Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B5CC638DB4111EFA42B73B3762E951A.roa
File: 9B5CC638DB4111EFA42B73B3762E951A.roa (raw, json)
Hash identifier: FG1uEWkk/n8iL5AZKrD5uW52gFOBfF2tIPnVBCgqGGM=
Subject key identifier: 87:69:A2:43:06:6E:C1:D9:9F:0C:6D:EC:BD:F8:D3:D2:9B:64:06:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B5CC638DB4111EFA42B73B3762E951A.roa
Signing time: Sat 25 Jan 2025 17:27:10 +0000
ROA not before: Sat 25 Jan 2025 17:27:06 +0000
ROA not after: Sun 09 Mar 2025 17:27:06 +0000
asID: 63139
IP address blocks: 45.197.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70307 (0x112a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 17:27:06 2025 GMT
Not After : Mar 9 17:27:06 2025 GMT
Subject: CN=67951eee-3d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:4d:7f:9e:e3:d3:21:ba:ca:97:13:31:9f:
c4:0c:d1:5a:cf:00:7d:a0:9f:80:80:e7:09:72:1e:
c9:db:87:58:59:f5:09:81:ad:93:1f:d2:24:39:94:
c2:63:fd:05:e5:f5:7e:39:74:67:15:b7:eb:de:5f:
7f:f7:b5:2a:78:73:f4:7b:0b:51:9f:fc:43:a8:ae:
1a:c2:9f:bf:41:97:ef:f5:13:66:80:ff:7f:43:4f:
ab:ad:6d:88:b6:60:c3:40:7c:df:99:7a:3e:89:98:
d5:c4:35:f4:7d:d8:7a:92:15:42:7c:d2:af:e8:9b:
42:ef:c6:a9:d1:50:61:19:4f:87:2c:a7:55:9c:48:
5d:8d:f1:26:c0:96:51:7e:c8:22:b2:9d:bb:22:aa:
de:8d:a8:d6:5b:93:5a:ca:0d:05:2f:61:2f:05:50:
b2:ae:d1:a1:a2:35:7d:83:61:8c:de:bf:24:00:c5:
bd:5c:4a:41:a5:32:e0:91:77:ab:ae:53:3c:cc:13:
b6:80:59:cb:39:a3:92:e3:c6:ef:8d:a9:38:81:ce:
92:3d:ce:cc:b0:ce:5a:0d:fd:98:e8:dd:d4:c1:a1:
4f:81:00:d9:a7:1c:3b:cd:60:c7:24:7c:70:d3:6b:
37:d7:12:26:43:05:4e:d0:6b:99:41:d7:35:44:36:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:69:A2:43:06:6E:C1:D9:9F:0C:6D:EC:BD:F8:D3:D2:9B:64:06:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B5CC638DB4111EFA42B73B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.73.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:c3:3c:78:04:de:01:52:1b:eb:71:2e:46:00:58:a6:80:ed:
1d:06:d6:7d:1a:0d:49:6d:22:c9:13:60:1c:bf:41:91:78:f6:
d0:02:a3:2c:aa:c6:1b:4e:3d:bf:0f:13:60:17:48:4b:0e:47:
eb:2c:ce:ff:69:22:7a:d3:69:66:c9:8e:ef:ab:ec:64:b0:e6:
ec:88:3f:2e:c0:e2:be:ab:78:8e:e2:6e:e6:d3:18:8f:16:5e:
01:fd:20:a1:1a:7c:b8:8f:ca:f9:84:77:8d:2b:49:0c:2f:af:
10:a2:e3:59:51:0a:a6:f8:ea:79:6c:3d:db:ff:87:7b:fa:b0:
ae:b0:e2:88:5f:56:0f:fc:cb:81:77:c5:17:fc:7f:02:50:65:
05:b8:e4:e3:ef:7f:94:a8:05:28:57:4e:4a:4b:55:bf:83:4a:
f1:86:69:0b:f5:20:c4:78:c4:b8:b6:9c:4e:90:0c:eb:a4:91:
a0:e3:db:55:67:b2:82:14:ea:ba:02:f9:68:b8:f1:0e:0c:e6:
0a:d4:a0:66:1b:89:4e:cc:90:ca:c2:a7:01:4f:96:5e:ca:a7:
3f:c7:15:95:bb:f6:35:ea:30:92:b7:23:c7:ee:95:2e:13:4f:
76:03:d3:3d:00:30:1d:ab:05:4b:d1:c1:b8:97:ac:b9:72:9f:
28:fb:48:48
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARKjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTcyNzA2WhcNMjUwMzA5MTcyNzA2WjAYMRYw
FAYDVQQDEw02Nzk1MWVlZS0zZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxYhNf57j0yG6ypcTMZ/EDNFazwB9oJ+AgOcJch7J24dYWfUJga2TH9Ik
OZTCY/0F5fV+OXRnFbfr3l9/97UqeHP0ewtRn/xDqK4awp+/QZfv9RNmgP9/Q0+r
rW2ItmDDQHzfmXo+iZjVxDX0fdh6khVCfNKv6JtC78ap0VBhGU+HLKdVnEhdjfEm
wJZRfsgisp27IqrejajWW5Nayg0FL2EvBVCyrtGhojV9g2GM3r8kAMW9XEpBpTLg
kXerrlM8zBO2gFnLOaOS48bvjak4gc6SPc7MsM5aDf2Y6N3UwaFPgQDZpxw7zWDH
JHxw02s31xImQwVO0GuZQdc1RDY5mwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIdp
okMGbsHZnwxt7L3409KbZAa/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QjVDQzYzOERCNDExMUVGQTQyQjczQjM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcVJMA0GCSqGSIb3DQEBCwUA
A4IBAQCkwzx4BN4BUhvrcS5GAFimgO0dBtZ9Gg1JbSLJE2Acv0GRePbQAqMsqsYb
Tj2/DxNgF0hLDkfrLM7/aSJ602lmyY7vq+xksObsiD8uwOK+q3iO4m7m0xiPFl4B
/SChGny4j8r5hHeNK0kML68QouNZUQqm+Op5bD3b/4d7+rCusOKIX1YP/MuBd8UX
/H8CUGUFuOTj73+UqAUoV05KS1W/g0rxhmkL9SDEeMS4tpxOkAzrpJGg49tVZ7KC
FOq6AvlouPEODOYK1KBmG4lOzJDKwqcBT5Zeyqc/xxWVu/Y16jCStyPH7pUuE092
A9M9ADAdqwVL0cG4l6y5cp8o+0hI
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:59:50 2025 by rpki-client