Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC4E9C66DFF011EFB0A1A84D762E951A.roa
File: EC4E9C66DFF011EFB0A1A84D762E951A.roa (raw, json)
Hash identifier: pTQ+9PxQw3Qff0A6Ot7WhqBjAtN22bpcnw9VrDCcv1Y=
Subject key identifier: C5:D0:66:5F:FA:D6:1E:6D:4B:B6:36:FE:4D:55:EB:FD:D2:BD:95:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011660
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC4E9C66DFF011EFB0A1A84D762E951A.roa
Signing time: Fri 31 Jan 2025 16:32:12 +0000
ROA not before: Fri 31 Jan 2025 16:32:08 +0000
ROA not after: Mon 10 Feb 2025 16:32:08 +0000
asID: 61112
IP address blocks: 45.192.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71264 (0x11660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 16:32:08 2025 GMT
Not After : Feb 10 16:32:08 2025 GMT
Subject: CN=679cfb0c-d842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:98:04:f6:8e:26:6a:17:21:78:bb:7f:a6:2b:
88:79:00:f3:95:c4:f9:ac:8a:47:3f:d0:6a:3e:ab:
76:d5:6b:7e:45:c1:5b:f1:8b:98:95:a4:e6:5a:56:
69:a3:19:29:25:9a:a5:98:c5:ee:1d:fc:bb:f7:61:
f9:0f:ec:81:d8:12:78:6e:6b:c8:b4:fd:ea:c9:36:
f2:42:eb:a1:81:17:b9:cb:6b:3f:a5:9e:d5:23:6d:
19:86:ad:16:16:9a:b9:78:e3:76:8e:7b:85:9c:e3:
6a:51:b0:b3:bd:a7:bb:ff:f3:c8:3b:70:65:94:d1:
c2:34:25:2e:49:11:98:57:b1:87:8a:55:34:13:bb:
1c:ac:7a:35:2e:3c:df:fd:54:c3:34:a8:e5:60:3c:
b9:45:bc:33:d5:f6:5e:b6:e3:5c:c2:2a:1e:4c:5c:
55:4f:9e:89:64:2a:9b:26:cf:19:04:1a:50:16:5f:
31:5f:c4:f5:5e:f0:cd:06:c2:af:65:6e:c7:9d:32:
c3:fe:e2:b0:b9:49:a6:65:d0:66:68:3c:de:04:81:
69:85:ab:b9:59:c5:b6:e8:42:68:58:d9:25:c8:02:
89:9e:b9:56:25:50:28:4b:5d:13:56:99:13:8e:9d:
26:1d:91:d2:da:4a:c7:b4:da:19:4d:77:b9:76:c7:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D0:66:5F:FA:D6:1E:6D:4B:B6:36:FE:4D:55:EB:FD:D2:BD:95:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC4E9C66DFF011EFB0A1A84D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:32:43:4c:27:c3:8c:7b:43:3f:b6:40:cb:77:40:2e:8d:4d:
04:16:8e:cd:27:27:c8:c6:2d:92:c9:d4:c6:bd:87:28:5c:fd:
d1:2d:73:e5:7e:32:54:25:ea:07:f4:d0:3a:21:47:b4:61:4c:
71:b3:28:f8:cd:fb:ab:cd:6b:c4:23:f8:eb:93:27:3a:09:82:
e2:84:10:d5:d3:51:f7:69:8a:95:bf:00:8f:27:63:36:cb:3d:
bd:82:88:85:d1:0c:43:2a:40:8d:d2:8e:3a:c2:7f:76:23:c9:
83:6f:97:42:f0:96:84:ca:6c:ae:9c:d5:7c:36:9c:12:f5:bc:
4a:47:fb:22:50:8a:39:90:76:c5:a3:e1:1c:e3:c9:e0:73:1e:
49:86:66:02:ef:40:c4:e7:b8:fa:11:3b:11:12:0a:17:d9:63:
10:c7:85:dd:1a:ee:91:0c:0a:e5:83:92:a1:08:e4:76:c0:b5:
09:45:8b:e1:46:f5:42:e7:ae:bc:2b:22:a8:db:36:e1:62:4e:
47:72:e8:7a:70:94:b8:b1:78:e3:a8:56:bb:19:61:9d:0e:64:
0c:f6:f7:7a:ac:f9:6f:e6:38:f1:30:89:f6:e3:1c:39:46:c0:
50:76:cf:87:a4:e3:8f:1b:90:d5:1f:f8:95:04:d1:fb:85:45:
10:e8:28:f4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARZgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTMxMTYzMjA4WhcNMjUwMjEwMTYzMjA4WjAYMRYw
FAYDVQQDEw02NzljZmIwYy1kODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA75gE9o4mahcheLt/piuIeQDzlcT5rIpHP9BqPqt21Wt+RcFb8YuYlaTm
WlZpoxkpJZqlmMXuHfy792H5D+yB2BJ4bmvItP3qyTbyQuuhgRe5y2s/pZ7VI20Z
hq0WFpq5eON2jnuFnONqUbCzvae7//PIO3BllNHCNCUuSRGYV7GHilU0E7scrHo1
Ljzf/VTDNKjlYDy5Rbwz1fZetuNcwioeTFxVT56JZCqbJs8ZBBpQFl8xX8T1XvDN
BsKvZW7HnTLD/uKwuUmmZdBmaDzeBIFphau5WcW26EJoWNklyAKJnrlWJVAoS10T
VpkTjp0mHZHS2krHtNoZTXe5dsf/UwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMXQ
Zl/61h5tS7Y2/k1V6/3SvZUsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQzRFOUM2NkRGRjAxMUVGQjBBMUE4NEQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcDxMA0GCSqGSIb3DQEBCwUA
A4IBAQBsMkNMJ8OMe0M/tkDLd0AujU0EFo7NJyfIxi2SydTGvYcoXP3RLXPlfjJU
JeoH9NA6IUe0YUxxsyj4zfurzWvEI/jrkyc6CYLihBDV01H3aYqVvwCPJ2M2yz29
goiF0QxDKkCN0o46wn92I8mDb5dC8JaEymyunNV8NpwS9bxKR/siUIo5kHbFo+Ec
48ngcx5JhmYC70DE57j6ETsREgoX2WMQx4XdGu6RDArlg5KhCOR2wLUJRYvhRvVC
5668KyKo2zbhYk5Hcuh6cJS4sXjjqFa7GWGdDmQM9vd6rPlv5jjxMIn24xw5RsBQ
ds+HpOOPG5DVH/iVBNH7hUUQ6Cj0
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:40 2025 by rpki-client