Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4DAB922D3DB11EF9520EBBC762E951A.roa
File: E4DAB922D3DB11EF9520EBBC762E951A.roa (raw, json)
Hash identifier: kC40X0uxWqkw61et6+yVwxEC71Ku1NufYU5gr2CiMys=
Subject key identifier: 9D:1A:C7:37:AA:E3:1D:3A:04:1A:34:A0:61:11:11:6D:C2:F7:EF:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4DAB922D3DB11EF9520EBBC762E951A.roa
Signing time: Thu 16 Jan 2025 07:31:26 +0000
ROA not before: Thu 16 Jan 2025 07:31:23 +0000
ROA not after: Thu 20 Feb 2025 07:31:23 +0000
asID: 8796
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67788 (0x108cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 07:31:23 2025 GMT
Not After : Feb 20 07:31:23 2025 GMT
Subject: CN=6788b5ce-6c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:0d:b8:48:da:59:d3:c0:0b:d3:01:54:d4:
ae:5c:13:27:a2:46:9a:9e:91:19:8b:13:f8:be:b4:
a2:19:57:9f:98:d2:55:bd:80:78:1a:f2:6d:e2:a9:
9d:7d:1e:4b:0b:ab:3a:54:58:45:2a:b0:6c:6f:f2:
ce:0a:5f:0b:d4:b7:42:a8:e0:ac:fe:d3:71:3a:d9:
87:d5:49:0c:d4:e3:2f:3b:d7:29:a4:dd:97:bb:13:
5f:44:62:60:49:30:ff:26:f7:22:1e:1f:02:a2:33:
66:ab:ea:c6:e0:bb:cf:c2:25:d5:8f:f3:2c:21:05:
ce:55:5c:31:3c:9b:2e:dd:1b:3a:87:27:e1:5d:7d:
73:ad:31:06:a6:3c:ec:61:3c:4b:0c:36:48:f5:1e:
0e:d5:33:23:be:10:74:ae:78:6a:c5:79:22:5a:9d:
6b:d1:46:c1:b0:30:50:6a:36:24:2d:8b:78:2e:2f:
16:97:37:3f:f6:99:bb:17:52:3c:d3:d4:13:6c:90:
94:3f:0b:d1:2f:bb:7e:5d:c6:c2:ca:d5:79:8a:a5:
bd:78:ff:88:90:4f:ca:7d:25:89:4d:d6:2c:c7:4c:
82:08:9b:dc:da:1c:8a:98:48:d0:77:20:f0:6c:e8:
ac:ac:09:f9:6c:49:fb:fb:06:21:ce:a9:d6:8c:69:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1A:C7:37:AA:E3:1D:3A:04:1A:34:A0:61:11:11:6D:C2:F7:EF:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4DAB922D3DB11EF9520EBBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
23:23:c8:fc:82:20:b1:70:64:42:51:82:ca:61:a6:ad:f5:62:
8f:ea:36:d6:ea:07:0f:19:4d:ed:d5:11:2b:3b:87:1a:dc:c3:
a0:ec:b8:05:28:be:d5:f7:6f:a0:73:4c:bd:5d:64:03:6d:45:
0c:3e:11:b6:d7:d1:56:c9:24:e7:c1:69:e9:3b:a6:18:99:fc:
b7:c5:8e:bf:26:e0:a3:ff:10:db:75:d6:41:94:23:bc:05:03:
f9:9c:ad:b6:c9:80:2e:e4:2a:1d:3f:f5:f3:a1:83:7f:e7:e9:
c1:a2:99:a8:f8:cc:4c:4a:fe:8a:b7:6a:e1:28:f9:38:2c:41:
69:e7:3e:40:44:5e:47:8d:5d:99:87:d3:e7:3b:06:69:7d:97:
13:3d:45:59:6a:67:b3:1f:df:82:15:f7:47:f6:64:05:31:9c:
46:42:0e:3b:07:01:ea:a7:52:80:8b:7a:e4:0b:47:6a:3b:1f:
52:9b:03:2d:fa:3d:9f:e3:5c:3b:6e:01:fc:ed:8e:7b:8a:00:
15:d9:ed:d8:3d:a6:7a:8a:cf:34:47:8c:e7:78:d7:d2:41:e7:
bc:30:b6:01:13:13:d5:eb:87:48:ef:25:b6:07:fe:97:b0:17:
62:99:9d:45:d4:8b:73:34:24:00:2e:6b:e1:f4:4c:7d:85:5c:
81:bd:3d:b0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQjMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE2MDczMTIzWhcNMjUwMjIwMDczMTIzWjAYMRYw
FAYDVQQDEw02Nzg4YjVjZS02YzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAthsNuEjaWdPAC9MBVNSuXBMnokaanpEZixP4vrSiGVefmNJVvYB4GvJt
4qmdfR5LC6s6VFhFKrBsb/LOCl8L1LdCqOCs/tNxOtmH1UkM1OMvO9cppN2XuxNf
RGJgSTD/JvciHh8CojNmq+rG4LvPwiXVj/MsIQXOVVwxPJsu3Rs6hyfhXX1zrTEG
pjzsYTxLDDZI9R4O1TMjvhB0rnhqxXkiWp1r0UbBsDBQajYkLYt4Li8Wlzc/9pm7
F1I809QTbJCUPwvRL7t+XcbCytV5iqW9eP+IkE/KfSWJTdYsx0yCCJvc2hyKmEjQ
dyDwbOisrAn5bEn7+wYhzqnWjGl9GwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ0a
xzeq4x06BBo0oGEREW3C9+9iMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNERBQjkyMkQzREIxMUVGOTUyMEVCQkM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELc0QMA0GCSqGSIb3DQEBCwUA
A4IBAQAjI8j8giCxcGRCUYLKYaat9WKP6jbW6gcPGU3t1RErO4ca3MOg7LgFKL7V
92+gc0y9XWQDbUUMPhG219FWySTnwWnpO6YYmfy3xY6/JuCj/xDbddZBlCO8BQP5
nK22yYAu5CodP/XzoYN/5+nBopmo+MxMSv6Kt2rhKPk4LEFp5z5ARF5HjV2Zh9Pn
OwZpfZcTPUVZamezH9+CFfdH9mQFMZxGQg47BwHqp1KAi3rkC0dqOx9SmwMt+j2f
41w7bgH87Y57igAV2e3YPaZ6is80R4zneNfSQee8MLYBExPV64dI7yW2B/6XsBdi
mZ1F1ItzNCQALmvh9Ex9hVyBvT2w
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:49:35 2025 by rpki-client