Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B102326CDA9B11EFADF7B64E762E951A.roa
File: B102326CDA9B11EFADF7B64E762E951A.roa (raw, json)
Hash identifier: ni9ggonbHtLKJCHdvXrrI0U72AR73w33ygC75H6mpCU=
Subject key identifier: CC:7D:09:65:68:25:E3:21:B6:D6:35:8B:DE:80:3D:14:EC:28:DF:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B102326CDA9B11EFADF7B64E762E951A.roa
Signing time: Fri 24 Jan 2025 21:39:30 +0000
ROA not before: Fri 24 Jan 2025 21:39:26 +0000
ROA not after: Tue 25 Feb 2025 21:39:26 +0000
asID: 202656
IP address blocks: 45.199.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69820 (0x110bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:39:26 2025 GMT
Not After : Feb 25 21:39:26 2025 GMT
Subject: CN=67940891-9dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:f4:6b:d8:5a:02:87:53:67:8c:a4:23:15:
70:7b:8f:02:9a:86:ba:af:fc:08:62:ff:75:21:be:
30:8f:0c:ac:d4:63:d6:13:15:55:b6:96:19:fe:30:
df:ed:08:a8:e4:74:8b:0a:3f:45:03:03:a7:ac:0c:
d0:55:c8:a7:d2:09:5e:38:40:5b:9e:17:c5:14:77:
55:70:f2:58:c0:7f:9f:34:2f:58:24:52:8e:76:63:
52:32:56:a1:13:7e:28:03:64:28:45:09:e1:35:9c:
18:77:9b:b4:7d:73:2c:46:d8:e5:1f:d0:c2:32:12:
9f:38:68:11:41:cb:d3:f9:31:c0:77:b6:8a:ea:3b:
2b:82:e6:f7:ac:4e:a9:22:88:da:f9:7e:90:98:d6:
d4:5f:dc:ea:29:78:78:e7:34:c8:a6:db:fd:7b:0d:
78:64:e0:6a:1f:01:5c:1a:ae:bc:39:06:fb:30:d7:
ee:2b:21:ca:a3:7b:9c:d4:8d:d9:ab:8b:7c:2d:2b:
cf:0a:c6:0b:24:2f:46:7e:60:0e:0a:a4:46:f2:71:
68:8a:7c:f9:03:83:14:ab:3a:e3:ac:d8:d5:34:05:
f7:0a:e7:cd:67:68:8f:b6:a1:6b:4c:fb:25:84:2e:
90:b6:ac:76:cb:e4:b6:0e:2a:51:1b:75:30:ab:a9:
72:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7D:09:65:68:25:E3:21:B6:D6:35:8B:DE:80:3D:14:EC:28:DF:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B102326CDA9B11EFADF7B64E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.226.0/24
Signature Algorithm: sha256WithRSAEncryption
93:9d:f4:7c:ed:ab:f6:fa:fb:47:5a:53:e5:d0:7d:28:ce:0e:
4b:15:dd:5f:1a:d6:a7:98:62:bf:a5:f9:56:91:24:b8:0d:a8:
95:01:58:f5:ae:88:99:4d:6e:b1:82:d9:5d:11:6a:e1:7c:29:
14:79:8f:5c:7e:9a:85:f2:65:b0:fe:3a:54:38:27:06:43:40:
03:e7:4d:27:e8:e3:a5:b3:a8:d6:07:b8:b6:c3:fc:d6:37:1d:
b4:33:d3:13:b0:a8:66:28:19:71:e0:07:36:8e:42:de:f8:c7:
9d:19:e8:40:8e:0f:5b:15:7d:ae:d3:18:cd:d3:6c:45:35:39:
56:0a:74:22:45:a3:fa:a1:9e:f9:46:88:75:ff:c2:11:26:07:
d0:6b:07:47:b3:e3:44:a2:7a:25:91:3a:4c:0d:b6:a1:a8:7b:
e7:8a:b4:1e:1b:30:7f:ed:e4:f7:fe:6e:cd:7c:4d:1d:be:bb:
72:90:18:c9:40:fc:da:24:8a:b7:27:9e:30:b1:8e:e0:8e:c4:
8a:60:de:8a:f9:28:fe:21:43:e3:d0:c9:19:81:c6:c3:4d:02:
d6:2a:03:5e:1c:d6:9d:52:39:2f:f5:66:89:cc:0e:23:a2:c4:
a9:da:40:d4:a8:17:b9:97:d6:5f:d4:58:8b:54:0f:99:f3:a8:
6a:05:38:67
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARC8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MjEzOTI2WhcNMjUwMjI1MjEzOTI2WjAYMRYw
FAYDVQQDEw02Nzk0MDg5MS05ZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApnH0a9haAodTZ4ykIxVwe48Cmoa6r/wIYv91Ib4wjwys1GPWExVVtpYZ
/jDf7Qio5HSLCj9FAwOnrAzQVcin0gleOEBbnhfFFHdVcPJYwH+fNC9YJFKOdmNS
MlahE34oA2QoRQnhNZwYd5u0fXMsRtjlH9DCMhKfOGgRQcvT+THAd7aK6jsrgub3
rE6pIoja+X6QmNbUX9zqKXh45zTIptv9ew14ZOBqHwFcGq68OQb7MNfuKyHKo3uc
1I3Zq4t8LSvPCsYLJC9GfmAOCqRG8nFoinz5A4MUqzrjrNjVNAX3CufNZ2iPtqFr
TPslhC6Qtqx2y+S2DipRG3Uwq6lyrwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMx9
CWVoJeMhttY1i96APRTsKN9ZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMTAyMzI2Q0RBOUIxMUVGQURGN0I2NEU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfiMA0GCSqGSIb3DQEBCwUA
A4IBAQCTnfR87av2+vtHWlPl0H0ozg5LFd1fGtanmGK/pflWkSS4DaiVAVj1roiZ
TW6xgtldEWrhfCkUeY9cfpqF8mWw/jpUOCcGQ0AD500n6OOls6jWB7i2w/zWNx20
M9MTsKhmKBlx4Ac2jkLe+MedGehAjg9bFX2u0xjN02xFNTlWCnQiRaP6oZ75Roh1
/8IRJgfQawdHs+NEonolkTpMDbahqHvnirQeGzB/7eT3/m7NfE0dvrtykBjJQPza
JIq3J54wsY7gjsSKYN6K+Sj+IUPj0MkZgcbDTQLWKgNeHNadUjkv9WaJzA4josSp
2kDUqBe5l9Zf1FiLVA+Z86hqBThn
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:29 2025 by rpki-client