Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C45767FCDFF911EF854AEC86762E951A.roa
File: C45767FCDFF911EF854AEC86762E951A.roa (raw, json)
Hash identifier: FAUu2NY7ZE6TH7aFkKuqWOpmgW9xBDeuwaogC8KtK/E=
Subject key identifier: C4:CE:3A:0F:DC:82:EE:40:86:CC:80:5F:39:28:7F:DD:A3:E0:D2:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C45767FCDFF911EF854AEC86762E951A.roa
Signing time: Fri 31 Jan 2025 17:35:31 +0000
ROA not before: Fri 31 Jan 2025 17:35:27 +0000
ROA not after: Tue 11 Feb 2025 17:35:27 +0000
asID: 200373
IP address blocks: 45.201.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71357 (0x116bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 17:35:27 2025 GMT
Not After : Feb 11 17:35:27 2025 GMT
Subject: CN=679d09e2-e660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:33:ac:89:de:cc:34:33:32:07:de:f7:cd:
f5:15:7b:d9:a9:7b:96:3d:46:06:86:94:90:48:58:
65:a6:26:b6:75:92:f7:9a:73:a0:7a:ab:ea:64:6a:
c3:f5:ac:75:9a:99:c2:d4:67:3c:ea:16:63:3e:77:
3e:09:b5:f0:81:f1:83:f0:25:71:9f:92:c2:71:45:
f6:ec:82:a1:f1:95:3a:c5:0f:f8:ff:26:0d:44:76:
85:7c:4b:54:9d:4c:c8:07:bc:d5:ef:d5:23:0f:3c:
95:57:4e:72:2e:8f:cf:64:9a:85:f7:4f:04:e6:01:
9d:9a:5f:53:66:02:c5:52:aa:ef:30:10:f7:fd:08:
e5:bb:1b:1d:80:7a:bd:b9:66:ea:61:9b:aa:48:6a:
38:ea:ec:c0:68:9d:b0:07:2b:8e:99:f7:16:3d:c4:
cb:b0:fc:c5:96:38:85:a8:af:59:77:7f:4d:e4:6e:
7c:e1:86:3f:22:05:d2:11:ab:d6:a7:70:59:88:9f:
91:69:5f:6c:30:4d:99:c7:4b:9f:5d:e9:91:c6:28:
40:28:a8:77:61:a6:3a:28:0b:0c:86:83:7f:e2:af:
3e:ce:40:2d:f8:df:cb:4f:b0:21:eb:ab:ed:37:96:
ad:c5:75:86:46:63:b9:fc:3b:7a:6b:4e:73:b0:01:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CE:3A:0F:DC:82:EE:40:86:CC:80:5F:39:28:7F:DD:A3:E0:D2:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C45767FCDFF911EF854AEC86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:53:96:7c:4c:72:c7:79:5f:1c:0a:1b:a1:9b:d8:4b:fa:bc:
04:c1:6c:57:d4:bc:76:58:89:e7:07:bd:38:81:0f:b5:b8:56:
15:38:ad:8c:11:5f:6d:70:31:70:9a:6d:92:24:d1:f1:26:a1:
80:57:01:fd:29:c8:a5:bd:03:84:e0:33:eb:ee:d2:ac:7f:1e:
ea:8a:91:91:e8:15:61:3f:7d:c1:e1:f1:75:3d:4c:d5:23:da:
f7:7f:74:21:d9:eb:bd:40:6e:ae:0e:9c:56:e5:5b:97:e5:60:
47:9c:b4:9c:a4:c6:3a:2b:76:4c:d1:d9:a9:76:f5:ba:15:ee:
a9:81:fa:9d:d8:b7:a0:fe:cc:f3:64:8b:a5:dd:7b:a3:1c:a3:
02:3b:e3:c2:d5:11:ab:6f:20:1a:89:d2:9a:54:bf:41:d0:56:
a0:5a:f7:b0:d1:88:35:b9:d1:25:3a:38:a7:f6:39:db:db:0e:
26:4c:7a:ad:a3:b7:e0:25:75:c9:43:8d:6b:25:f0:d4:a9:67:
2b:07:92:ad:ad:b4:27:7e:34:b7:55:cd:f5:6b:21:be:91:05:
96:b5:8f:c9:f2:cc:d0:5f:d0:a1:f3:59:10:70:53:6e:36:60:
fa:10:06:b4:4f:e4:e6:bb:a5:ec:55:09:c3:b0:5a:d6:ea:13:
e2:64:42:5b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARa9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTMxMTczNTI3WhcNMjUwMjExMTczNTI3WjAYMRYw
FAYDVQQDEw02NzlkMDllMi1lNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAruwzrInezDQzMgfe9831FXvZqXuWPUYGhpSQSFhlpia2dZL3mnOgeqvq
ZGrD9ax1mpnC1Gc86hZjPnc+CbXwgfGD8CVxn5LCcUX27IKh8ZU6xQ/4/yYNRHaF
fEtUnUzIB7zV79UjDzyVV05yLo/PZJqF908E5gGdml9TZgLFUqrvMBD3/Qjluxsd
gHq9uWbqYZuqSGo46uzAaJ2wByuOmfcWPcTLsPzFljiFqK9Zd39N5G584YY/IgXS
EavWp3BZiJ+RaV9sME2Zx0ufXemRxihAKKh3YaY6KAsMhoN/4q8+zkAt+N/LT7Ah
66vtN5atxXWGRmO5/Dt6a05zsAGp8QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMTO
Og/cgu5AhsyAXzkof92j4NLDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNDU3NjdGQ0RGRjkxMUVGODU0QUVDODY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALckLMA0GCSqGSIb3DQEBCwUA
A4IBAQCoU5Z8THLHeV8cChuhm9hL+rwEwWxX1Lx2WInnB704gQ+1uFYVOK2MEV9t
cDFwmm2SJNHxJqGAVwH9KcilvQOE4DPr7tKsfx7qipGR6BVhP33B4fF1PUzVI9r3
f3Qh2eu9QG6uDpxW5VuX5WBHnLScpMY6K3ZM0dmpdvW6Fe6pgfqd2Leg/szzZIul
3XujHKMCO+PC1RGrbyAaidKaVL9B0FagWvew0Yg1udElOjin9jnb2w4mTHqto7fg
JXXJQ41rJfDUqWcrB5KtrbQnfjS3Vc31ayG+kQWWtY/J8szQX9Ch81kQcFNuNmD6
EAa0T+Tmu6XsVQnDsFrW6hPiZEJb
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:18 2025 by rpki-client