Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B42BC392D80A11EF9D6FFC9D762E951A.roa
File: B42BC392D80A11EF9D6FFC9D762E951A.roa (raw, json)
Hash identifier: r2JMe8eo9afusPJCkJaw3DFtCl0YVVSEQPmVjGTY1y0=
Subject key identifier: 91:31:CF:3D:5E:DC:8E:0F:95:0D:67:6B:DD:30:39:13:A2:D2:6C:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B42BC392D80A11EF9D6FFC9D762E951A.roa
Signing time: Tue 21 Jan 2025 15:16:36 +0000
ROA not before: Tue 21 Jan 2025 15:16:32 +0000
ROA not after: Sat 01 Feb 2025 15:16:32 +0000
asID: 44559
IP address blocks: 45.199.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69180 (0x10e3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 15:16:32 2025 GMT
Not After : Feb 1 15:16:32 2025 GMT
Subject: CN=678fba53-74c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:16:76:08:f3:d0:00:30:92:0d:8d:98:b2:
52:14:b1:35:87:6e:b7:e6:f1:b6:59:86:0a:40:ee:
b9:8d:64:3c:36:01:3e:fe:f4:57:78:55:f2:31:53:
5c:28:ff:b2:33:3e:ac:17:cb:84:79:04:2a:8c:65:
20:f5:13:70:d0:fb:91:a4:94:0f:f5:50:7c:85:87:
1e:98:f1:d9:5e:cb:f1:44:f6:ae:0b:3d:13:cf:1c:
dd:c3:8f:91:40:10:e0:1d:1b:c7:65:33:6f:0d:32:
14:bb:8f:55:da:ee:55:30:2d:3c:e4:31:f5:86:cf:
2e:f1:2f:ba:0e:c5:7b:e5:2b:93:bc:83:c6:dd:bf:
03:5d:fb:8b:91:c2:35:62:f6:f4:e9:ec:34:0e:ed:
4d:89:78:64:43:cb:af:eb:2d:9c:ea:6f:a1:fb:9d:
05:74:10:82:79:9a:b9:b5:a4:b5:c7:9e:56:25:b4:
81:6f:73:16:55:52:c5:42:9e:12:d2:95:21:fb:4a:
94:ad:60:2d:2a:c4:ec:1a:a6:05:a0:91:d6:18:1d:
98:27:b6:19:f6:61:db:ad:9c:23:68:0e:de:1f:2a:
27:da:99:43:3a:b4:ed:cf:2f:79:04:1b:74:43:69:
7d:85:25:2e:b6:9a:ef:e2:26:d3:01:4a:e9:48:a0:
4a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:31:CF:3D:5E:DC:8E:0F:95:0D:67:6B:DD:30:39:13:A2:D2:6C:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B42BC392D80A11EF9D6FFC9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.214.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ee:9b:60:64:7f:5a:af:7c:cc:fd:93:b5:a6:b2:06:e1:b9:
d8:df:6d:c7:62:52:dd:3b:0a:9b:4e:14:65:70:f2:3b:da:77:
7a:c4:f7:a7:f9:2a:c9:6f:51:88:c2:78:4f:33:e3:8d:5d:25:
e9:6d:1e:7b:29:db:ce:6f:7f:e1:95:8e:8a:e1:aa:77:70:59:
ce:75:26:06:d3:a4:10:ff:cf:2e:1d:09:9f:2a:8a:91:76:41:
f3:ce:65:c8:d1:1a:0f:75:da:b9:82:70:93:4c:89:0b:c5:68:
2c:c2:1e:71:e9:8a:24:2a:fc:e9:67:22:0b:7f:e6:81:f0:56:
a8:65:b8:95:b5:cb:3c:5f:f5:1c:f8:bc:b7:cc:24:e1:c4:ce:
76:5b:87:a7:44:66:7d:a6:32:c4:54:3a:1a:29:ae:08:e9:e6:
c5:42:f1:1b:fc:6a:49:4a:c0:3f:a2:75:fc:ef:5c:e0:85:cd:
a8:38:df:9f:a4:b8:42:a8:d8:3c:74:38:a5:0d:75:f7:de:a5:
3c:38:7b:db:2c:a8:ef:fc:39:11:65:f7:59:a7:74:3b:f9:db:
a7:f2:35:78:9a:10:7d:97:c4:9b:37:5b:75:b5:c9:4b:02:7f:
a0:fb:c6:52:a9:df:0a:84:f4:16:b3:22:c0:e1:f8:1c:a5:6d:
ec:b5:bf:c2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ48MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTUxNjMyWhcNMjUwMjAxMTUxNjMyWjAYMRYw
FAYDVQQDEw02NzhmYmE1My03NGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAndoWdgjz0AAwkg2NmLJSFLE1h2635vG2WYYKQO65jWQ8NgE+/vRXeFXy
MVNcKP+yMz6sF8uEeQQqjGUg9RNw0PuRpJQP9VB8hYcemPHZXsvxRPauCz0Tzxzd
w4+RQBDgHRvHZTNvDTIUu49V2u5VMC085DH1hs8u8S+6DsV75SuTvIPG3b8DXfuL
kcI1Yvb06ew0Du1NiXhkQ8uv6y2c6m+h+50FdBCCeZq5taS1x55WJbSBb3MWVVLF
Qp4S0pUh+0qUrWAtKsTsGqYFoJHWGB2YJ7YZ9mHbrZwjaA7eHyon2plDOrTtzy95
BBt0Q2l9hSUutprv4ibTAUrpSKBKbwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJEx
zz1e3I4PlQ1na90wOROi0myBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNDJCQzM5MkQ4MEExMUVGOUQ2RkZDOUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfWMA0GCSqGSIb3DQEBCwUA
A4IBAQCA7ptgZH9ar3zM/ZO1prIG4bnY323HYlLdOwqbThRlcPI72nd6xPen+SrJ
b1GIwnhPM+ONXSXpbR57KdvOb3/hlY6K4ap3cFnOdSYG06QQ/88uHQmfKoqRdkHz
zmXI0RoPddq5gnCTTIkLxWgswh5x6YokKvzpZyILf+aB8FaoZbiVtcs8X/Uc+Ly3
zCThxM52W4enRGZ9pjLEVDoaKa4I6ebFQvEb/GpJSsA/onX871zghc2oON+fpLhC
qNg8dDilDXX33qU8OHvbLKjv/DkRZfdZp3Q7+dun8jV4mhB9l8SbN1t1tclLAn+g
+8ZSqd8KhPQWsyLA4fgcpW3stb/C
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:19:56 2025 by rpki-client