Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4370CEEC3EC11EFBEE92A73762E951A.roa
File: A4370CEEC3EC11EFBEE92A73762E951A.roa (raw, json)
Hash identifier: 1uW3B46+oxhRq6XEwjC0KrBxGktJfMK6/2pKuAcKCN8=
Subject key identifier: 0E:58:1E:DE:F7:9B:A2:96:27:74:91:00:8D:DD:93:BB:74:D9:FA:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF21
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4370CEEC3EC11EFBEE92A73762E951A.roa
Signing time: Fri 27 Dec 2024 00:51:01 +0000
ROA not before: Fri 27 Dec 2024 00:00:57 +0000
ROA not after: Fri 12 Dec 2025 00:00:57 +0000
asID: 984
IP address blocks: 45.192.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61217 (0xef21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 27 00:00:57 2024 GMT
Not After : Dec 12 00:00:57 2025 GMT
Subject: CN=676df9f5-5364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:5b:f7:c2:34:fb:ed:c5:38:26:4a:c8:2e:
09:eb:16:46:af:e3:c3:33:97:5a:73:93:b4:3c:f5:
d2:e2:e4:23:4d:29:5f:19:e9:75:2f:73:33:d2:d0:
a9:ee:45:61:14:61:d7:bf:08:1b:41:4e:76:06:b4:
68:f3:7a:d1:74:38:ea:27:cc:b1:be:a5:18:b0:62:
a2:ec:c2:0a:39:22:c9:cf:89:a5:4c:e5:47:ce:6a:
dd:7a:ed:f8:98:e7:57:20:3b:2b:e0:fd:96:7a:c8:
43:4a:1a:aa:c3:91:61:ea:00:9c:df:b7:16:c7:99:
0e:ad:16:74:ad:31:dd:6b:2c:8c:70:76:90:7d:25:
9e:49:03:8e:ee:75:85:0e:31:17:d5:0b:49:f8:6d:
47:b3:25:50:d5:c3:9d:6b:65:3a:db:56:22:fc:c8:
c5:82:5b:be:82:8f:61:ef:00:b0:5c:12:3c:47:52:
a8:73:0a:e3:db:ad:9e:c6:c7:2c:67:33:0e:f9:d5:
d3:28:a2:a2:0c:f5:b2:9e:c0:32:3e:68:ad:c9:ab:
d2:29:a4:13:6d:bf:07:1c:47:61:90:46:4f:0b:3c:
f3:e8:45:6e:87:69:bc:4b:89:94:82:b1:a1:36:35:
22:0d:65:49:21:23:a6:23:f9:eb:bd:79:5e:7f:68:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:58:1E:DE:F7:9B:A2:96:27:74:91:00:8D:DD:93:BB:74:D9:FA:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4370CEEC3EC11EFBEE92A73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.224.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:39:6c:53:bb:86:f2:de:d3:8e:e1:67:c9:3f:80:f8:2d:8d:
b8:08:e6:e0:69:73:b8:6b:62:42:5b:21:c8:1f:d5:de:04:8c:
eb:87:e9:19:17:02:7f:ed:16:c6:ae:a8:13:10:14:9e:a8:03:
2f:e3:11:d0:1f:9f:4b:99:c3:52:f2:4d:aa:1e:8a:be:10:bf:
c2:b5:e0:3d:53:96:ad:1e:a0:b5:78:de:a0:e3:de:c8:29:63:
37:59:34:00:76:b9:99:b2:ab:aa:49:f7:b8:24:d4:7e:98:a4:
02:53:17:6c:b6:69:e4:8d:63:ff:4a:43:de:1c:42:38:e7:06:
2a:ee:b7:37:aa:ad:48:5b:27:37:ae:69:f7:88:29:e0:fe:96:
99:49:77:75:23:fa:c1:9a:26:00:2e:6a:fe:f4:60:24:4b:7e:
9a:b8:40:3f:f6:93:ce:4d:b3:1e:b3:aa:8d:86:a2:88:d8:cf:
ab:67:7f:bd:54:a9:dc:9b:fe:54:c2:2d:18:47:e8:f7:49:2f:
e5:8f:66:70:e6:78:22:51:b3:49:f9:70:67:6d:e9:fb:5b:88:
c3:0f:78:df:52:fd:fc:99:8e:26:6e:ce:be:a9:34:62:c8:6b:
f4:cb:b2:57:c6:cd:44:dc:49:29:21:c7:4a:c9:80:ab:84:db:
76:82:c0:9a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO8hMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI3MDAwMDU3WhcNMjUxMjEyMDAwMDU3WjAYMRYw
FAYDVQQDEw02NzZkZjlmNS01MzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy81b98I0++3FOCZKyC4J6xZGr+PDM5dac5O0PPXS4uQjTSlfGel1L3Mz
0tCp7kVhFGHXvwgbQU52BrRo83rRdDjqJ8yxvqUYsGKi7MIKOSLJz4mlTOVHzmrd
eu34mOdXIDsr4P2WeshDShqqw5Fh6gCc37cWx5kOrRZ0rTHdayyMcHaQfSWeSQOO
7nWFDjEX1QtJ+G1HsyVQ1cOda2U621Yi/MjFglu+go9h7wCwXBI8R1Kocwrj262e
xscsZzMO+dXTKKKiDPWynsAyPmityavSKaQTbb8HHEdhkEZPCzzz6EVuh2m8S4mU
grGhNjUiDWVJISOmI/nrvXlef2hebQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA5Y
Ht73m6KWJ3SRAI3dk7t02frkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNDM3MENFRUMzRUMxMUVGQkVFOTJBNzM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcDgMA0GCSqGSIb3DQEBCwUA
A4IBAQC1OWxTu4by3tOO4WfJP4D4LY24CObgaXO4a2JCWyHIH9XeBIzrh+kZFwJ/
7RbGrqgTEBSeqAMv4xHQH59LmcNS8k2qHoq+EL/CteA9U5atHqC1eN6g497IKWM3
WTQAdrmZsquqSfe4JNR+mKQCUxdstmnkjWP/SkPeHEI45wYq7rc3qq1IWyc3rmn3
iCng/paZSXd1I/rBmiYALmr+9GAkS36auEA/9pPOTbMes6qNhqKI2M+rZ3+9VKnc
m/5Uwi0YR+j3SS/lj2Zw5ngiUbNJ+XBnben7W4jDD3jfUv38mY4mbs6+qTRiyGv0
y7JXxs1E3EkpIcdKyYCrhNt2gsCa
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:11:45 2025 by rpki-client