Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB8BCE9ED58411EFA653C69B762E951A.roa
File: BB8BCE9ED58411EFA653C69B762E951A.roa (raw, json)
Hash identifier: yXFk2qv2EnSsxFsKpqrPKp4rcmGDhbCcY4qxNpmZd5U=
Subject key identifier: 3B:6A:00:3A:46:80:A5:7D:9D:64:7A:73:42:F5:25:4A:FF:A4:4A:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B73
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB8BCE9ED58411EFA653C69B762E951A.roa
Signing time: Sat 18 Jan 2025 10:12:33 +0000
ROA not before: Sat 18 Jan 2025 10:12:29 +0000
ROA not after: Sun 23 Feb 2025 10:12:29 +0000
asID: 395793
IP address blocks: 45.201.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68467 (0x10b73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 10:12:29 2025 GMT
Not After : Feb 23 10:12:29 2025 GMT
Subject: CN=678b7e91-bb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:bb:f9:74:96:2d:f6:d7:6a:7d:62:d3:9b:
07:56:0a:c9:26:90:c0:31:1d:d4:fd:2c:21:a7:8c:
09:42:f3:f8:a9:b0:0e:fd:2a:5d:92:d8:e4:98:e9:
22:07:a1:ac:5a:30:c0:77:eb:d9:6a:31:4c:07:ca:
8f:a7:60:62:43:b8:27:7c:54:6f:e2:03:6b:52:20:
06:3e:5e:79:99:54:67:96:5b:65:df:01:11:c5:e5:
1e:27:59:d2:49:dc:f5:30:47:b1:95:e0:7f:76:45:
76:b8:ba:c2:26:c3:94:d9:cf:e8:eb:45:11:89:d2:
58:31:46:43:cd:ea:da:e3:16:2b:5d:47:e1:03:9c:
57:9a:68:09:1d:a3:e1:12:ab:65:fb:a7:df:00:bb:
79:3c:4a:81:b0:3f:7c:95:a5:7d:29:48:a3:24:83:
e6:ed:04:d0:69:8b:c6:12:64:3a:c6:78:80:19:f9:
ff:06:9d:7d:f4:41:de:f0:7c:fb:a2:46:fb:1b:43:
bd:59:08:37:71:d5:71:17:b2:4b:8e:83:86:a8:0f:
cd:1c:5f:fc:69:bd:9d:7b:52:04:28:6e:04:00:ba:
0a:92:02:d9:c0:d3:45:13:f7:67:88:f6:86:4b:dd:
3c:27:fb:e3:9b:aa:1e:a4:a7:36:9f:90:23:08:19:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6A:00:3A:46:80:A5:7D:9D:64:7A:73:42:F5:25:4A:FF:A4:4A:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB8BCE9ED58411EFA653C69B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a2:be:48:70:e2:46:f9:14:e6:96:fb:74:bc:e2:28:93:88:
1f:1f:8b:e3:69:e0:86:c9:43:37:00:d7:5b:9a:66:c3:69:e8:
f1:cc:62:76:77:e9:ce:e4:37:fd:69:5a:01:6d:7e:dc:f1:40:
ab:4d:c6:ce:3a:1b:f2:91:b7:80:37:c8:09:b8:02:8f:e1:ca:
c2:ed:89:2f:b3:b0:9a:01:66:56:1d:7f:6a:ba:f2:c1:5f:00:
f7:1f:7d:d3:8e:9b:bc:e2:a2:28:32:6a:d7:ee:1d:67:1b:8d:
28:a0:2e:ff:60:86:98:81:49:8f:07:b7:a2:a7:66:3a:f8:76:
2a:fe:21:c3:02:6a:eb:b3:6d:62:60:b4:a5:35:7c:d0:1a:43:
3a:6d:f9:aa:94:49:07:48:31:83:73:a5:b5:f3:1b:1a:fc:9b:
a6:56:2f:e8:29:1c:12:04:47:b3:4d:74:4d:41:14:ae:1a:5b:
a6:3f:07:90:50:aa:63:c1:16:a0:1b:47:9e:3d:1d:ce:a3:8b:
cd:cb:5f:28:b5:f1:53:17:d4:d1:e3:d7:8a:f0:13:88:cb:92:
bc:74:c2:c4:96:0c:90:fb:e0:29:fb:62:38:b2:b2:d3:bf:c5:
3a:ea:83:86:59:92:c6:01:4a:20:f7:a3:f8:4b:2e:a0:83:2c:
cd:91:29:14
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQtzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE4MTAxMjI5WhcNMjUwMjIzMTAxMjI5WjAYMRYw
FAYDVQQDEw02NzhiN2U5MS1iYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnDe7+XSWLfbXan1i05sHVgrJJpDAMR3U/Swhp4wJQvP4qbAO/Spdktjk
mOkiB6GsWjDAd+vZajFMB8qPp2BiQ7gnfFRv4gNrUiAGPl55mVRnlltl3wERxeUe
J1nSSdz1MEexleB/dkV2uLrCJsOU2c/o60URidJYMUZDzera4xYrXUfhA5xXmmgJ
HaPhEqtl+6ffALt5PEqBsD98laV9KUijJIPm7QTQaYvGEmQ6xniAGfn/Bp199EHe
8Hz7okb7G0O9WQg3cdVxF7JLjoOGqA/NHF/8ab2de1IEKG4EALoKkgLZwNNFE/dn
iPaGS908J/vjm6oepKc2n5AjCBlCSQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDtq
ADpGgKV9nWR6c0L1JUr/pEoUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQjhCQ0U5RUQ1ODQxMUVGQTY1M0M2OUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALckQMA0GCSqGSIb3DQEBCwUA
A4IBAQCnor5IcOJG+RTmlvt0vOIok4gfH4vjaeCGyUM3ANdbmmbDaejxzGJ2d+nO
5Df9aVoBbX7c8UCrTcbOOhvykbeAN8gJuAKP4crC7Ykvs7CaAWZWHX9quvLBXwD3
H33Tjpu84qIoMmrX7h1nG40ooC7/YIaYgUmPB7eip2Y6+HYq/iHDAmrrs21iYLSl
NXzQGkM6bfmqlEkHSDGDc6W18xsa/JumVi/oKRwSBEezTXRNQRSuGlumPweQUKpj
wRagG0eePR3Oo4vNy18otfFTF9TR49eK8BOIy5K8dMLElgyQ++Ap+2I4srLTv8U6
6oOGWZLGAUog96P4Sy6ggyzNkSkU
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:50 2025 by rpki-client