Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC8DD91EDA9011EFA01A8F86762E951A.roa
File: DC8DD91EDA9011EFA01A8F86762E951A.roa (raw, json)
Hash identifier: S3AJE8G/JKJT0h+y4WdyuYE5HxK+33ypvDBYvOr+c/A=
Subject key identifier: E9:35:49:1C:64:7C:BC:81:52:19:E6:3B:20:4A:8D:B5:B7:12:76:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011076
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC8DD91EDA9011EFA01A8F86762E951A.roa
Signing time: Fri 24 Jan 2025 20:21:58 +0000
ROA not before: Fri 24 Jan 2025 20:21:55 +0000
ROA not after: Tue 25 Feb 2025 20:21:55 +0000
asID: 202656
IP address blocks: 45.200.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69750 (0x11076)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:21:55 2025 GMT
Not After : Feb 25 20:21:55 2025 GMT
Subject: CN=6793f666-2b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:65:dd:e0:f0:17:1e:b5:b3:24:03:46:0f:
03:21:8e:f5:4c:02:9d:50:cd:e4:27:23:d1:bb:b9:
8d:e5:af:7e:aa:ba:72:95:43:8e:a4:29:86:03:dc:
8f:b2:31:c7:78:80:59:99:26:af:51:c6:1a:a8:76:
99:47:f2:b1:ab:3a:58:e4:35:e9:a2:c6:00:10:27:
48:2a:04:87:9c:ef:e2:f8:4a:7e:ca:d6:d9:cb:37:
94:2d:61:55:fe:9c:01:66:a7:97:4c:71:9d:48:ea:
01:f8:27:84:9d:87:f1:ea:89:65:fe:22:f7:6a:25:
bd:19:09:ab:a5:2d:5f:ec:7c:32:7d:36:70:0a:2d:
b4:b3:c0:6b:bb:49:5b:b7:fd:12:36:2b:9f:e1:da:
ce:8d:14:a1:21:0d:21:bf:39:b0:1b:06:b8:db:49:
0a:f5:e6:dc:5f:36:01:79:8d:56:c1:d2:77:31:35:
03:6c:da:07:33:21:5a:74:ce:8e:67:a3:66:b8:61:
f7:dd:81:1b:1f:e4:e4:72:dd:40:d5:2b:bb:d6:bb:
0b:88:3f:59:cc:fb:a8:6d:78:30:5b:51:eb:72:26:
cb:de:03:03:88:b1:13:ab:a6:3c:d2:5b:9d:0a:e2:
9d:3f:51:dc:21:a9:1c:a8:33:d6:18:8a:b9:89:26:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:35:49:1C:64:7C:BC:81:52:19:E6:3B:20:4A:8D:B5:B7:12:76:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC8DD91EDA9011EFA01A8F86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:91:0e:f6:42:f3:4f:bd:87:dd:a9:7d:46:b6:21:e6:cf:5d:
4f:3d:2f:06:32:71:0e:21:90:e5:9b:07:c3:e6:29:b9:dc:16:
d6:12:21:85:a8:0b:db:9b:56:64:f0:6c:79:73:b0:53:42:50:
91:5b:df:0f:5f:14:5f:de:b6:65:36:57:c9:7f:3f:e8:d5:34:
d5:f6:c4:48:7b:3f:9b:d1:c0:41:14:54:c3:cd:c8:56:f4:71:
b1:a2:ae:1b:ea:c2:89:77:a1:f2:a8:54:94:e8:86:94:6c:f1:
04:6d:59:6e:87:ec:d4:80:9e:99:23:00:06:04:92:6a:fc:49:
59:1d:61:f5:fd:48:e5:fb:65:c8:9c:59:cd:ed:7a:77:95:df:
5e:9e:66:8f:3e:66:4f:52:15:b1:ab:60:26:63:29:ab:1e:b6:
66:44:00:0c:67:7e:22:1a:56:e7:85:b4:a2:77:7c:87:e9:0a:
44:63:7c:cf:3a:48:d6:bc:96:ac:6b:48:a6:99:f2:4e:e2:d3:
97:f8:9a:05:6a:d6:f4:88:e0:b3:f3:28:df:09:87:c3:85:88:
fb:87:e7:2f:a1:e1:16:9e:1a:2d:ba:a4:9f:f5:98:c2:4e:18:
db:77:36:50:76:13:c5:7a:95:c1:a4:cb:a2:95:b8:10:8b:19:
29:2a:18:b1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARB2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MjAyMTU1WhcNMjUwMjI1MjAyMTU1WjAYMRYw
FAYDVQQDEw02NzkzZjY2Ni0yYjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwAxl3eDwFx61syQDRg8DIY71TAKdUM3kJyPRu7mN5a9+qrpylUOOpCmG
A9yPsjHHeIBZmSavUcYaqHaZR/KxqzpY5DXposYAECdIKgSHnO/i+Ep+ytbZyzeU
LWFV/pwBZqeXTHGdSOoB+CeEnYfx6oll/iL3aiW9GQmrpS1f7HwyfTZwCi20s8Br
u0lbt/0SNiuf4drOjRShIQ0hvzmwGwa420kK9ebcXzYBeY1WwdJ3MTUDbNoHMyFa
dM6OZ6NmuGH33YEbH+Tkct1A1Su71rsLiD9ZzPuobXgwW1HrcibL3gMDiLETq6Y8
0ludCuKdP1HcIakcqDPWGIq5iSbuMQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOk1
SRxkfLyBUhnmOyBKjbW3EnalMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQzhERDkxRURBOTAxMUVGQTAxQThGODY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcitMA0GCSqGSIb3DQEBCwUA
A4IBAQCnkQ72QvNPvYfdqX1GtiHmz11PPS8GMnEOIZDlmwfD5im53BbWEiGFqAvb
m1Zk8Gx5c7BTQlCRW98PXxRf3rZlNlfJfz/o1TTV9sRIez+b0cBBFFTDzchW9HGx
oq4b6sKJd6HyqFSU6IaUbPEEbVluh+zUgJ6ZIwAGBJJq/ElZHWH1/Ujl+2XInFnN
7Xp3ld9enmaPPmZPUhWxq2AmYymrHrZmRAAMZ34iGlbnhbSid3yH6QpEY3zPOkjW
vJasa0immfJO4tOX+JoFatb0iOCz8yjfCYfDhYj7h+cvoeEWnhotuqSf9ZjCThjb
dzZQdhPFepXBpMuilbgQixkpKhix
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:52 2025 by rpki-client