Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2E19D60DB0711EFB4902FB2762E951A.roa
File: E2E19D60DB0711EFB4902FB2762E951A.roa (raw, json)
Hash identifier: xdXfoGLh1o31MY2+bU7DrnbSrm3Z2GS56jYUkU62fcA=
Subject key identifier: 2E:4D:1F:49:88:A6:A3:E9:57:44:DD:3B:1A:8F:4F:A4:37:55:D7:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2E19D60DB0711EFB4902FB2762E951A.roa
Signing time: Sat 25 Jan 2025 10:33:59 +0000
ROA not before: Sat 25 Jan 2025 10:33:55 +0000
ROA not after: Sun 23 Feb 2025 10:33:55 +0000
asID: 62240
IP address blocks: 45.192.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70125 (0x111ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 10:33:55 2025 GMT
Not After : Feb 23 10:33:55 2025 GMT
Subject: CN=6794be17-c4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:d0:a0:fe:1e:8b:7c:06:25:eb:69:cf:b3:
e7:4e:a0:4c:e7:59:ef:46:e0:f7:13:7a:58:ab:0b:
0c:1a:44:fe:05:45:15:01:6c:e8:0f:be:e8:07:32:
03:dc:59:e7:d6:e5:8b:c7:94:50:86:7f:82:94:f0:
1c:7b:ab:ff:fd:0d:6c:8c:21:50:b2:4d:da:c2:75:
4d:74:84:59:6f:da:c6:7f:80:20:9c:f5:8a:10:c3:
f0:a0:3d:36:8f:fb:54:88:8d:f7:52:3c:f8:00:a5:
69:79:b2:29:b4:75:4d:e9:a7:00:39:5e:a9:c9:dc:
aa:fc:8e:77:6d:ed:a7:3f:fb:1d:d1:31:b5:c4:7e:
ae:a5:32:3d:94:f0:8e:c4:68:d4:bd:84:61:3c:46:
69:3f:30:9f:c6:76:09:87:49:65:70:34:e8:14:84:
39:7f:86:b5:8a:07:d7:74:f9:74:cf:38:5b:76:aa:
b8:3d:4a:74:c2:89:85:66:aa:34:41:20:e5:eb:51:
00:55:7f:c1:03:aa:ab:38:16:8e:2d:82:22:57:92:
d3:9a:c3:07:08:ef:81:b8:75:b9:e5:b3:a9:94:87:
a1:f0:1a:fb:75:11:d5:18:8c:59:ca:b2:1c:43:9a:
fe:1b:9d:2e:92:1c:e7:67:d7:9d:db:2f:fe:8b:ff:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4D:1F:49:88:A6:A3:E9:57:44:DD:3B:1A:8F:4F:A4:37:55:D7:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2E19D60DB0711EFB4902FB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.43.0/24
Signature Algorithm: sha256WithRSAEncryption
73:4d:bd:94:33:76:7e:be:ba:32:4b:d5:11:77:42:73:26:e3:
79:e9:06:a3:d9:d6:94:3a:7a:84:05:78:53:2b:7a:2d:6c:4f:
dc:d6:a4:d8:f0:dd:39:62:c1:6a:86:80:0d:d0:4d:34:aa:f2:
7c:d5:57:c6:4d:d2:3c:e0:7f:14:79:e4:50:3f:cb:7b:5a:a7:
4e:72:81:ff:5b:15:ee:af:5b:78:c9:07:a6:92:35:dd:2d:d3:
f8:40:17:ec:9c:d6:de:45:42:7f:c8:05:1a:e6:44:02:c4:6c:
76:2a:cd:ac:6e:6f:aa:cc:1f:4b:d4:04:4b:5a:8c:35:a4:5e:
f6:4c:5b:c7:cd:a4:7e:03:65:62:f5:e3:a5:82:25:f2:26:0b:
7e:a6:91:62:17:da:8d:81:d2:27:23:7c:38:5d:ed:84:54:73:
16:55:07:85:72:75:89:a3:4d:16:06:08:02:19:c8:31:d8:49:
4e:c7:56:f3:fc:dc:80:a5:42:2d:04:c9:3a:0b:31:6c:88:17:
e2:09:37:05:0d:75:ca:cb:22:7a:86:e9:9b:ef:1d:cf:7f:ab:
00:61:ba:13:4f:fa:c2:55:77:55:f1:4b:c8:f6:50:bd:ee:6f:
45:ec:58:e9:93:b6:d6:dc:13:a6:5c:bf:fd:ac:4b:8d:d1:32:
8f:3b:56:72
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARHtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTAzMzU1WhcNMjUwMjIzMTAzMzU1WjAYMRYw
FAYDVQQDEw02Nzk0YmUxNy1jNGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1ADQoP4ei3wGJetpz7PnTqBM51nvRuD3E3pYqwsMGkT+BUUVAWzoD77o
BzID3Fnn1uWLx5RQhn+ClPAce6v//Q1sjCFQsk3awnVNdIRZb9rGf4AgnPWKEMPw
oD02j/tUiI33Ujz4AKVpebIptHVN6acAOV6pydyq/I53be2nP/sd0TG1xH6upTI9
lPCOxGjUvYRhPEZpPzCfxnYJh0llcDToFIQ5f4a1igfXdPl0zzhbdqq4PUp0womF
Zqo0QSDl61EAVX/BA6qrOBaOLYIiV5LTmsMHCO+BuHW55bOplIeh8Br7dRHVGIxZ
yrIcQ5r+G50ukhznZ9ed2y/+i/+6LwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC5N
H0mIpqPpV0TdOxqPT6Q3VddDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMkUxOUQ2MERCMDcxMUVGQjQ5MDJGQjI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcArMA0GCSqGSIb3DQEBCwUA
A4IBAQBzTb2UM3Z+vroyS9URd0JzJuN56Qaj2daUOnqEBXhTK3otbE/c1qTY8N05
YsFqhoAN0E00qvJ81VfGTdI84H8UeeRQP8t7WqdOcoH/WxXur1t4yQemkjXdLdP4
QBfsnNbeRUJ/yAUa5kQCxGx2Ks2sbm+qzB9L1ARLWow1pF72TFvHzaR+A2Vi9eOl
giXyJgt+ppFiF9qNgdInI3w4Xe2EVHMWVQeFcnWJo00WBggCGcgx2ElOx1bz/NyA
pUItBMk6CzFsiBfiCTcFDXXKyyJ6humb7x3Pf6sAYboTT/rCVXdV8UvI9lC97m9F
7Fjpk7bW3BOmXL/9rEuN0TKPO1Zy
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:16 2025 by rpki-client