Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEAFD31CD58211EFBAD81592762E951A.roa
File: EEAFD31CD58211EFBAD81592762E951A.roa (raw, json)
Hash identifier: HGHZOvubjnuHwWxPI5oemImBhTrkQMR3nrLUv3gKGik=
Subject key identifier: F9:F8:0C:83:BE:39:49:15:16:1F:F6:02:48:3D:56:3D:19:EA:BF:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEAFD31CD58211EFBAD81592762E951A.roa
Signing time: Sat 18 Jan 2025 09:59:40 +0000
ROA not before: Sat 18 Jan 2025 09:59:36 +0000
ROA not after: Sun 23 Feb 2025 09:59:36 +0000
asID: 395793
IP address blocks: 45.194.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68455 (0x10b67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 09:59:36 2025 GMT
Not After : Feb 23 09:59:36 2025 GMT
Subject: CN=678b7b8c-1963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:a8:ae:77:e4:53:25:03:a6:17:9e:d8:62:
ec:af:7e:7c:bd:5c:c1:76:bf:39:33:c1:8f:55:2d:
09:30:9d:d5:2c:e4:80:fb:26:ca:da:3a:4c:54:6c:
ab:5b:f5:8c:22:17:15:26:36:d9:21:72:92:50:6f:
1a:a7:d7:c5:32:a1:88:92:4b:24:e1:16:19:06:54:
3f:19:92:27:8f:ec:b9:d8:0f:9a:e9:18:bc:3b:07:
73:b9:7c:dc:9d:2f:cf:c2:bb:0b:77:35:54:6d:29:
34:c6:a7:95:0a:7e:4c:e2:36:39:9e:66:d5:ea:07:
cc:c4:08:b0:3b:a0:28:21:38:f5:3b:91:8a:50:51:
ff:3a:9b:4e:5c:57:3a:a9:fb:cb:6b:e9:d5:4e:3b:
ac:12:81:69:ab:74:5a:e2:12:f1:3a:94:b8:21:61:
c3:ae:66:47:38:66:eb:af:c5:9f:b7:05:38:73:68:
23:af:ae:9a:ff:ea:f8:6d:2f:21:7c:b9:fa:b9:da:
58:db:b0:9c:a2:59:56:48:a3:3d:8a:d4:05:3f:d7:
a9:c3:51:cb:20:d3:66:be:f8:82:d8:ce:1d:e9:24:
ce:11:27:9c:50:f4:a4:c6:5d:68:27:d5:94:17:dd:
df:46:43:10:f0:14:16:9b:2f:36:6b:69:79:f4:e8:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F8:0C:83:BE:39:49:15:16:1F:F6:02:48:3D:56:3D:19:EA:BF:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEAFD31CD58211EFBAD81592762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.24.0/24
Signature Algorithm: sha256WithRSAEncryption
53:3b:95:f4:f6:0c:c2:e1:ef:1c:38:c0:52:62:b1:b2:68:00:
fe:0b:ee:fe:69:cf:f6:0e:58:f3:6c:14:76:c7:3a:0e:65:30:
c2:38:d5:a0:8b:0e:fa:33:0f:c4:fe:4c:a4:6b:2d:81:48:bc:
cd:39:3d:ba:f9:ef:62:e5:1a:8d:73:0c:95:03:e9:d2:28:76:
5b:81:54:c3:8b:ed:f5:9a:da:38:d5:bb:fe:98:d5:c1:47:a1:
e6:58:fc:1a:65:90:15:b5:b1:63:c7:55:82:85:ae:73:d5:cf:
44:69:76:6a:41:73:e6:c7:36:8e:8d:29:6c:88:07:6e:4d:45:
99:d5:e8:bd:4a:19:21:2d:5d:e7:43:d2:f5:d7:7c:4f:ca:a7:
04:04:e3:bb:9c:22:54:eb:b3:2f:bb:56:b3:a2:77:72:62:38:
d7:62:23:dc:08:54:4d:64:fa:5a:fe:79:25:66:63:85:83:5d:
02:21:7b:f3:0c:5e:d5:3e:9b:39:38:2f:ad:cc:af:33:9e:a8:
1e:91:f1:10:f4:eb:8b:df:f2:3f:72:15:33:51:5c:9e:5f:e6:
92:e1:64:c6:6a:ce:78:ff:ee:2b:c1:24:a0:95:2e:d4:47:ce:
2e:f6:ed:f2:a3:65:16:63:e7:fe:33:9a:a5:aa:b1:a7:2e:a1:
9d:78:26:80
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQtnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE4MDk1OTM2WhcNMjUwMjIzMDk1OTM2WjAYMRYw
FAYDVQQDEw02NzhiN2I4Yy0xOTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArP+ornfkUyUDphee2GLsr358vVzBdr85M8GPVS0JMJ3VLOSA+ybK2jpM
VGyrW/WMIhcVJjbZIXKSUG8ap9fFMqGIkksk4RYZBlQ/GZInj+y52A+a6Ri8Owdz
uXzcnS/PwrsLdzVUbSk0xqeVCn5M4jY5nmbV6gfMxAiwO6AoITj1O5GKUFH/OptO
XFc6qfvLa+nVTjusEoFpq3Ra4hLxOpS4IWHDrmZHOGbrr8WftwU4c2gjr66a/+r4
bS8hfLn6udpY27CcollWSKM9itQFP9epw1HLINNmvviC2M4d6STOESecUPSkxl1o
J9WUF93fRkMQ8BQWmy82a2l59OiAUQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPn4
DIO+OUkVFh/2Akg9Vj0Z6r/MMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRUFGRDMxQ0Q1ODIxMUVGQkFEODE1OTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIYMA0GCSqGSIb3DQEBCwUA
A4IBAQBTO5X09gzC4e8cOMBSYrGyaAD+C+7+ac/2DljzbBR2xzoOZTDCONWgiw76
Mw/E/kykay2BSLzNOT26+e9i5RqNcwyVA+nSKHZbgVTDi+31mto41bv+mNXBR6Hm
WPwaZZAVtbFjx1WCha5z1c9EaXZqQXPmxzaOjSlsiAduTUWZ1ei9ShkhLV3nQ9L1
13xPyqcEBOO7nCJU67Mvu1azondyYjjXYiPcCFRNZPpa/nklZmOFg10CIXvzDF7V
Pps5OC+tzK8znqgekfEQ9OuL3/I/chUzUVyeX+aS4WTGas54/+4rwSSglS7UR84u
9u3yo2UWY+f+M5qlqrGnLqGdeCaA
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:24 2025 by rpki-client