Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A49F3B20D56211EF8196AEBE762E951A.roa
File: A49F3B20D56211EF8196AEBE762E951A.roa (raw, json)
Hash identifier: /f/E9B/tHM7aEHjsxX3k8KQPJDDk6JBgAgNI3ZYROsc=
Subject key identifier: 7F:B7:2C:AB:A3:DB:94:B0:5B:96:6B:48:F9:B4:E7:64:45:BB:65:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A49F3B20D56211EF8196AEBE762E951A.roa
Signing time: Sat 18 Jan 2025 06:08:32 +0000
ROA not before: Sat 18 Jan 2025 06:08:28 +0000
ROA not after: Sat 22 Feb 2025 06:08:28 +0000
asID: 149766
IP address blocks: 45.196.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68341 (0x10af5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 06:08:28 2025 GMT
Not After : Feb 22 06:08:28 2025 GMT
Subject: CN=678b4560-e700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:a0:ce:df:c9:c4:75:ec:74:4f:14:ec:85:
9c:72:28:d0:9e:5a:1f:f8:0d:a8:e2:d6:2a:25:07:
66:44:86:2f:18:35:80:a9:69:c6:f1:0b:16:6e:c8:
ee:d5:a7:29:b6:af:b8:26:15:5d:82:d0:ab:26:9c:
91:55:d5:62:21:8c:e9:69:d3:ec:6f:f6:ec:f4:00:
90:54:bd:5c:b8:ec:22:24:bb:5a:69:ba:38:b3:89:
4f:a7:73:08:19:51:6c:be:4b:39:58:ba:02:2f:48:
12:2c:17:89:52:8d:bb:1c:8f:eb:87:cc:78:28:02:
3d:5a:1b:77:d3:dc:a4:c4:1a:f2:73:8d:d5:9f:0b:
ec:12:be:50:76:10:83:ea:bf:4d:19:cc:a9:7e:9b:
89:01:3a:2b:17:1e:22:eb:64:42:28:f5:6c:bf:c4:
48:b4:1b:b4:ea:70:3e:e6:4e:91:82:51:63:12:24:
ac:05:8b:69:1c:d0:13:03:5c:9f:4a:63:25:77:c5:
e3:44:37:14:ea:8f:62:60:45:a1:a7:4f:4a:cc:e7:
81:6b:df:d6:d6:d2:3c:2c:cc:6a:29:9d:b1:91:d6:
d7:bb:58:ad:d0:4b:20:01:ce:a8:5f:c1:db:a7:30:
03:01:59:86:b4:c6:57:60:11:f6:5a:2a:d6:45:ca:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B7:2C:AB:A3:DB:94:B0:5B:96:6B:48:F9:B4:E7:64:45:BB:65:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A49F3B20D56211EF8196AEBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:90:92:d2:8d:1b:70:83:bd:28:e5:70:c4:c7:39:94:d7:01:
11:54:14:b5:5f:23:a9:3f:05:c1:6b:76:d3:7c:8a:45:bb:a7:
a2:2f:d5:04:c8:a7:2b:41:72:3b:68:53:a2:67:49:aa:fd:2e:
3e:e2:33:4c:20:a4:ad:26:27:85:e1:5c:c6:a8:d0:9a:44:c5:
aa:d4:a9:0d:6f:50:b7:b2:96:2d:9d:8d:29:e3:7c:6c:3c:d4:
60:7c:f5:74:40:ae:dd:2d:60:c0:6d:49:b5:c1:43:88:47:ba:
9e:db:70:b0:df:e1:c1:ec:e7:be:ab:9a:0b:5f:e9:e8:6c:34:
5c:85:5b:c5:3a:21:b7:ff:f7:bb:a3:00:cf:9a:5f:c6:5c:85:
54:fd:18:21:ee:36:cf:b3:e3:35:fb:68:db:16:90:e5:f4:cc:
3d:d3:f8:88:9e:d0:d8:fc:3b:76:68:0c:14:0e:94:05:b8:c4:
2e:a9:9d:b1:11:da:d1:a9:98:67:e6:22:7e:8a:c1:5b:0f:1a:
12:65:5d:54:42:fd:28:48:52:1d:1c:ec:1b:49:8b:47:1c:25:
8f:c0:8c:3f:04:03:38:0c:0b:48:52:a6:89:2f:36:7a:e5:18:
0e:76:ef:67:02:52:23:9f:a1:f9:42:d0:91:78:03:5e:58:a4:
c3:10:26:a5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQr1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE4MDYwODI4WhcNMjUwMjIyMDYwODI4WjAYMRYw
FAYDVQQDEw02NzhiNDU2MC1lNzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqqygzt/JxHXsdE8U7IWccijQnlof+A2o4tYqJQdmRIYvGDWAqWnG8QsW
bsju1acptq+4JhVdgtCrJpyRVdViIYzpadPsb/bs9ACQVL1cuOwiJLtaabo4s4lP
p3MIGVFsvks5WLoCL0gSLBeJUo27HI/rh8x4KAI9Wht309ykxBryc43VnwvsEr5Q
dhCD6r9NGcypfpuJATorFx4i62RCKPVsv8RItBu06nA+5k6RglFjEiSsBYtpHNAT
A1yfSmMld8XjRDcU6o9iYEWhp09KzOeBa9/W1tI8LMxqKZ2xkdbXu1it0EsgAc6o
X8HbpzADAVmGtMZXYBH2WirWRcpSjwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH+3
LKuj25SwW5ZrSPm052RFu2W7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNDlGM0IyMEQ1NjIxMUVGODE5NkFFQkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTzMA0GCSqGSIb3DQEBCwUA
A4IBAQALkJLSjRtwg70o5XDExzmU1wERVBS1XyOpPwXBa3bTfIpFu6eiL9UEyKcr
QXI7aFOiZ0mq/S4+4jNMIKStJieF4VzGqNCaRMWq1KkNb1C3spYtnY0p43xsPNRg
fPV0QK7dLWDAbUm1wUOIR7qe23Cw3+HB7Oe+q5oLX+nobDRchVvFOiG3//e7owDP
ml/GXIVU/Rgh7jbPs+M1+2jbFpDl9Mw90/iIntDY/Dt2aAwUDpQFuMQuqZ2xEdrR
qZhn5iJ+isFbDxoSZV1UQv0oSFIdHOwbSYtHHCWPwIw/BAM4DAtIUqaJLzZ65RgO
du9nAlIjn6H5QtCReANeWKTDECal
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:49:26 2025 by rpki-client