Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD15FDAEDA9511EFA91717A8762E951A.roa
File: CD15FDAEDA9511EFA91717A8762E951A.roa (raw, json)
Hash identifier: TKTA1EuMyLRYlUVN5Oj3TDJgw3SkVhIIYf8EfktlA1Y=
Subject key identifier: F2:16:F0:E2:C4:9C:16:4E:75:EF:D3:7E:A7:93:ED:0C:61:33:F2:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011096
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD15FDAEDA9511EFA91717A8762E951A.roa
Signing time: Fri 24 Jan 2025 20:57:20 +0000
ROA not before: Fri 24 Jan 2025 20:57:16 +0000
ROA not after: Tue 25 Feb 2025 20:57:16 +0000
asID: 202656
IP address blocks: 45.199.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69782 (0x11096)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:57:16 2025 GMT
Not After : Feb 25 20:57:16 2025 GMT
Subject: CN=6793feb0-b0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:49:d6:f7:c0:11:9e:00:eb:3c:55:11:41:8f:
52:89:e7:48:09:3b:7d:01:3c:68:88:7c:e0:bb:a6:
17:21:a7:2f:f6:59:d4:9e:05:92:e5:57:0a:1c:0e:
6f:73:02:30:fb:51:27:ba:1b:4c:8e:f7:e1:e7:cf:
23:3b:ef:f0:af:3e:56:52:46:a9:0c:0d:91:69:28:
1e:fa:a4:4b:ea:e3:19:86:3b:34:35:64:43:1e:da:
fa:7f:ba:7d:ff:9e:f7:5a:19:15:fa:2b:06:89:2a:
ec:40:e8:f3:0c:ff:28:e6:a4:ae:ad:c9:b5:0c:5c:
33:3f:e5:7e:cd:e6:45:45:c5:e2:f0:e2:6f:74:ff:
df:9c:9e:d0:f1:d0:ea:72:8d:49:b9:da:1a:62:41:
a4:0c:bc:99:15:f1:67:75:02:81:7e:55:0e:ef:f9:
24:9b:69:ba:28:2b:f8:a6:74:ed:44:e7:f4:d9:22:
23:64:b8:90:57:04:5d:88:87:37:6c:82:f3:36:36:
85:38:fe:9f:d8:0d:96:33:2c:c0:47:f2:00:38:a3:
8c:95:cb:11:98:a3:6a:5a:ef:c8:d8:4d:e2:77:78:
73:90:d0:2a:55:58:76:36:e5:17:4b:3b:15:a5:cf:
d7:56:27:03:99:dc:9b:3d:c8:28:ac:f3:45:92:c3:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:16:F0:E2:C4:9C:16:4E:75:EF:D3:7E:A7:93:ED:0C:61:33:F2:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD15FDAEDA9511EFA91717A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.199.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b0:62:89:c0:1a:65:c9:cd:36:d5:0b:0c:1c:47:ea:d5:6b:
b3:41:ad:b8:b3:3c:52:3e:a9:4c:a9:69:d1:bb:b7:ee:75:ac:
7d:29:f1:e5:08:e8:c9:c5:bc:36:1c:30:45:66:6f:87:25:a3:
7e:2f:b0:ca:39:08:a1:c6:d2:e9:87:19:ec:e5:a7:bc:9c:1c:
71:e4:d5:ff:2f:5a:7e:60:ff:07:a0:18:de:b5:02:95:af:e7:
ee:ae:cb:d4:88:88:bc:4b:ed:45:74:06:36:eb:bc:2c:9f:f3:
5e:df:08:c8:21:f2:09:86:4c:23:46:2b:42:e4:24:ed:76:c2:
bc:9f:64:5b:5d:d4:e3:4c:92:e6:40:99:a2:15:bb:80:3f:5a:
89:de:3a:c8:02:7d:4e:40:4b:2c:4a:14:d8:b8:04:db:6b:81:
c4:30:0f:32:57:22:9e:ec:ef:fe:85:56:f2:60:74:d8:15:c4:
ee:cd:cc:2b:4c:5e:0e:36:b9:6e:9b:ca:e4:57:28:41:3a:fb:
a2:d6:18:d7:80:f7:0f:3d:a2:22:6f:8a:b2:7a:01:91:34:83:
f4:65:c8:44:c6:54:4a:5b:85:3b:70:b8:d6:f7:e5:f5:f4:08:
76:98:96:e7:91:73:39:52:05:86:b1:34:11:f5:25:1c:31:46:
90:b8:a4:90
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARCWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MjA1NzE2WhcNMjUwMjI1MjA1NzE2WjAYMRYw
FAYDVQQDEw02NzkzZmViMC1iMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4EnW98ARngDrPFURQY9SiedICTt9ATxoiHzgu6YXIacv9lnUngWS5VcK
HA5vcwIw+1EnuhtMjvfh588jO+/wrz5WUkapDA2RaSge+qRL6uMZhjs0NWRDHtr6
f7p9/573WhkV+isGiSrsQOjzDP8o5qSurcm1DFwzP+V+zeZFRcXi8OJvdP/fnJ7Q
8dDqco1JudoaYkGkDLyZFfFndQKBflUO7/kkm2m6KCv4pnTtROf02SIjZLiQVwRd
iIc3bILzNjaFOP6f2A2WMyzAR/IAOKOMlcsRmKNqWu/I2E3id3hzkNAqVVh2NuUX
SzsVpc/XVicDmdybPcgorPNFksOmcQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPIW
8OLEnBZOde/TfqeT7QxhM/JNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRDE1RkRBRURBOTUxMUVGQTkxNzE3QTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfHMA0GCSqGSIb3DQEBCwUA
A4IBAQCdsGKJwBplyc021QsMHEfq1WuzQa24szxSPqlMqWnRu7fudax9KfHlCOjJ
xbw2HDBFZm+HJaN+L7DKOQihxtLphxns5ae8nBxx5NX/L1p+YP8HoBjetQKVr+fu
rsvUiIi8S+1FdAY267wsn/Ne3wjIIfIJhkwjRitC5CTtdsK8n2RbXdTjTJLmQJmi
FbuAP1qJ3jrIAn1OQEssShTYuATba4HEMA8yVyKe7O/+hVbyYHTYFcTuzcwrTF4O
Nrlum8rkVyhBOvui1hjXgPcPPaIib4qyegGRNIP0ZchExlRKW4U7cLjW9+X19Ah2
mJbnkXM5UgWGsTQR9SUcMUaQuKSQ
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:03 2025 by rpki-client