Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC285D20D80811EF9F18D692762E951A.roa
File: EC285D20D80811EF9F18D692762E951A.roa (raw, json)
Hash identifier: RzV6Lm7Nj7xkdnrcg8iVnQzvJ9wzgW0uhbK4as4RiJo=
Subject key identifier: 34:CA:4A:55:E1:8C:22:52:F0:5E:B3:1C:4E:FC:AB:81:C6:52:C6:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E30
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC285D20D80811EF9F18D692762E951A.roa
Signing time: Tue 21 Jan 2025 15:03:51 +0000
ROA not before: Tue 21 Jan 2025 15:03:47 +0000
ROA not after: Sat 01 Feb 2025 15:03:47 +0000
asID: 44559
IP address blocks: 45.199.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69168 (0x10e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 15:03:47 2025 GMT
Not After : Feb 1 15:03:47 2025 GMT
Subject: CN=678fb756-bf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:78:e7:42:73:13:1a:18:71:16:c7:96:68:
65:7d:63:99:b3:29:71:1f:87:44:53:cb:57:e4:3a:
fb:11:72:ba:e7:5d:6d:dc:55:e4:8a:6f:33:5e:53:
02:10:27:89:cb:c1:b1:28:86:40:f2:26:57:82:06:
e6:ec:dd:d2:73:54:b7:77:fd:48:76:92:c1:9d:da:
a5:1c:97:8c:8b:44:2e:4c:ca:78:7f:97:5b:f6:b1:
b8:ca:b5:3a:e1:35:e7:63:f5:ba:63:d2:a7:a5:aa:
00:94:2a:ec:8f:e7:e2:4c:c5:1a:47:d5:67:e5:98:
f0:eb:d2:2f:f8:b6:83:83:5a:f6:d9:a2:29:c0:75:
85:1a:74:15:8e:44:52:7b:38:14:69:ed:ae:fa:e7:
8f:da:09:0e:70:06:e0:0e:55:c7:41:62:d2:51:7a:
8c:fd:38:36:19:14:a6:e3:e6:85:9d:6c:15:ed:ff:
62:05:a0:f5:65:46:cc:b7:20:24:81:99:b0:bb:d5:
d6:92:bf:4a:36:b3:87:e8:fd:7f:5e:e1:f7:1b:a1:
df:38:c5:22:22:08:89:6d:ff:18:0c:9c:87:45:b0:
af:cc:55:25:e7:0b:cb:04:5a:ff:e0:5b:19:c0:58:
51:8f:43:64:71:07:a8:ef:bc:c1:d3:87:6f:ac:f4:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CA:4A:55:E1:8C:22:52:F0:5E:B3:1C:4E:FC:AB:81:C6:52:C6:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC285D20D80811EF9F18D692762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.216.0/24
Signature Algorithm: sha256WithRSAEncryption
20:28:11:7d:e3:55:0d:dc:b7:06:ee:b7:8d:f7:a6:fc:13:b9:
1a:45:0b:78:08:29:d6:1a:2c:31:04:80:88:96:ad:07:ee:bf:
36:92:ff:cb:f7:22:59:ef:83:96:e4:94:b0:55:8d:3e:d1:95:
aa:ee:14:5a:bb:60:72:16:e2:b5:a8:23:43:59:a7:50:0b:61:
3b:0f:01:84:a9:77:9e:c2:f8:60:cf:2d:9b:18:a7:57:4e:be:
80:a8:80:56:e2:18:ca:13:a2:47:1d:b4:95:98:9b:aa:69:b7:
4a:5a:be:d6:ad:16:1a:bb:12:f4:7a:45:15:59:f5:08:c4:ff:
fa:dd:d8:43:6c:a0:bb:5a:32:46:68:82:dc:9f:3c:4a:1d:41:
10:a3:90:86:6d:9a:2b:cf:7d:9f:98:d7:bd:45:8c:a4:83:e8:
f4:b9:06:8a:2d:28:f6:7f:9a:cd:4e:0d:3c:72:1a:3b:20:7a:
4d:8d:52:29:91:24:f7:c2:80:73:2d:44:d4:dc:c0:07:f8:ad:
fb:15:e1:90:e8:21:1b:18:cd:78:48:21:e0:2c:a1:b9:6b:e3:
7b:ea:3f:af:61:5e:85:79:e0:8c:8d:0c:3b:c0:d1:dd:85:4c:
4e:f7:85:7b:ef:d0:3e:b4:fa:9a:92:74:a8:7a:15:3b:45:fa:
b8:82:41:13
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ4wMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTUwMzQ3WhcNMjUwMjAxMTUwMzQ3WjAYMRYw
FAYDVQQDEw02NzhmYjc1Ni1iZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuDd450JzExoYcRbHlmhlfWOZsylxH4dEU8tX5Dr7EXK6511t3FXkim8z
XlMCECeJy8GxKIZA8iZXggbm7N3Sc1S3d/1IdpLBndqlHJeMi0QuTMp4f5db9rG4
yrU64TXnY/W6Y9KnpaoAlCrsj+fiTMUaR9Vn5Zjw69Iv+LaDg1r22aIpwHWFGnQV
jkRSezgUae2u+ueP2gkOcAbgDlXHQWLSUXqM/Tg2GRSm4+aFnWwV7f9iBaD1ZUbM
tyAkgZmwu9XWkr9KNrOH6P1/XuH3G6HfOMUiIgiJbf8YDJyHRbCvzFUl5wvLBFr/
4FsZwFhRj0NkcQeo77zB04dvrPQHAQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDTK
SlXhjCJS8F6zHE78q4HGUsZ9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQzI4NUQyMEQ4MDgxMUVGOUYxOEQ2OTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfYMA0GCSqGSIb3DQEBCwUA
A4IBAQAgKBF941UN3LcG7reN96b8E7kaRQt4CCnWGiwxBICIlq0H7r82kv/L9yJZ
74OW5JSwVY0+0ZWq7hRau2ByFuK1qCNDWadQC2E7DwGEqXeewvhgzy2bGKdXTr6A
qIBW4hjKE6JHHbSVmJuqabdKWr7WrRYauxL0ekUVWfUIxP/63dhDbKC7WjJGaILc
nzxKHUEQo5CGbZorz32fmNe9RYykg+j0uQaKLSj2f5rNTg08cho7IHpNjVIpkST3
woBzLUTU3MAH+K37FeGQ6CEbGM14SCHgLKG5a+N76j+vYV6FeeCMjQw7wNHdhUxO
94V779A+tPqaknSoehU7Rfq4gkET
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:46 2025 by rpki-client