Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D376CC1CD72211EFBF7242AE762E951A.roa
File: D376CC1CD72211EFBF7242AE762E951A.roa (raw, json)
Hash identifier: MA04EzO7x8eaizo1MG5IbiE+riJGbdvtrODjALMdw3A=
Subject key identifier: 58:0F:2D:9F:52:4A:3B:8B:E7:2B:33:91:F5:2F:A1:95:8B:67:B1:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D376CC1CD72211EFBF7242AE762E951A.roa
Signing time: Mon 20 Jan 2025 11:36:45 +0000
ROA not before: Mon 20 Jan 2025 11:36:41 +0000
ROA not after: Sat 01 Feb 2025 11:36:41 +0000
asID: 202656
IP address blocks: 45.200.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68681 (0x10c49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 11:36:41 2025 GMT
Not After : Feb 1 11:36:41 2025 GMT
Subject: CN=678e354d-f6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:9f:fd:07:8a:e8:96:00:39:89:45:00:68:
d9:4f:dc:ed:82:f1:22:8a:81:44:fe:05:00:af:99:
e5:47:b1:74:8f:94:34:cb:a4:c3:3e:1a:a9:5f:74:
ce:e8:40:e8:3b:a8:2b:ad:c5:93:69:45:48:af:64:
2e:a9:33:c8:21:b9:8b:a5:e7:99:79:58:5d:57:fb:
4b:06:b6:2a:6f:25:94:f5:9a:97:57:35:e3:19:38:
f2:02:87:f0:2f:58:bb:11:6f:d7:c7:5c:c6:0b:80:
14:c7:ee:a2:11:ee:ec:3a:df:7d:68:cf:0f:a5:11:
f2:f6:ee:ef:e4:ce:9d:18:43:6e:2b:94:21:d9:5a:
22:1d:30:3e:49:97:89:b2:6b:8c:53:2f:21:48:8a:
e1:2f:d3:fc:2c:75:34:2b:69:26:01:90:d2:51:9b:
14:76:e6:5f:ea:ab:5d:b0:32:82:56:c8:de:55:3a:
a9:29:10:25:f6:57:a4:73:d8:43:88:d9:9e:02:6c:
97:69:e6:fa:1a:57:db:5e:6a:a1:ab:00:a1:96:21:
1e:7f:c6:16:f5:d0:cd:86:6f:3c:81:4e:8b:61:65:
5c:65:ef:2b:5d:cb:a5:6f:c5:3f:79:38:98:3c:ab:
f5:61:f5:4c:5d:0b:54:0b:2f:7a:cb:e4:a4:7d:41:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0F:2D:9F:52:4A:3B:8B:E7:2B:33:91:F5:2F:A1:95:8B:67:B1:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D376CC1CD72211EFBF7242AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.178.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e8:bb:06:a2:ca:07:6c:a0:fb:77:0b:26:36:90:92:8b:85:
77:3f:7d:88:c0:70:c0:99:62:09:ce:a7:c0:9a:f8:47:2a:a8:
1e:de:ea:50:4c:2a:6b:e6:1b:6f:88:d2:ca:c8:c6:cb:1e:0e:
59:d0:65:45:df:b3:d8:ab:75:9a:43:af:d2:e6:c5:59:33:85:
96:f2:66:06:8b:2f:05:1c:0a:94:49:13:96:b6:86:6e:66:9f:
c2:64:f7:fe:a8:f8:af:f8:e0:7c:95:a9:d3:33:97:e9:58:94:
d8:af:d7:d9:07:67:1a:97:b4:8c:d8:54:b4:89:2a:48:b9:8a:
6f:28:28:a3:d9:9b:c4:1b:8a:5f:05:ef:66:ea:f5:8c:1a:a0:
14:4a:80:5a:a2:8e:fc:3c:68:8e:b3:a9:98:f2:ad:5d:e1:cd:
f4:ac:eb:6a:06:15:0b:b7:0d:1e:03:2c:67:4c:c0:bd:43:54:
f8:14:45:25:ad:3a:01:ea:11:11:e2:92:fa:16:67:eb:7d:96:
29:45:13:f8:f2:48:2f:95:5f:5d:de:34:5d:3e:50:84:7b:fe:
41:00:17:01:0e:3e:5f:65:9d:97:7e:fb:95:b5:52:e9:10:78:
93:97:45:1b:f6:fa:31:15:f4:08:cd:89:80:42:bc:25:a3:b5:
63:01:08:2f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQxJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIwMTEzNjQxWhcNMjUwMjAxMTEzNjQxWjAYMRYw
FAYDVQQDEw02NzhlMzU0ZC1mNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuFif/QeK6JYAOYlFAGjZT9ztgvEiioFE/gUAr5nlR7F0j5Q0y6TDPhqp
X3TO6EDoO6grrcWTaUVIr2QuqTPIIbmLpeeZeVhdV/tLBrYqbyWU9ZqXVzXjGTjy
AofwL1i7EW/Xx1zGC4AUx+6iEe7sOt99aM8PpRHy9u7v5M6dGENuK5Qh2VoiHTA+
SZeJsmuMUy8hSIrhL9P8LHU0K2kmAZDSUZsUduZf6qtdsDKCVsjeVTqpKRAl9lek
c9hDiNmeAmyXaeb6GlfbXmqhqwChliEef8YW9dDNhm88gU6LYWVcZe8rXculb8U/
eTiYPKv1YfVMXQtUCy96y+SkfUHnkwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFgP
LZ9SSjuL5yszkfUvoZWLZ7HtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMzc2Q0MxQ0Q3MjIxMUVGQkY3MjQyQUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALciyMA0GCSqGSIb3DQEBCwUA
A4IBAQBY6LsGosoHbKD7dwsmNpCSi4V3P32IwHDAmWIJzqfAmvhHKqge3upQTCpr
5htviNLKyMbLHg5Z0GVF37PYq3WaQ6/S5sVZM4WW8mYGiy8FHAqUSROWtoZuZp/C
ZPf+qPiv+OB8lanTM5fpWJTYr9fZB2cal7SM2FS0iSpIuYpvKCij2ZvEG4pfBe9m
6vWMGqAUSoBaoo78PGiOs6mY8q1d4c30rOtqBhULtw0eAyxnTMC9Q1T4FEUlrToB
6hER4pL6FmfrfZYpRRP48kgvlV9d3jRdPlCEe/5BABcBDj5fZZ2XfvuVtVLpEHiT
l0Ub9voxFfQIzYmAQrwlo7VjAQgv
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:37:31 2025 by rpki-client