Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AD15BB8DAEA11EFB102466F762E951A.roa
File: 9AD15BB8DAEA11EFB102466F762E951A.roa (raw, json)
Hash identifier: uOGBcpb2HBRnOy3ijBwhoRNubOohRi3Ts8mCMk3wPXY=
Subject key identifier: D0:2B:75:B5:9A:57:EF:A3:83:B1:FC:F5:D1:56:ED:3F:DB:6D:A1:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AD15BB8DAEA11EFB102466F762E951A.roa
Signing time: Sat 25 Jan 2025 07:04:23 +0000
ROA not before: Sat 25 Jan 2025 07:04:19 +0000
ROA not after: Thu 06 Feb 2025 07:04:19 +0000
asID: 39600
IP address blocks: 45.194.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69877 (0x110f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:04:19 2025 GMT
Not After : Feb 6 07:04:19 2025 GMT
Subject: CN=67948cf7-0316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cf:25:bf:7c:1f:e7:1d:b3:08:40:de:96:28:
f0:b6:c2:34:a6:5e:fb:c2:34:e3:a4:62:36:b2:33:
90:a0:68:23:32:a8:c9:a3:33:88:7f:69:a0:ad:d1:
87:2e:05:25:23:ab:74:1a:c4:e3:21:f5:58:71:a6:
47:39:60:83:21:00:10:f9:56:33:ec:22:d3:08:d8:
0a:d0:eb:e4:ed:b3:f3:22:01:87:37:b4:0b:19:b9:
21:6e:f9:bd:80:0d:cb:1b:25:19:f8:a8:ce:cb:3c:
9a:3f:d3:9e:89:8d:c9:73:cc:de:77:cc:65:57:be:
27:f6:2a:16:41:32:86:36:83:09:1f:82:ee:6e:ac:
11:60:f7:d2:65:fd:8c:b5:48:48:7d:a3:ff:14:a8:
88:1c:86:ec:a0:e5:f5:0d:78:d5:ef:2a:3f:1a:99:
30:c7:b5:60:4d:7c:dd:ca:41:54:54:97:9b:e9:0e:
37:cc:4e:5d:d5:40:95:fa:f0:f8:f2:4b:b7:5a:ae:
cb:09:69:23:21:3e:63:3d:35:cc:60:3a:1d:d2:3e:
e8:23:91:65:9d:a0:65:8d:9f:3a:bd:aa:31:b3:e4:
f1:d9:54:29:e9:9a:2c:06:15:f2:1e:89:99:36:36:
65:06:7e:36:1a:70:03:d3:43:78:b6:19:8a:78:93:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2B:75:B5:9A:57:EF:A3:83:B1:FC:F5:D1:56:ED:3F:DB:6D:A1:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AD15BB8DAEA11EFB102466F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.68.0/22
Signature Algorithm: sha256WithRSAEncryption
83:dd:01:0c:bf:b8:fc:df:69:59:73:d6:45:77:c3:3d:61:d5:
a0:cf:0d:cb:9e:d5:d4:a5:26:07:7d:6d:48:20:08:f4:9d:1d:
8e:b1:dc:ea:88:a7:0f:56:37:c9:e5:ec:39:3f:23:bc:03:16:
5c:ae:fa:7d:c2:ec:a8:17:f9:54:b7:31:bb:41:0c:c9:26:d2:
44:ce:a1:80:74:0e:9f:fb:9a:ce:93:5a:36:b8:e4:9f:50:d5:
f7:7d:9a:72:b5:e3:fd:fd:b2:cd:5f:cf:c0:1a:9a:a3:2e:c1:
1a:1e:25:06:31:29:97:44:d0:58:cb:12:3e:63:f9:48:84:b1:
80:95:45:7e:dd:f6:a1:17:3f:f8:b5:34:dc:54:bc:01:ef:b2:
dc:e3:f8:e2:33:09:9f:9d:65:da:0a:62:af:24:cb:60:2e:5d:
c5:97:c1:03:68:d2:67:c7:d0:48:4c:87:99:dc:e6:22:e8:67:
c1:63:84:e8:df:d1:78:f3:87:dd:e9:5b:b4:0b:da:da:ca:80:
24:7a:1b:3f:aa:c8:c2:d2:1b:ad:3a:08:f6:05:02:97:8b:fd:
0e:be:7f:dd:2c:3d:79:bb:71:b7:4b:21:cc:fe:8d:33:74:88:
9e:23:0d:a5:f8:eb:6a:ab:1c:43:c7:0e:94:7b:c8:0f:ab:1d:
93:14:e1:6a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARD1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MDcwNDE5WhcNMjUwMjA2MDcwNDE5WjAYMRYw
FAYDVQQDEw02Nzk0OGNmNy0wMzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA788lv3wf5x2zCEDelijwtsI0pl77wjTjpGI2sjOQoGgjMqjJozOIf2mg
rdGHLgUlI6t0GsTjIfVYcaZHOWCDIQAQ+VYz7CLTCNgK0Ovk7bPzIgGHN7QLGbkh
bvm9gA3LGyUZ+KjOyzyaP9OeiY3Jc8zed8xlV74n9ioWQTKGNoMJH4LubqwRYPfS
Zf2MtUhIfaP/FKiIHIbsoOX1DXjV7yo/Gpkwx7VgTXzdykFUVJeb6Q43zE5d1UCV
+vD48ku3Wq7LCWkjIT5jPTXMYDod0j7oI5FlnaBljZ86vaoxs+Tx2VQp6ZosBhXy
HomZNjZlBn42GnAD00N4thmKeJN8OwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNAr
dbWaV++jg7H89dFW7T/bbaHXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QUQxNUJCOERBRUExMUVGQjEwMjQ2NkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcJEMA0GCSqGSIb3DQEBCwUA
A4IBAQCD3QEMv7j832lZc9ZFd8M9YdWgzw3LntXUpSYHfW1IIAj0nR2OsdzqiKcP
VjfJ5ew5PyO8AxZcrvp9wuyoF/lUtzG7QQzJJtJEzqGAdA6f+5rOk1o2uOSfUNX3
fZpyteP9/bLNX8/AGpqjLsEaHiUGMSmXRNBYyxI+Y/lIhLGAlUV+3fahFz/4tTTc
VLwB77Lc4/jiMwmfnWXaCmKvJMtgLl3Fl8EDaNJnx9BITIeZ3OYi6GfBY4To39F4
84fd6Vu0C9rayoAkehs/qsjC0hutOgj2BQKXi/0Ovn/dLD15u3G3SyHM/o0zdIie
Iw2l+OtqqxxDxw6Ue8gPqx2TFOFq
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:51:07 2025 by rpki-client