92:2d:21:9a:c3:dc:e6:c8:29:58:
fd:e0:95:6e:b7:bf:c1:b6:62:b7:2c:2e:65:32:8e:d5:bd:c9:
cc:66:61:93:a3:68:b1:d5:96:d8:32:c8:1e:97:77:87:01:09:
f2:d4:72:31:1c:11:b6:c1:25:ea:16:62:d4:04:57:a9:d4:5d:
bf:6b:6e:15:49:12:06:1c:76:77:3b:c0:2a:e5:de:80:48:42:
30:42:60:7f:fa:19:7b:7d:9d:0b:71:23:ad:3d:b3:1e:fc:5c:
6f:f2:b6:99:5d:d9:fa:6f:ae:9e:e2:7f:1f:92:85:2e:9a:f4:
80:0d:51:13
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ3sMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTM0OTMwWhcNMjUwMjAxMTM0OTMwWjAYMRYw
FAYDVQQDEw02NzhmYTVlZS0wNjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsw4e4tEUW/gqYPFUB6lrAg2MS+PTQXnHgdRYryjnPXCtodk6xIvizgVJ
MgQwKVKBrFO6kGV64P5g856o8Uu+86njfvIt5Fw+4HHAbu4HCBT2EXDp67aQDaM7
jyjiaf1LoV9Ph0QyUt8wNlCmk3TWvjoZSXotf0F/IvOM8cIbyoabu5eNCJ7iTVC9
XEyisuTCm+/vW+eSil9XOgWF/cTZdG0VyCVdqYJIIIKNNGvg1eRJkztZQEVloLHU
l22qgm/HomqxZ/GRoL0i+13X2QM2ulELjnJZzZxvPSPVBA9fi5qGRnI5yR8b4/uk
RWjp7SOKZ0nJeDSkzs/EeyyEN9xhHQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCO1
EfNytJ3G5FGaL4lF+3LUUMtPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QkE2QUFBNkQ3RkUxMUVGQkY1RDM0NEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcA/MA0GCSqGSIb3DQEBCwUA
A4IBAQCmTF6MvbbPoIqlvXH7phXnc+Pv961nujUbKzSOvtJmr7WoQAQTwJ4ApFc0
Q/tgWsUPMTuCRZASzJoMpHEAVSxL21XeOf57p4EjXHZ0AVL8BEWUXr8pXPdkWWc0
+m2u2YnyYHp7pJ9gbKldn2STMcjFHCckYJ8tCDwH9LSZdKkKl17J0bm4vJItIZrD
3ObIKVj94JVut7/BtmK3LC5lMo7VvcnMZmGTo2ix1ZbYMsgel3eHAQny1HIxHBG2
wSXqFmLUBFep1F2/a24VSRIGHHZ3O8Aq5d6ASEIwQmB/+hl7fZ0LcSOtPbMe/Fxv
8raZXdn6b66e4n8fkoUumvSADVET
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:01 2025 by rpki-client