Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A2E9A0CD51A11EFBD826A58762E951A.roa
File: 9A2E9A0CD51A11EFBD826A58762E951A.roa (raw, json)
Hash identifier: xYp5dQM4zRLIWqdsPsSE/vfUtV4etNciwRwU2SN/Yp8=
Subject key identifier: 25:50:2A:04:8C:FB:74:CD:E3:5E:31:23:18:96:08:1C:89:F2:24:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AC8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A2E9A0CD51A11EFBD826A58762E951A.roa
Signing time: Fri 17 Jan 2025 21:32:50 +0000
ROA not before: Fri 17 Jan 2025 21:32:46 +0000
ROA not after: Sat 22 Feb 2025 21:32:46 +0000
asID: 139646
IP address blocks: 45.207.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68296 (0x10ac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 21:32:46 2025 GMT
Not After : Feb 22 21:32:46 2025 GMT
Subject: CN=678acc82-b8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:72:1c:72:0b:c5:91:1d:cd:35:be:25:19:
35:96:d8:eb:97:2e:78:1d:eb:e9:4b:ac:60:a2:15:
db:b6:b2:ab:41:56:20:5e:c3:f8:46:74:3c:ed:ec:
8e:9f:e5:93:2d:9e:07:39:58:4f:92:e9:20:20:5e:
f6:ec:f3:4c:d8:57:12:4b:82:76:08:6d:23:90:0d:
8d:b3:82:a1:a0:75:3d:d5:98:3e:9c:ce:27:c7:fc:
c9:45:05:00:ea:b1:7a:6b:cb:bd:1e:d0:80:d2:9e:
4e:b4:d9:7f:d9:03:f4:14:93:f3:84:92:51:a9:33:
cd:47:63:db:1d:f5:92:b0:86:6b:00:3b:99:45:1b:
92:83:05:2b:24:82:a7:43:e4:56:c9:30:e9:6e:46:
20:49:5c:5a:78:d1:f0:a2:37:21:07:25:ab:ed:6e:
10:e5:0e:b5:8f:90:0e:ff:15:39:6c:39:90:a7:67:
e0:0c:80:b9:00:bc:b8:85:9b:d7:5f:84:34:c1:3b:
82:8f:ef:c6:83:96:da:02:29:36:ad:60:bc:38:58:
28:04:61:0d:ce:01:de:98:f6:12:6e:be:4f:f5:cd:
45:47:de:ac:bb:55:ae:73:aa:10:74:a5:53:19:3d:
c5:b0:49:5c:e8:97:83:00:0c:ea:11:71:07:97:15:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:50:2A:04:8C:FB:74:CD:E3:5E:31:23:18:96:08:1C:89:F2:24:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A2E9A0CD51A11EFBD826A58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:a1:5a:ad:ac:fd:fd:02:94:87:6c:bd:6c:d2:4e:29:ff:26:
a1:a3:53:35:a0:36:56:42:ae:9d:47:3d:27:c0:62:4b:18:ff:
3a:59:a4:57:56:db:f6:db:8a:63:14:3d:17:a3:00:0d:57:f2:
00:3f:9d:9b:e6:35:19:80:05:ad:c3:3c:07:ab:3d:f9:0e:91:
7b:27:a6:57:6a:6a:2e:90:f5:80:ad:8a:14:eb:08:c5:f8:c5:
3e:c8:2d:78:be:57:24:b5:b2:08:ee:82:36:2d:7a:9c:9d:9e:
db:b6:25:52:10:c3:d2:d2:b3:da:18:11:09:45:44:b8:56:4f:
f1:bf:bc:3f:ad:82:1d:86:f6:07:3b:7d:2c:b0:9f:46:c1:15:
3f:86:a3:8d:89:03:09:1b:24:2c:0c:03:bc:c0:16:83:3b:eb:
81:87:0d:20:3e:a7:30:b3:60:6f:52:dd:b3:d2:cf:60:b2:b8:
9a:25:2c:9c:24:15:e6:08:b9:4e:7d:51:a5:0b:7d:84:3d:56:
32:b6:dd:31:61:d9:94:34:b3:f5:a2:ca:f2:71:7f:f4:c7:ca:
d4:7a:7a:86:ea:23:29:64:2b:93:83:f8:6f:c4:dc:88:8a:45:
98:8f:b9:fc:54:b6:27:96:63:3b:78:98:c3:a5:4e:85:9f:52:
82:5b:fe:22
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQrIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MjEzMjQ2WhcNMjUwMjIyMjEzMjQ2WjAYMRYw
FAYDVQQDEw02NzhhY2M4Mi1iOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAom1yHHILxZEdzTW+JRk1ltjrly54HevpS6xgohXbtrKrQVYgXsP4RnQ8
7eyOn+WTLZ4HOVhPkukgIF727PNM2FcSS4J2CG0jkA2Ns4KhoHU91Zg+nM4nx/zJ
RQUA6rF6a8u9HtCA0p5OtNl/2QP0FJPzhJJRqTPNR2PbHfWSsIZrADuZRRuSgwUr
JIKnQ+RWyTDpbkYgSVxaeNHwojchByWr7W4Q5Q61j5AO/xU5bDmQp2fgDIC5ALy4
hZvXX4Q0wTuCj+/Gg5baAik2rWC8OFgoBGENzgHemPYSbr5P9c1FR96su1Wuc6oQ
dKVTGT3FsElc6JeDAAzqEXEHlxVUPwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCVQ
KgSM+3TN414xIxiWCByJ8iTmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QTJFOUEwQ0Q1MUExMUVGQkQ4MjZBNTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLc/gMA0GCSqGSIb3DQEBCwUA
A4IBAQAqoVqtrP39ApSHbL1s0k4p/yaho1M1oDZWQq6dRz0nwGJLGP86WaRXVtv2
24pjFD0XowANV/IAP52b5jUZgAWtwzwHqz35DpF7J6ZXamoukPWArYoU6wjF+MU+
yC14vlcktbII7oI2LXqcnZ7btiVSEMPS0rPaGBEJRUS4Vk/xv7w/rYIdhvYHO30s
sJ9GwRU/hqONiQMJGyQsDAO8wBaDO+uBhw0gPqcws2BvUt2z0s9gsriaJSycJBXm
CLlOfVGlC32EPVYytt0xYdmUNLP1osrycX/0x8rUenqG6iMpZCuTg/hvxNyIikWY
j7n8VLYnlmM7eJjDpU6Fn1KCW/4i
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:55:09 2025 by rpki-client