Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B42C6FB0DB0F11EF99AE2E66762E951A.roa
File: B42C6FB0DB0F11EF99AE2E66762E951A.roa (raw, json)
Hash identifier: vZxA4x6q8O/ES+Wsun5vmRZrke73YIlnG7VseFh51aA=
Subject key identifier: C7:E7:F6:47:C6:19:7B:41:BD:24:82:64:1F:23:16:81:4C:1B:E7:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011221
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B42C6FB0DB0F11EF99AE2E66762E951A.roa
Signing time: Sat 25 Jan 2025 11:29:57 +0000
ROA not before: Sat 25 Jan 2025 11:29:53 +0000
ROA not after: Sun 23 Feb 2025 11:29:53 +0000
asID: 44559
IP address blocks: 45.199.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70177 (0x11221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 11:29:53 2025 GMT
Not After : Feb 23 11:29:53 2025 GMT
Subject: CN=6794cb34-feb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:77:bb:dd:db:59:0e:cc:f8:d8:1c:49:4a:
27:56:e2:79:e0:f7:d5:64:e7:6b:9a:74:05:92:a6:
c5:db:da:23:d7:08:81:87:2e:69:50:45:1e:ab:a5:
b4:18:a7:f2:58:18:67:db:b7:c0:66:96:27:7f:c4:
da:4e:87:3e:88:1f:80:ee:28:28:cc:76:64:a2:d2:
44:77:67:c5:2d:f2:7b:0e:86:f8:f6:f2:84:71:29:
5f:de:fa:4a:d8:3f:39:04:43:e1:77:55:ec:e4:00:
66:d4:5a:b8:15:ef:a4:df:3b:7f:e3:e8:3e:7e:8e:
7f:ff:30:2e:7c:f4:28:6c:04:5d:d0:25:b1:c6:68:
cb:5c:da:b5:94:b0:de:e4:34:5c:d8:6a:31:f4:b6:
16:b5:38:68:94:0a:ea:b3:06:7f:70:50:bf:ed:06:
20:0f:92:4c:6b:1c:ba:b6:d8:87:91:c0:c1:a8:e3:
8e:d4:90:b1:8e:e6:c4:63:0a:9e:e8:57:aa:24:6b:
0b:88:a6:b9:fa:25:02:d8:8c:67:a2:16:5a:33:46:
35:9c:f7:a9:72:b1:30:c4:f6:d6:2b:c8:af:ce:af:
cd:dd:fa:df:9a:c0:e9:d7:a8:13:ad:6d:e2:ae:93:
c4:8c:83:8a:ec:07:5d:46:37:63:f3:6a:38:ae:99:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E7:F6:47:C6:19:7B:41:BD:24:82:64:1F:23:16:81:4C:1B:E7:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B42C6FB0DB0F11EF99AE2E66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d1:31:fc:92:5c:e8:db:5f:e7:a6:2a:b2:76:8c:4f:9e:3c:
9a:b7:2e:da:aa:46:a0:66:4b:2a:0a:d8:65:e9:ee:24:7b:a2:
61:a5:11:ff:8f:cf:b6:a8:1d:1a:6b:52:0c:b5:38:16:2a:c0:
63:f4:c0:af:f2:64:18:77:48:bf:ce:d2:bc:29:45:a4:cc:0d:
12:17:4b:e9:ee:f3:a8:dc:61:45:f3:86:f6:e6:75:a1:b0:6d:
d4:3c:c8:4c:40:c6:d8:d4:68:a5:65:1c:b5:94:d3:66:ee:a9:
58:03:c0:a4:98:00:25:a4:04:29:14:c8:2a:ae:f3:d8:ba:b2:
56:f6:93:ee:3f:7c:e1:64:65:3d:54:51:ce:59:4e:b4:7a:b8:
3c:57:58:cf:9a:9e:fa:08:94:31:a2:d8:97:e2:58:6e:fa:2d:
5f:65:f0:ff:09:03:24:d5:fd:ab:04:00:4a:d2:14:01:5e:fd:
bb:f5:c2:16:82:8f:13:5f:2a:f7:f0:ac:60:0c:a5:78:65:cd:
c8:fa:3d:ee:a9:85:08:2a:b7:cc:08:7c:91:42:83:f6:d9:26:
e8:be:eb:bd:80:84:bc:b8:ca:b9:20:59:b7:4c:c4:0f:54:87:
74:f5:32:51:70:59:4b:52:13:13:0e:09:2a:02:b8:a9:1b:4e:
4b:a7:77:e2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARIhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTEyOTUzWhcNMjUwMjIzMTEyOTUzWjAYMRYw
FAYDVQQDEw02Nzk0Y2IzNC1mZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuoV3u93bWQ7M+NgcSUonVuJ54PfVZOdrmnQFkqbF29oj1wiBhy5pUEUe
q6W0GKfyWBhn27fAZpYnf8TaToc+iB+A7igozHZkotJEd2fFLfJ7Dob49vKEcSlf
3vpK2D85BEPhd1Xs5ABm1Fq4Fe+k3zt/4+g+fo5//zAufPQobARd0CWxxmjLXNq1
lLDe5DRc2Gox9LYWtTholArqswZ/cFC/7QYgD5JMaxy6ttiHkcDBqOOO1JCxjubE
Ywqe6FeqJGsLiKa5+iUC2IxnohZaM0Y1nPepcrEwxPbWK8ivzq/N3frfmsDp16gT
rW3irpPEjIOK7AddRjdj82o4rpl7hwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMfn
9kfGGXtBvSSCZB8jFoFMG+ddMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNDJDNkZCMERCMEYxMUVGOTlBRTJFNjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfRMA0GCSqGSIb3DQEBCwUA
A4IBAQBa0TH8klzo21/npiqydoxPnjyaty7aqkagZksqCthl6e4ke6JhpRH/j8+2
qB0aa1IMtTgWKsBj9MCv8mQYd0i/ztK8KUWkzA0SF0vp7vOo3GFF84b25nWhsG3U
PMhMQMbY1GilZRy1lNNm7qlYA8CkmAAlpAQpFMgqrvPYurJW9pPuP3zhZGU9VFHO
WU60erg8V1jPmp76CJQxotiX4lhu+i1fZfD/CQMk1f2rBABK0hQBXv279cIWgo8T
Xyr38KxgDKV4Zc3I+j3uqYUIKrfMCHyRQoP22Sbovuu9gIS8uMq5IFm3TMQPVId0
9TJRcFlLUhMTDgkqAripG05Lp3fi
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:27:28 2025 by rpki-client