Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E203F782DC8611EF8799E349762E951A.roa
File: E203F782DC8611EF8799E349762E951A.roa (raw, json)
Hash identifier: ENxnhqV1HjCNSjI25aiypYDcxNkxc4Ke2lYd4KTkXMk=
Subject key identifier: 87:9C:CF:0F:1E:08:4D:AF:BA:19:FB:C9:73:7D:AD:19:D0:2B:CC:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01149F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E203F782DC8611EF8799E349762E951A.roa
Signing time: Mon 27 Jan 2025 08:15:35 +0000
ROA not before: Mon 27 Jan 2025 08:15:31 +0000
ROA not after: Tue 04 Mar 2025 08:15:31 +0000
asID: 138995
IP address blocks: 45.192.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70815 (0x1149f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 08:15:31 2025 GMT
Not After : Mar 4 08:15:31 2025 GMT
Subject: CN=679740a7-0eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:a8:59:54:fa:06:d7:ab:9c:5c:31:d0:5c:
8c:f5:c8:fd:be:a3:dd:2e:7f:8b:20:c0:1a:59:ca:
30:00:f7:0c:36:50:03:99:06:0c:4c:6e:6c:30:30:
54:16:f6:ef:5c:de:d8:34:44:83:ab:2d:6f:4a:09:
a3:f6:c4:dc:cd:63:34:71:38:8c:b1:55:50:90:98:
83:53:a4:bf:d8:da:ee:16:6f:5d:35:3e:a3:d3:2d:
52:6f:f6:b3:34:fa:de:a9:5a:31:40:b6:27:48:c8:
ae:c2:fc:07:46:d6:6e:25:51:23:3c:20:e9:7b:d4:
0d:ab:3a:75:15:ba:15:14:25:4d:69:43:67:ba:39:
29:96:b4:9c:f5:f1:4f:e0:1f:27:75:f1:c5:ea:98:
90:b8:f5:25:63:3d:14:36:9a:44:67:d3:59:ab:65:
31:84:6d:a8:f5:0b:b0:85:ba:0f:e3:3c:aa:c9:c4:
68:2b:0d:58:5f:9d:d5:41:d8:b0:bf:6e:69:eb:1e:
f3:34:a9:25:cf:7c:1c:70:4b:89:e7:7f:2f:0b:74:
62:b6:80:de:93:24:a0:39:a9:e0:1a:17:bf:8c:64:
de:64:b7:2a:20:8f:c4:37:37:3e:36:59:50:c9:86:
a4:b0:fe:20:10:5c:83:91:b1:59:04:98:7f:e4:d3:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9C:CF:0F:1E:08:4D:AF:BA:19:FB:C9:73:7D:AD:19:D0:2B:CC:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E203F782DC8611EF8799E349762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.223.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9d:45:7c:85:d7:09:b1:49:c9:87:95:be:86:26:70:1b:3b:
84:10:56:23:2a:84:2f:51:b4:82:59:dc:73:16:a6:41:8b:de:
e9:5f:05:82:a5:bb:fc:53:b4:ca:71:e7:3d:11:11:9d:75:af:
fc:6b:1c:fa:ca:64:4c:c9:c1:ff:bf:6d:da:46:e8:6d:ab:bf:
39:51:64:f2:51:e0:ac:03:83:1b:04:c4:ff:73:68:61:09:aa:
43:49:37:00:37:7e:1f:07:08:e7:6b:50:0a:b6:8a:c6:68:bb:
b9:7b:74:f1:82:5e:23:97:0f:79:01:a4:c9:3d:1b:e8:0c:e3:
41:b5:9c:08:12:ca:de:9e:61:9e:9c:3e:ab:0b:19:0a:c2:fe:
95:76:76:58:23:fb:a9:e5:f0:c5:fd:54:e2:ca:df:8e:d2:f9:
d9:3f:aa:1d:d6:c0:3c:ae:41:64:ce:f3:b5:84:ce:28:e2:64:
62:cd:bb:c7:bf:9f:95:f6:d0:20:11:ee:08:75:78:6f:d6:da:
f6:d1:8e:0b:17:96:f0:13:da:f1:20:50:0c:a9:72:2b:41:0a:
ef:e4:bf:0f:ec:8d:8c:35:27:73:17:2b:69:9e:c9:c3:c1:f2:
93:a6:91:6d:ef:e6:bb:1f:5a:b1:f3:85:12:01:7d:13:0d:06:
15:d5:bd:14
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARSfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MDgxNTMxWhcNMjUwMzA0MDgxNTMxWjAYMRYw
FAYDVQQDEw02Nzk3NDBhNy0wZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuKuoWVT6BternFwx0FyM9cj9vqPdLn+LIMAaWcowAPcMNlADmQYMTG5s
MDBUFvbvXN7YNESDqy1vSgmj9sTczWM0cTiMsVVQkJiDU6S/2NruFm9dNT6j0y1S
b/azNPreqVoxQLYnSMiuwvwHRtZuJVEjPCDpe9QNqzp1FboVFCVNaUNnujkplrSc
9fFP4B8ndfHF6piQuPUlYz0UNppEZ9NZq2UxhG2o9QuwhboP4zyqycRoKw1YX53V
Qdiwv25p6x7zNKklz3wccEuJ538vC3RitoDekySgOangGhe/jGTeZLcqII/ENzc+
NllQyYaksP4gEFyDkbFZBJh/5NNEkwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIec
zw8eCE2vuhn7yXN9rRnQK8wWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMjAzRjc4MkRDODYxMUVGODc5OUUzNDk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcDfMA0GCSqGSIb3DQEBCwUA
A4IBAQBYnUV8hdcJsUnJh5W+hiZwGzuEEFYjKoQvUbSCWdxzFqZBi97pXwWCpbv8
U7TKcec9ERGdda/8axz6ymRMycH/v23aRuhtq785UWTyUeCsA4MbBMT/c2hhCapD
STcAN34fBwjna1AKtorGaLu5e3Txgl4jlw95AaTJPRvoDONBtZwIEsrenmGenD6r
CxkKwv6VdnZYI/up5fDF/VTiyt+O0vnZP6od1sA8rkFkzvO1hM4o4mRizbvHv5+V
9tAgEe4IdXhv1tr20Y4LF5bwE9rxIFAMqXIrQQrv5L8P7I2MNSdzFytpnsnDwfKT
ppFt7+a7H1qx84USAX0TDQYV1b0U
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:18:33 2025 by rpki-client