Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCDBB0F6DAE811EFA71DEC62762E951A.roa
File: CCDBB0F6DAE811EFA71DEC62762E951A.roa (raw, json)
Hash identifier: YO4p3QqzxOONE4ahjRawgHudbjNKOz/2IK4B0CVNTfs=
Subject key identifier: 0D:76:E7:DC:02:C3:3E:B1:38:E6:F6:66:CF:4E:FA:4E:5D:20:9B:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCDBB0F6DAE811EFA71DEC62762E951A.roa
Signing time: Sat 25 Jan 2025 06:51:28 +0000
ROA not before: Sat 25 Jan 2025 06:51:24 +0000
ROA not after: Sun 23 Feb 2025 06:51:24 +0000
asID: 202656
IP address blocks: 45.199.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69865 (0x110e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 06:51:24 2025 GMT
Not After : Feb 23 06:51:24 2025 GMT
Subject: CN=679489ef-18f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:65:c8:cd:8e:20:fe:37:35:d4:78:d7:00:
99:e5:9d:07:d2:08:32:85:52:a1:5c:e3:cb:79:f5:
eb:fc:b8:fa:bd:02:07:a3:64:e7:86:3d:d1:cd:d4:
8e:18:79:d0:3e:b8:a1:49:9e:88:6f:86:2d:9c:1a:
fc:65:c1:6e:a7:5b:58:a5:0a:38:b4:d2:23:87:ce:
fe:c7:61:1d:b6:9e:3c:08:10:1b:32:6b:75:e4:c0:
8b:16:e8:bb:8e:4c:3c:52:b4:ab:6b:c2:30:68:65:
78:06:39:7d:88:44:75:9f:87:16:75:e3:dc:bb:b4:
1d:ca:9d:8f:c8:3f:50:9b:f3:7b:68:b7:6f:21:4b:
bf:7d:da:08:6b:a7:ae:72:b4:0c:0d:c6:92:1e:44:
b9:35:c9:11:4d:f7:0e:9c:65:e0:10:df:16:28:94:
bc:6e:c4:51:28:5d:e6:61:b3:66:85:4f:f3:3e:75:
50:5c:60:d7:c1:8a:0b:ac:02:6a:0f:c0:cc:e2:50:
95:63:54:20:61:ab:38:88:d4:43:09:06:cb:a1:95:
e5:f0:5d:a5:de:ab:f7:23:e1:6c:60:c5:b9:e3:bb:
25:3b:d0:86:23:63:70:a5:77:29:d3:be:75:80:0c:
34:f9:ba:74:e0:9b:31:b3:01:1a:da:58:8b:e9:e5:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:76:E7:DC:02:C3:3E:B1:38:E6:F6:66:CF:4E:FA:4E:5D:20:9B:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCDBB0F6DAE811EFA71DEC62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ab:8e:4c:d6:b3:e5:b6:68:56:0f:64:b3:12:bc:38:28:bf:
c3:57:da:8a:a6:1a:46:0f:09:54:89:01:51:e2:65:d4:c6:6a:
5c:db:ce:87:5f:ec:18:a9:f7:48:05:24:8f:bc:e5:f7:12:dc:
10:24:63:d3:6e:f5:b2:2f:8b:39:d6:39:b0:af:1e:9b:7a:94:
d5:7b:24:f5:ef:f8:2d:80:6c:a8:c1:96:b7:b8:95:c4:0d:fb:
0e:57:15:99:10:60:f3:f2:60:a2:b8:20:52:d9:96:ad:ca:64:
b4:0b:5d:c2:7a:c8:2c:9c:9d:21:45:50:e8:d8:db:0d:1c:cb:
9b:70:a8:df:f0:58:53:1e:4d:30:d6:02:18:1d:4d:29:20:a0:
b3:d2:64:21:08:6d:90:f2:b4:db:7d:3c:67:a5:72:55:fe:a1:
fb:9b:f8:85:5f:76:cd:d0:b3:85:65:d8:5a:6d:7f:13:35:25:
04:bb:66:75:60:2b:bd:0e:98:4b:64:6b:29:9a:b1:23:2d:52:
b9:02:ad:71:f6:7b:0a:b1:9c:43:0b:c1:4d:1b:41:54:d6:b6:
1a:56:f2:74:34:31:19:72:67:22:af:90:87:86:de:41:ce:dd:
72:b7:f5:8a:5a:fe:33:ef:47:6b:3f:ad:b1:27:bc:3b:39:17:
bd:c0:e0:ce
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARDpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MDY1MTI0WhcNMjUwMjIzMDY1MTI0WjAYMRYw
FAYDVQQDEw02Nzk0ODllZi0xOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsydlyM2OIP43NdR41wCZ5Z0H0ggyhVKhXOPLefXr/Lj6vQIHo2Tnhj3R
zdSOGHnQPrihSZ6Ib4YtnBr8ZcFup1tYpQo4tNIjh87+x2Edtp48CBAbMmt15MCL
Fui7jkw8UrSra8IwaGV4Bjl9iER1n4cWdePcu7Qdyp2PyD9Qm/N7aLdvIUu/fdoI
a6eucrQMDcaSHkS5NckRTfcOnGXgEN8WKJS8bsRRKF3mYbNmhU/zPnVQXGDXwYoL
rAJqD8DM4lCVY1QgYas4iNRDCQbLoZXl8F2l3qv3I+FsYMW547slO9CGI2NwpXcp
0751gAw0+bp04JsxswEa2liL6eVMJwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA12
59wCwz6xOOb2Zs9O+k5dIJtrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQ0RCQjBGNkRBRTgxMUVGQTcxREVDNjI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcf8MA0GCSqGSIb3DQEBCwUA
A4IBAQCgq45M1rPltmhWD2SzErw4KL/DV9qKphpGDwlUiQFR4mXUxmpc286HX+wY
qfdIBSSPvOX3EtwQJGPTbvWyL4s51jmwrx6bepTVeyT17/gtgGyowZa3uJXEDfsO
VxWZEGDz8mCiuCBS2ZatymS0C13CesgsnJ0hRVDo2NsNHMubcKjf8FhTHk0w1gIY
HU0pIKCz0mQhCG2Q8rTbfTxnpXJV/qH7m/iFX3bN0LOFZdhabX8TNSUEu2Z1YCu9
DphLZGspmrEjLVK5Aq1x9nsKsZxDC8FNG0FU1rYaVvJ0NDEZcmcir5CHht5Bzt1y
t/WKWv4z70drP62xJ7w7ORe9wODO
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:50 2025 by rpki-client