Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA188AA2D80411EF8BF32578762E951A.roa
File: BA188AA2D80411EF8BF32578762E951A.roa (raw, json)
Hash identifier: k0B2Qr9lWdPlvA0q+v1pIuythojHYzjfSMKwnkxRnDw=
Subject key identifier: 12:A9:CC:2F:01:9E:80:3D:75:3C:07:57:E7:AF:0E:F3:D6:B6:B3:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E12
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA188AA2D80411EF8BF32578762E951A.roa
Signing time: Tue 21 Jan 2025 14:33:49 +0000
ROA not before: Tue 21 Jan 2025 14:33:45 +0000
ROA not after: Sat 01 Feb 2025 14:33:45 +0000
asID: 62240
IP address blocks: 45.192.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69138 (0x10e12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:33:45 2025 GMT
Not After : Feb 1 14:33:45 2025 GMT
Subject: CN=678fb04c-aa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:b4:c8:2c:06:c4:ad:1f:80:47:48:ff:50:
53:44:ad:3c:a7:4f:6a:84:8a:7f:98:05:bb:a6:da:
27:7a:2e:8a:1f:ab:94:88:1a:38:f2:89:2e:c1:32:
d4:34:d8:1c:ed:56:43:e4:17:49:b2:93:36:91:18:
b8:a3:b5:8d:d8:5a:72:6b:79:23:9a:64:99:27:59:
4b:95:e8:23:5f:d2:46:24:5e:f4:dd:1b:32:19:a7:
2b:15:1a:37:06:07:4f:ae:3f:d8:fd:0c:1b:ad:b0:
ee:c0:f0:1c:15:ea:ef:7f:74:74:be:56:7b:95:39:
07:59:9d:cd:57:51:4f:fe:68:9c:89:1d:98:b5:71:
ee:0a:bf:8b:89:1d:ff:b0:cd:fc:fa:c6:c1:66:36:
bd:7e:79:d1:16:83:df:1a:f8:44:fa:33:83:52:aa:
4a:0b:34:fd:0b:d8:c6:e0:42:77:45:8c:b0:0c:48:
12:b4:0e:a6:c2:53:d9:26:7e:10:55:b7:e3:d0:d3:
3c:12:32:e0:bd:84:7f:be:20:27:31:e1:78:ee:17:
a0:4f:b2:38:7d:6c:a9:bc:af:de:74:3d:85:78:62:
eb:58:3c:d0:4b:69:2c:09:63:07:fc:03:e8:9c:87:
97:7c:b3:24:9c:41:a9:25:10:e5:17:ad:ee:bb:51:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A9:CC:2F:01:9E:80:3D:75:3C:07:57:E7:AF:0E:F3:D6:B6:B3:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA188AA2D80411EF8BF32578762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.44.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:33:3e:ed:88:a8:e4:36:cd:62:ca:38:a8:e0:f6:1f:fa:13:
3b:3f:ce:27:90:65:79:56:9c:3c:bd:c8:a6:96:39:b1:ca:27:
d4:94:0e:29:61:bd:07:c8:13:96:14:85:be:85:25:39:30:bc:
46:23:bf:45:23:d1:b3:97:1d:7a:23:9f:b5:88:37:d9:02:89:
04:f5:9d:08:54:cb:d8:23:8d:a2:0c:db:c3:a0:32:7d:37:51:
2f:c3:cf:ee:f6:d9:c3:f3:ce:87:ae:37:ba:2b:bd:b7:cd:a7:
1f:2e:06:a8:4e:f4:39:cb:f0:ba:60:18:28:18:eb:b3:28:04:
07:1e:b7:31:8d:f8:e3:8a:aa:28:d1:66:05:ca:9a:e2:33:e4:
27:f3:4b:15:92:7a:5b:8b:a5:b1:24:b3:75:eb:14:17:82:2e:
91:c4:0b:db:03:22:1f:b3:17:62:4e:d1:79:17:b8:87:a4:14:
0a:21:a8:72:b8:b5:21:0e:fa:ab:54:4e:66:c4:94:60:6e:00:
7c:ab:c7:eb:f2:f7:ee:0b:56:22:89:5d:9e:c9:33:b1:1c:24:
03:cc:2c:98:9c:13:73:86:73:d4:23:56:70:34:8c:cc:1a:f9:
74:fb:98:0f:55:fc:b3:ff:99:1d:69:43:67:4f:bd:41:ac:89:
f8:72:bb:9a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ4SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTQzMzQ1WhcNMjUwMjAxMTQzMzQ1WjAYMRYw
FAYDVQQDEw02NzhmYjA0Yy1hYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAssW0yCwGxK0fgEdI/1BTRK08p09qhIp/mAW7ptonei6KH6uUiBo48oku
wTLUNNgc7VZD5BdJspM2kRi4o7WN2Fpya3kjmmSZJ1lLlegjX9JGJF703RsyGacr
FRo3BgdPrj/Y/QwbrbDuwPAcFervf3R0vlZ7lTkHWZ3NV1FP/miciR2YtXHuCr+L
iR3/sM38+sbBZja9fnnRFoPfGvhE+jODUqpKCzT9C9jG4EJ3RYywDEgStA6mwlPZ
Jn4QVbfj0NM8EjLgvYR/viAnMeF47hegT7I4fWypvK/edD2FeGLrWDzQS2ksCWMH
/APonIeXfLMknEGpJRDlF63uu1HBxQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBKp
zC8BnoA9dTwHV+evDvPWtrNvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQTE4OEFBMkQ4MDQxMUVGOEJGMzI1Nzg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAsMA0GCSqGSIb3DQEBCwUA
A4IBAQBtMz7tiKjkNs1iyjio4PYf+hM7P84nkGV5Vpw8vcimljmxyifUlA4pYb0H
yBOWFIW+hSU5MLxGI79FI9Gzlx16I5+1iDfZAokE9Z0IVMvYI42iDNvDoDJ9N1Ev
w8/u9tnD886Hrje6K723zacfLgaoTvQ5y/C6YBgoGOuzKAQHHrcxjfjjiqoo0WYF
ypriM+Qn80sVknpbi6WxJLN16xQXgi6RxAvbAyIfsxdiTtF5F7iHpBQKIahyuLUh
DvqrVE5mxJRgbgB8q8fr8vfuC1YiiV2eyTOxHCQDzCyYnBNzhnPUI1ZwNIzMGvl0
+5gPVfyz/5kdaUNnT71BrIn4crua
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:04:30 2025 by rpki-client