Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE46EE4CD80211EF99B3606B762E951A.roa
File: EE46EE4CD80211EF99B3606B762E951A.roa (raw, json)
Hash identifier: wytaIWky5LkqIaRfQpbIcsT6uVBxQS5hOR+bmCeFv5Q=
Subject key identifier: C4:5B:39:79:94:D3:1F:A5:75:67:C2:02:91:93:5F:8F:83:15:19:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE46EE4CD80211EF99B3606B762E951A.roa
Signing time: Tue 21 Jan 2025 14:20:57 +0000
ROA not before: Tue 21 Jan 2025 14:20:53 +0000
ROA not after: Sat 01 Feb 2025 14:20:53 +0000
asID: 62240
IP address blocks: 45.192.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69126 (0x10e06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:20:53 2025 GMT
Not After : Feb 1 14:20:53 2025 GMT
Subject: CN=678fad49-b906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e6:40:ac:e0:97:89:26:eb:74:49:6c:75:50:
a9:3a:43:65:80:ec:a2:8c:0f:bd:e8:31:af:57:b7:
d0:04:11:c5:9b:94:4f:3b:82:e1:9d:36:6b:b5:dd:
0a:bc:21:8d:d0:c7:e0:04:e8:a8:e2:78:b0:ee:35:
4a:1a:44:fc:7b:16:7c:55:96:0b:78:6c:6c:6e:87:
48:41:bc:a2:01:48:bb:0a:13:bc:04:a1:da:94:5d:
dd:f0:d9:76:d3:ef:2b:18:b4:e4:8d:d3:ea:32:ee:
26:74:be:45:c4:80:8b:94:a6:de:d2:1d:4e:60:fd:
d4:96:95:98:3f:74:dc:32:d7:69:b2:a4:41:83:b0:
9c:ef:9e:57:47:32:dd:7e:3e:db:0b:a9:6f:22:2a:
03:e0:58:d2:ff:36:72:87:69:46:63:d2:dd:59:cf:
a4:00:9c:9f:9b:6d:09:30:91:0d:e6:53:2a:65:a0:
9f:50:7a:c7:47:01:cf:57:52:95:a6:e4:b3:0e:d5:
0e:0f:db:41:eb:56:8b:4b:36:d4:c5:cd:16:a9:3e:
75:b6:d7:ed:c2:98:86:f5:b6:fc:f7:77:a9:9c:a6:
b8:01:e7:4d:59:a4:30:c7:5d:80:51:37:e9:f1:60:
8d:23:8b:53:fe:b0:da:0e:8a:c1:7b:d4:60:16:22:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5B:39:79:94:D3:1F:A5:75:67:C2:02:91:93:5F:8F:83:15:19:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE46EE4CD80211EF99B3606B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.38.0/24
Signature Algorithm: sha256WithRSAEncryption
67:52:50:33:9e:5b:e4:1c:c0:47:d3:1d:1c:d3:13:0a:80:36:
da:53:9b:7d:ac:af:5a:e3:f2:c7:7f:19:5a:fe:27:45:36:9f:
6d:95:0e:f4:4d:9f:7d:e2:dc:d4:15:75:cc:4a:6b:b5:d6:0c:
ad:f2:64:81:02:8c:9c:cf:e6:61:87:e5:88:6b:68:46:b9:6b:
a3:93:2f:53:91:10:a9:97:04:c6:20:27:3e:c3:d8:65:aa:14:
d4:07:5c:f4:17:aa:c6:27:1a:ab:92:ab:14:25:2f:c3:6d:cc:
8c:a1:57:86:bc:4c:0b:12:90:42:9c:58:df:fc:2e:7b:6d:8c:
11:13:31:dd:c2:25:17:d2:85:be:47:49:c9:84:4c:67:a4:96:
3c:fb:0c:37:ff:1c:e0:54:da:ca:6b:86:44:e6:84:53:e3:90:
aa:ca:5d:59:3b:21:a0:f2:ca:eb:9f:f8:a3:a0:b9:1b:c8:cc:
8a:dc:17:f4:bd:54:34:cb:2e:55:c0:d5:15:6d:17:c2:42:eb:
de:76:a6:b2:a7:53:83:75:9c:ec:dd:ce:d7:1e:d4:88:43:7c:
79:2b:c9:c9:ee:39:45:8d:33:d5:ea:05:e4:e9:36:a2:54:24:
d1:c0:0c:20:a2:9e:60:8b:d1:2e:c4:4c:5d:ed:49:92:38:ba:
5d:78:12:8d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ4GMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTQyMDUzWhcNMjUwMjAxMTQyMDUzWjAYMRYw
FAYDVQQDEw02NzhmYWQ0OS1iOTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+uZArOCXiSbrdElsdVCpOkNlgOyijA+96DGvV7fQBBHFm5RPO4LhnTZr
td0KvCGN0MfgBOio4niw7jVKGkT8exZ8VZYLeGxsbodIQbyiAUi7ChO8BKHalF3d
8Nl20+8rGLTkjdPqMu4mdL5FxICLlKbe0h1OYP3UlpWYP3TcMtdpsqRBg7Cc755X
RzLdfj7bC6lvIioD4FjS/zZyh2lGY9LdWc+kAJyfm20JMJEN5lMqZaCfUHrHRwHP
V1KVpuSzDtUOD9tB61aLSzbUxc0WqT51ttftwpiG9bb893epnKa4AedNWaQwx12A
UTfp8WCNI4tT/rDaDorBe9RgFiJ2fwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMRb
OXmU0x+ldWfCApGTX4+DFRmzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRTQ2RUU0Q0Q4MDIxMUVGOTlCMzYwNkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAmMA0GCSqGSIb3DQEBCwUA
A4IBAQBnUlAznlvkHMBH0x0c0xMKgDbaU5t9rK9a4/LHfxla/idFNp9tlQ70TZ99
4tzUFXXMSmu11gyt8mSBAoycz+Zhh+WIa2hGuWujky9TkRCplwTGICc+w9hlqhTU
B1z0F6rGJxqrkqsUJS/DbcyMoVeGvEwLEpBCnFjf/C57bYwREzHdwiUX0oW+R0nJ
hExnpJY8+ww3/xzgVNrKa4ZE5oRT45Cqyl1ZOyGg8srrn/ijoLkbyMyK3Bf0vVQ0
yy5VwNUVbRfCQuvedqayp1ODdZzs3c7XHtSIQ3x5K8nJ7jlFjTPV6gXk6TaiVCTR
wAwgop5gi9EuxExd7UmSOLpdeBKN
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:19:07 2025 by rpki-client