Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C067FA4ED50911EF8FFE2469762E951A.roa
File: C067FA4ED50911EF8FFE2469762E951A.roa (raw, json)
Hash identifier: T0wCF6RFkhDE0HGhPA8WcJWoG/HQiC8v6HI77HjZ2bo=
Subject key identifier: 44:60:44:0E:BB:8D:16:81:81:66:3B:ED:1B:3B:E6:F2:6F:92:F0:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C067FA4ED50911EF8FFE2469762E951A.roa
Signing time: Fri 17 Jan 2025 19:32:13 +0000
ROA not before: Fri 17 Jan 2025 19:32:09 +0000
ROA not after: Sat 22 Feb 2025 19:32:09 +0000
asID: 54801
IP address blocks: 45.200.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68212 (0x10a74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 19:32:09 2025 GMT
Not After : Feb 22 19:32:09 2025 GMT
Subject: CN=678ab03d-7ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:8c:e8:30:65:2e:d9:fa:1f:bd:0d:86:a2:
96:e8:c2:da:84:f1:f8:25:49:e9:d0:ae:0d:4e:f6:
d9:ac:c9:06:e2:5a:cf:cd:4d:1a:dc:f0:5a:d9:f6:
03:f6:18:f1:bc:1b:70:1e:23:4b:37:95:cb:df:19:
7f:f2:9a:73:1a:b8:e8:0f:eb:1f:6f:3e:73:05:63:
44:ad:e2:65:ac:65:d4:43:73:95:c2:d6:ef:a3:25:
d8:a4:dc:7d:ac:6e:e6:c2:20:d9:05:67:de:5c:60:
af:72:03:c1:fc:92:c6:e4:c5:7c:11:44:43:e8:22:
6c:0d:0b:4f:ab:65:7b:71:dd:94:7b:bf:64:78:76:
22:45:c8:03:ef:a3:00:76:57:19:b8:1a:bf:97:75:
88:43:2d:af:d1:92:70:77:83:5c:b8:ee:50:57:1c:
7e:d2:e0:92:c5:bc:e1:a7:45:82:f4:ed:77:43:21:
73:2c:51:1f:d3:77:eb:ee:03:22:01:e2:37:97:a0:
79:a3:2b:66:87:18:9f:42:4b:f3:2a:78:e9:c6:23:
1a:f8:f4:b7:c9:06:d0:65:9d:f7:6e:7f:03:8b:f4:
67:a6:4f:a4:5b:cf:aa:1e:80:fc:f8:05:4f:c9:f5:
ed:0d:99:e2:b6:b8:b3:c0:2a:52:f7:23:d2:5e:0b:
4d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:60:44:0E:BB:8D:16:81:81:66:3B:ED:1B:3B:E6:F2:6F:92:F0:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C067FA4ED50911EF8FFE2469762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.32.0/19
Signature Algorithm: sha256WithRSAEncryption
83:f9:7d:2e:2f:c2:f7:26:ea:95:79:e5:34:51:be:82:c3:fc:
0a:ab:d5:88:91:66:eb:a7:ab:0d:cb:c8:32:d0:61:35:6e:62:
7a:42:bb:5e:61:ef:f2:bd:81:e2:8b:ca:ba:72:a5:44:63:de:
dc:2c:04:40:d1:9d:5f:b2:7e:d7:16:95:36:68:23:30:40:0a:
5e:01:f3:e9:c4:60:a9:93:ff:7a:81:3e:7d:94:6b:34:c1:5c:
ac:82:88:11:09:25:c2:ed:24:bf:3c:a3:b9:ca:ee:65:d3:2c:
a2:9f:81:b5:eb:fa:d4:67:1c:fc:88:a2:73:59:e3:11:07:25:
ec:50:e8:99:ae:f4:a9:48:ba:ff:40:af:33:f0:a4:48:d2:ca:
be:d1:47:16:65:6b:87:17:f7:37:67:15:11:2f:88:c7:54:a4:
6d:81:6b:63:42:9f:e1:69:19:65:11:ce:ac:f2:95:63:58:81:
91:6d:9b:45:2f:fd:eb:6e:4e:12:2f:1a:dc:bd:4d:f0:b7:4f:
55:3f:ec:76:67:1b:36:04:6e:87:2a:19:10:f8:2b:36:4a:b1:
df:53:0f:88:9f:9a:1b:62:2a:5e:b7:34:55:9c:58:70:2d:2f:
49:8f:1e:ba:03:62:92:0e:d3:18:7f:6e:54:a5:6d:fa:f0:c4:
3d:a1:16:87
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQp0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MTkzMjA5WhcNMjUwMjIyMTkzMjA5WjAYMRYw
FAYDVQQDEw02NzhhYjAzZC03Y2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAteKM6DBlLtn6H70NhqKW6MLahPH4JUnp0K4NTvbZrMkG4lrPzU0a3PBa
2fYD9hjxvBtwHiNLN5XL3xl/8ppzGrjoD+sfbz5zBWNEreJlrGXUQ3OVwtbvoyXY
pNx9rG7mwiDZBWfeXGCvcgPB/JLG5MV8EURD6CJsDQtPq2V7cd2Ue79keHYiRcgD
76MAdlcZuBq/l3WIQy2v0ZJwd4NcuO5QVxx+0uCSxbzhp0WC9O13QyFzLFEf03fr
7gMiAeI3l6B5oytmhxifQkvzKnjpxiMa+PS3yQbQZZ33bn8Di/Rnpk+kW8+qHoD8
+AVPyfXtDZnitrizwCpS9yPSXgtNywIDAQABo4ICojCCAp4wHQYDVR0OBBYEFERg
RA67jRaBgWY77Rs75vJvkvBpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMDY3RkE0RUQ1MDkxMUVGOEZGRTI0Njk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLcggMA0GCSqGSIb3DQEBCwUA
A4IBAQCD+X0uL8L3JuqVeeU0Ub6Cw/wKq9WIkWbrp6sNy8gy0GE1bmJ6QrteYe/y
vYHii8q6cqVEY97cLARA0Z1fsn7XFpU2aCMwQApeAfPpxGCpk/96gT59lGs0wVys
gogRCSXC7SS/PKO5yu5l0yyin4G16/rUZxz8iKJzWeMRByXsUOiZrvSpSLr/QK8z
8KRI0sq+0UcWZWuHF/c3ZxURL4jHVKRtgWtjQp/haRllEc6s8pVjWIGRbZtFL/3r
bk4SLxrcvU3wt09VP+x2Zxs2BG6HKhkQ+Cs2SrHfUw+In5obYipetzRVnFhwLS9J
jx66A2KSDtMYf25UpW368MQ9oRaH
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:25:10 2025 by rpki-client