Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98BA65A0DFE911EFAF76EC99762E951A.roa
File: 98BA65A0DFE911EFAF76EC99762E951A.roa (raw, json)
Hash identifier: vZ/kAHK8jBQIYi7CZtFJgzCpESvCJdpGd4ETzx9ZTzI=
Subject key identifier: CA:3D:1B:5D:14:10:4E:30:84:15:10:AE:88:09:ED:93:2E:48:24:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011631
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98BA65A0DFE911EFAF76EC99762E951A.roa
Signing time: Fri 31 Jan 2025 15:39:46 +0000
ROA not before: Fri 31 Jan 2025 15:39:41 +0000
ROA not after: Wed 05 Feb 2025 15:39:41 +0000
asID: 39600
IP address blocks: 45.197.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71217 (0x11631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 15:39:41 2025 GMT
Not After : Feb 5 15:39:41 2025 GMT
Subject: CN=679ceec1-a5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:11:ec:02:d5:9c:38:d9:5e:44:df:a4:a0:
23:79:68:7a:2b:7b:a6:f1:0a:2d:e9:da:4e:2a:7a:
68:17:f0:21:5a:15:0b:65:d4:b2:3c:5b:9c:b9:1a:
ba:31:d0:3d:43:44:0b:8c:02:55:e1:72:13:06:35:
42:9f:2b:41:c7:45:1c:9d:09:b7:bb:f5:23:c8:18:
95:56:18:a7:25:74:c8:ad:bd:56:ee:8c:9b:39:16:
ef:df:1c:fc:bc:3f:34:7b:af:6b:9b:4f:52:07:03:
59:d1:1f:2d:ae:db:cc:8e:de:e1:9f:d0:e4:9b:ee:
7f:d5:46:17:c4:ab:95:cc:58:d1:d4:d2:cf:9a:4f:
6b:11:f2:3d:7f:ac:8b:06:7e:b5:90:1c:8c:e3:dd:
7d:aa:90:73:10:72:8e:44:e0:f0:c5:41:c3:95:82:
90:8e:21:69:1b:5b:b7:87:67:a9:1f:b8:34:08:ef:
35:00:d3:f5:8f:a7:5d:a4:24:f7:81:ac:b2:db:92:
9d:2d:e9:d3:b3:cb:da:c0:e1:07:29:7b:77:aa:b4:
bc:e0:23:fd:65:83:ac:04:90:77:1f:55:40:45:ee:
dc:bc:78:be:0e:c9:4d:c8:93:51:47:cc:a3:84:a9:
0b:8e:1d:9b:0c:33:ac:5a:17:a3:ba:18:7e:8a:8c:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3D:1B:5D:14:10:4E:30:84:15:10:AE:88:09:ED:93:2E:48:24:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98BA65A0DFE911EFAF76EC99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.28.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c0:7b:39:80:bb:d3:15:f8:8b:06:1d:c6:53:0c:a3:24:34:
f6:4c:dc:73:e3:0d:2e:3b:4f:87:7f:9b:ea:1c:21:a0:81:89:
6e:3c:c3:13:07:fc:b7:9d:5c:b3:9b:24:81:60:02:9a:88:b0:
11:45:f7:c3:5a:72:e4:d7:21:f7:62:39:c6:b0:7f:10:dd:c9:
77:af:2a:9a:88:f1:ff:3b:fb:c7:9d:59:9b:75:d5:37:8e:f2:
73:c3:3c:b8:db:81:6b:62:11:85:60:1d:a5:75:1b:54:77:dc:
94:8e:65:bb:88:2d:95:89:85:a4:79:0b:6a:d9:e6:7a:44:a8:
ec:e0:58:95:cf:56:04:b0:61:a0:8c:ad:c4:93:29:12:af:1f:
aa:bf:fd:2f:8f:7d:81:87:d6:c3:c4:02:47:d7:75:85:a1:04:
48:35:99:57:dc:5c:e6:3e:37:98:1a:df:88:fa:39:45:9d:b1:
4f:99:d4:17:c0:d5:98:f1:fa:b5:72:fe:89:f2:af:62:6d:41:
7b:c2:03:62:3a:bf:5d:38:ee:de:e7:b6:7f:43:fa:ee:56:4a:
a0:12:0e:35:ac:b6:7f:f7:90:f6:1e:06:32:c0:67:d7:19:2e:
72:bb:e4:48:6e:7a:6e:55:9a:4e:db:f2:e5:9f:33:03:79:13:
85:6b:fc:cf
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARYxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTMxMTUzOTQxWhcNMjUwMjA1MTUzOTQxWjAYMRYw
FAYDVQQDEw02NzljZWVjMS1hNWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1DcR7ALVnDjZXkTfpKAjeWh6K3um8Qot6dpOKnpoF/AhWhULZdSyPFuc
uRq6MdA9Q0QLjAJV4XITBjVCnytBx0UcnQm3u/UjyBiVVhinJXTIrb1W7oybORbv
3xz8vD80e69rm09SBwNZ0R8trtvMjt7hn9Dkm+5/1UYXxKuVzFjR1NLPmk9rEfI9
f6yLBn61kByM4919qpBzEHKORODwxUHDlYKQjiFpG1u3h2epH7g0CO81ANP1j6dd
pCT3gayy25KdLenTs8vawOEHKXt3qrS84CP9ZYOsBJB3H1VARe7cvHi+DslNyJNR
R8yjhKkLjh2bDDOsWhejuhh+iowClQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMo9
G10UEE4whBUQrogJ7ZMuSCQIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85OEJBNjVBMERGRTkxMUVGQUY3NkVDOTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcUcMA0GCSqGSIb3DQEBCwUA
A4IBAQCKwHs5gLvTFfiLBh3GUwyjJDT2TNxz4w0uO0+Hf5vqHCGggYluPMMTB/y3
nVyzmySBYAKaiLARRffDWnLk1yH3YjnGsH8Q3cl3ryqaiPH/O/vHnVmbddU3jvJz
wzy424FrYhGFYB2ldRtUd9yUjmW7iC2ViYWkeQtq2eZ6RKjs4FiVz1YEsGGgjK3E
kykSrx+qv/0vj32Bh9bDxAJH13WFoQRINZlX3FzmPjeYGt+I+jlFnbFPmdQXwNWY
8fq1cv6J8q9ibUF7wgNiOr9dOO7e57Z/Q/ruVkqgEg41rLZ/95D2HgYywGfXGS5y
u+RIbnpuVZpO2/LlnzMDeROFa/zP
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:15:54 2025 by rpki-client