Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACD66590DFFB11EFBDD60F94762E951A.roa
File: ACD66590DFFB11EFBDD60F94762E951A.roa (raw, json)
Hash identifier: pMCOqdNsrHWgorH+nwGFXnZWzDbMSWbEWsdHYcUhuQ0=
Subject key identifier: 91:46:62:65:87:11:78:42:56:AC:CB:C9:B7:7A:D3:1D:64:B8:91:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACD66590DFFB11EFBDD60F94762E951A.roa
Signing time: Fri 31 Jan 2025 17:49:10 +0000
ROA not before: Fri 31 Jan 2025 17:49:07 +0000
ROA not after: Mon 03 Mar 2025 17:49:07 +0000
asID: 54600
IP address blocks: 45.203.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71363 (0x116c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 17:49:07 2025 GMT
Not After : Mar 3 17:49:07 2025 GMT
Subject: CN=679d0d16-ddc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:d0:04:f6:4f:27:dc:00:64:1e:60:57:9b:
f6:94:92:52:e7:97:7f:f1:30:4a:87:b2:d9:a6:56:
a0:60:a8:83:e6:4f:c5:71:bc:87:f9:bd:48:a9:6a:
2f:5f:92:98:28:01:eb:51:cb:d4:5b:d1:ed:d5:9e:
40:3f:c8:43:66:69:a8:db:70:3f:7e:de:c3:56:74:
c1:ac:37:9c:aa:f1:7f:58:f5:6d:1a:0b:b2:45:e1:
0f:5c:c0:53:e2:7c:55:12:d5:ae:8d:d4:7b:de:48:
2c:35:48:9c:35:22:93:fb:c0:bd:ef:02:7b:a8:03:
f4:29:81:d8:44:3b:9b:ed:b1:74:91:aa:23:7a:c8:
c6:08:a2:9d:0c:b8:2c:3d:1f:46:e3:a1:29:93:bb:
8e:97:6f:4f:d8:95:e5:e9:5a:fb:f2:94:a4:e2:0f:
33:af:6c:1a:52:1f:79:d5:f6:2d:0c:23:d0:b1:7e:
8a:36:00:9d:96:96:f2:91:06:7b:eb:3e:e5:a3:af:
31:a9:fd:02:d9:5c:17:bf:b9:77:20:1a:fc:50:30:
e0:e2:eb:f9:f1:16:96:ec:7a:2c:b9:24:e2:f1:d6:
1e:9f:8d:9e:11:42:93:5c:16:56:55:27:f6:24:d4:
ba:59:cb:c9:6d:5f:fb:a2:af:81:71:8b:2e:39:bc:
5f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:46:62:65:87:11:78:42:56:AC:CB:C9:B7:7A:D3:1D:64:B8:91:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACD66590DFFB11EFBDD60F94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.224.0/20
Signature Algorithm: sha256WithRSAEncryption
70:0b:e1:2b:41:3b:cc:be:01:ef:fb:c1:be:b7:ff:57:7c:e4:
21:da:ac:c7:28:b8:cb:d9:b5:e2:4c:4c:be:a0:d3:b4:02:54:
99:b0:c7:a1:1b:44:2c:11:5a:26:e0:7d:2f:0f:96:55:58:eb:
9f:12:2d:d0:41:83:39:ce:52:55:81:d6:18:44:24:99:7d:2c:
90:bb:d5:b2:b0:85:bf:fd:3c:90:cc:04:af:18:f1:81:1c:1a:
51:10:b4:f7:9d:d8:84:26:7b:7c:b6:19:34:05:7c:8e:0a:88:
34:8b:12:15:8c:2b:80:5d:0a:da:fc:59:5a:44:9e:72:eb:f7:
0c:2d:68:9e:bb:23:b8:91:ca:06:ea:b1:06:a7:93:9c:c8:dd:
d1:40:a3:13:de:b9:26:44:05:f4:5c:34:77:db:75:f3:b7:04:
51:d4:3e:13:f0:c7:a1:01:50:36:c9:f1:e3:b4:4d:cf:4a:1c:
43:9d:c1:82:d4:3d:da:57:fa:b9:07:88:47:0e:d3:ca:ea:bc:
27:5b:6d:f9:4a:8a:5c:6b:b1:2c:cb:2c:62:72:ba:8a:84:c4:
06:12:1d:3e:42:bc:31:0d:bd:1e:ba:f9:ee:5e:77:c7:ce:53:
b8:aa:7d:fc:b9:5d:3e:61:9c:8f:d3:25:cc:0d:a2:d3:d3:5c:
a0:98:02:af
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARbDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTMxMTc0OTA3WhcNMjUwMzAzMTc0OTA3WjAYMRYw
FAYDVQQDEw02NzlkMGQxNi1kZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA14HQBPZPJ9wAZB5gV5v2lJJS55d/8TBKh7LZplagYKiD5k/FcbyH+b1I
qWovX5KYKAHrUcvUW9Ht1Z5AP8hDZmmo23A/ft7DVnTBrDecqvF/WPVtGguyReEP
XMBT4nxVEtWujdR73kgsNUicNSKT+8C97wJ7qAP0KYHYRDub7bF0kaojesjGCKKd
DLgsPR9G46Epk7uOl29P2JXl6Vr78pSk4g8zr2waUh951fYtDCPQsX6KNgCdlpby
kQZ76z7lo68xqf0C2VwXv7l3IBr8UDDg4uv58RaW7HosuSTi8dYen42eEUKTXBZW
VSf2JNS6WcvJbV/7oq+BcYsuObxf2wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJFG
YmWHEXhCVqzLybd60x1kuJHYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQ0Q2NjU5MERGRkIxMUVGQkRENjBGOTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcvgMA0GCSqGSIb3DQEBCwUA
A4IBAQBwC+ErQTvMvgHv+8G+t/9XfOQh2qzHKLjL2bXiTEy+oNO0AlSZsMehG0Qs
EVom4H0vD5ZVWOufEi3QQYM5zlJVgdYYRCSZfSyQu9WysIW//TyQzASvGPGBHBpR
ELT3ndiEJnt8thk0BXyOCog0ixIVjCuAXQra/FlaRJ5y6/cMLWieuyO4kcoG6rEG
p5OcyN3RQKMT3rkmRAX0XDR323XztwRR1D4T8MehAVA2yfHjtE3PShxDncGC1D3a
V/q5B4hHDtPK6rwnW235Sopca7EsyyxicrqKhMQGEh0+QrwxDb0euvnuXnfHzlO4
qn38uV0+YZyP0yXMDaLT01ygmAKv
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:18 2025 by rpki-client