Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E108E278DA9411EFBA4001A0762E951A.roa
File: E108E278DA9411EFBA4001A0762E951A.roa (raw, json)
Hash identifier: x5RWKCXygg7OcVhngou1P55u12ejCpc2vbHlyvMGT64=
Subject key identifier: 8F:63:91:E1:D2:14:AE:54:DC:A9:2B:F6:63:4B:A5:33:67:CA:32:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011090
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E108E278DA9411EFBA4001A0762E951A.roa
Signing time: Fri 24 Jan 2025 20:50:44 +0000
ROA not before: Fri 24 Jan 2025 20:50:40 +0000
ROA not after: Tue 25 Feb 2025 20:50:40 +0000
asID: 202656
IP address blocks: 45.199.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69776 (0x11090)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:50:40 2025 GMT
Not After : Feb 25 20:50:40 2025 GMT
Subject: CN=6793fd24-ce6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:c2:77:81:60:11:f7:51:a1:b5:32:26:b5:
31:16:0a:29:b8:ca:94:8d:9c:cf:9a:14:de:96:e6:
50:f2:0e:f7:5b:55:47:5c:72:a5:a8:71:43:e9:de:
2d:a4:d0:a7:0d:06:b7:1a:57:5e:61:2e:b8:6f:07:
0b:ca:2b:bb:de:50:c6:10:da:c6:ba:41:94:a8:a9:
d3:25:6c:68:99:32:66:96:aa:af:51:bb:cd:9c:dd:
db:ca:2b:51:1b:f7:e8:4d:b0:c4:88:61:7c:f8:e4:
5f:5c:37:6b:22:40:c1:75:2d:8c:09:30:79:1b:7b:
1f:80:90:7e:d2:ac:0c:a3:a6:b1:5a:21:6b:c0:7f:
8a:03:09:8b:39:19:68:90:43:d9:9b:a5:16:27:af:
91:74:9d:e9:16:7c:d6:77:bd:f8:03:79:eb:04:66:
fd:15:50:6a:83:92:b9:43:0b:02:1f:a3:68:77:b7:
a1:80:c8:c6:47:c3:46:b7:07:e0:5f:a7:9e:e6:88:
a0:ad:09:08:34:50:14:57:4e:d1:bf:df:b9:9b:d4:
c9:e7:bf:8b:1e:28:81:eb:b9:ba:a3:0d:c7:d2:ee:
24:69:35:70:ce:66:b2:fe:b5:d9:41:4a:53:ac:0a:
3c:f1:ba:19:19:e8:fd:fb:52:ef:03:d9:eb:0e:7a:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:63:91:E1:D2:14:AE:54:DC:A9:2B:F6:63:4B:A5:33:67:CA:32:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E108E278DA9411EFBA4001A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.196.0/24
Signature Algorithm: sha256WithRSAEncryption
07:31:a4:e0:1c:39:ee:b0:3a:64:36:2c:b8:8f:01:5d:4e:51:
60:52:a0:56:ff:76:2d:88:c9:6e:f4:25:c1:b1:f9:50:8a:98:
16:64:64:82:c2:42:34:88:5b:28:72:b1:ad:6e:85:54:ac:f9:
2a:b3:c8:c5:89:5e:99:db:da:8b:c3:48:bb:71:7f:8b:92:87:
fb:28:31:4d:ce:70:58:ba:b2:6d:17:a6:f4:03:59:2b:51:42:
4f:82:dc:3f:37:a9:98:ca:d3:3a:bc:5f:49:98:12:91:09:5f:
85:77:f1:d3:79:f7:ff:c0:bf:3a:9e:6a:0f:ed:28:6d:9b:40:
39:51:59:39:d0:56:39:e3:a7:6e:53:8b:e8:24:5a:18:65:b3:
a9:f0:48:40:48:be:25:e6:cb:df:1d:94:71:3a:11:37:dd:63:
ca:a3:23:59:10:05:24:cb:a8:e7:aa:a6:0a:bf:e3:60:af:4b:
ec:ec:cf:4b:57:cd:d3:e3:c7:5b:3a:cc:a4:36:e3:c8:d8:35:
79:4a:a9:7f:0d:61:63:94:71:e3:a9:68:d9:25:b4:f2:80:b4:
6d:79:94:e7:d9:ee:e5:ba:de:cf:3f:89:93:f5:24:01:f2:d3:
44:55:3a:c6:b4:b2:1e:07:87:67:71:f7:d4:25:ff:a5:6c:30:
46:e9:b7:e5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARCQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MjA1MDQwWhcNMjUwMjI1MjA1MDQwWjAYMRYw
FAYDVQQDEw02NzkzZmQyNC1jZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArhrCd4FgEfdRobUyJrUxFgopuMqUjZzPmhTeluZQ8g73W1VHXHKlqHFD
6d4tpNCnDQa3GldeYS64bwcLyiu73lDGENrGukGUqKnTJWxomTJmlqqvUbvNnN3b
yitRG/foTbDEiGF8+ORfXDdrIkDBdS2MCTB5G3sfgJB+0qwMo6axWiFrwH+KAwmL
ORlokEPZm6UWJ6+RdJ3pFnzWd734A3nrBGb9FVBqg5K5QwsCH6Nod7ehgMjGR8NG
twfgX6ee5oigrQkINFAUV07Rv9+5m9TJ57+LHiiB67m6ow3H0u4kaTVwzmay/rXZ
QUpTrAo88boZGej9+1LvA9nrDnqRtwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI9j
keHSFK5U3Kkr9mNLpTNnyjLdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMTA4RTI3OERBOTQxMUVGQkE0MDAxQTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfEMA0GCSqGSIb3DQEBCwUA
A4IBAQAHMaTgHDnusDpkNiy4jwFdTlFgUqBW/3YtiMlu9CXBsflQipgWZGSCwkI0
iFsocrGtboVUrPkqs8jFiV6Z29qLw0i7cX+Lkof7KDFNznBYurJtF6b0A1krUUJP
gtw/N6mYytM6vF9JmBKRCV+Fd/HTeff/wL86nmoP7Shtm0A5UVk50FY546duU4vo
JFoYZbOp8EhASL4l5svfHZRxOhE33WPKoyNZEAUky6jnqqYKv+Ngr0vs7M9LV83T
48dbOsykNuPI2DV5Sql/DWFjlHHjqWjZJbTygLRteZTn2e7lut7PP4mT9SQB8tNE
VTrGtLIeB4dncffUJf+lbDBG6bfl
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:21 2025 by rpki-client