Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5745062D72911EFA9586B5E762E951A.roa
File: F5745062D72911EFA9586B5E762E951A.roa (raw, json)
Hash identifier: fUGGQJi8kAneiD6y3HmAvEH5k4hAeYCJdZg8zOlWMMQ=
Subject key identifier: 22:A9:63:8A:A3:07:B5:A1:57:4A:9A:5B:1D:52:D2:9A:00:77:F5:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C79
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5745062D72911EFA9586B5E762E951A.roa
Signing time: Mon 20 Jan 2025 12:27:48 +0000
ROA not before: Mon 20 Jan 2025 12:27:45 +0000
ROA not after: Sat 01 Feb 2025 12:27:45 +0000
asID: 6079
IP address blocks: 45.203.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68729 (0x10c79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 12:27:45 2025 GMT
Not After : Feb 1 12:27:45 2025 GMT
Subject: CN=678e4144-83c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:2a:c2:e7:72:8d:a0:d1:83:b1:ae:17:6d:
76:79:2f:fd:4a:7e:a4:97:5f:32:14:2b:11:03:77:
4d:01:2e:b8:ae:16:b7:09:11:34:33:96:09:86:bc:
2d:54:71:cc:6d:e3:af:c6:a4:a0:d2:56:90:48:aa:
96:2a:bf:9b:97:67:06:b9:44:2c:99:c3:f1:19:6b:
3c:8c:a5:f4:67:aa:a6:dc:f0:ab:26:e4:0d:6d:98:
52:16:1c:d6:c1:7f:d8:54:74:1f:05:b0:41:d4:b9:
d0:fd:61:87:70:06:a0:55:31:ac:4a:f5:da:40:62:
39:56:4f:96:34:ed:0c:0c:58:c5:22:78:c8:ce:87:
a3:42:a2:28:ac:90:69:10:db:05:c5:ce:f0:2a:da:
e8:0f:13:cd:ae:34:a0:c9:ae:c4:c5:37:8d:69:34:
9e:a3:ca:eb:aa:0d:df:2e:1c:fd:ca:77:8e:82:40:
d4:41:bb:07:df:77:86:f0:f5:68:bc:94:cf:42:8f:
0c:7d:f6:52:a4:dd:cb:56:27:70:55:f5:ed:31:21:
2a:69:75:91:4d:c0:10:48:4f:e3:2e:98:cf:3d:74:
ef:36:7c:c3:f9:f1:ee:b5:fd:98:52:41:c5:83:9a:
58:7c:29:e5:4d:74:86:ca:5f:39:b6:82:db:f0:77:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A9:63:8A:A3:07:B5:A1:57:4A:9A:5B:1D:52:D2:9A:00:77:F5:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5745062D72911EFA9586B5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.244.0/24
Signature Algorithm: sha256WithRSAEncryption
02:8b:2e:d1:d1:8f:e8:bf:e0:8a:a6:f3:52:cd:a7:63:2a:c8:
02:d7:01:bb:0d:3c:5e:9e:32:19:a5:36:9b:72:8d:ed:4c:f0:
f6:a2:fd:b7:66:d2:f2:31:5e:51:79:75:53:1a:92:39:34:40:
36:70:7f:2e:36:50:29:41:98:b0:5b:01:6a:01:b3:43:50:81:
c4:5b:74:59:09:63:e2:0e:21:43:48:89:e5:ff:3a:3e:1d:87:
fb:74:51:76:01:f0:80:45:c6:d5:8c:19:a8:09:7f:7c:9d:1e:
94:ce:61:64:b2:bb:0b:60:ee:9c:4f:8b:35:dd:7b:e0:48:c1:
6d:9d:5a:af:64:1b:a5:ab:ff:62:a8:78:23:9c:3d:eb:98:c0:
78:c9:bb:80:98:d8:bf:7f:b4:1b:eb:36:c1:b9:c3:70:8b:31:
11:1e:0b:24:51:f0:fe:e4:d6:2a:dd:28:f7:59:9b:e8:a9:22:
e1:13:41:6a:ad:30:d2:f9:de:9d:54:bd:06:6c:c6:65:2e:3e:
9c:9f:03:95:d4:75:91:a5:c4:b0:35:41:0d:66:8f:f7:11:c5:
f2:6e:25:61:cd:0e:5c:bf:8b:77:fa:b4:de:bb:d7:ef:72:f6:
f3:e2:e9:23:76:55:26:d9:20:bf:52:f9:e6:1c:81:36:bb:ab:
39:c6:cd:1a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQx5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIwMTIyNzQ1WhcNMjUwMjAxMTIyNzQ1WjAYMRYw
FAYDVQQDEw02NzhlNDE0NC04M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAusMqwudyjaDRg7GuF212eS/9Sn6kl18yFCsRA3dNAS64rha3CRE0M5YJ
hrwtVHHMbeOvxqSg0laQSKqWKr+bl2cGuUQsmcPxGWs8jKX0Z6qm3PCrJuQNbZhS
FhzWwX/YVHQfBbBB1LnQ/WGHcAagVTGsSvXaQGI5Vk+WNO0MDFjFInjIzoejQqIo
rJBpENsFxc7wKtroDxPNrjSgya7ExTeNaTSeo8rrqg3fLhz9yneOgkDUQbsH33eG
8PVovJTPQo8MffZSpN3LVidwVfXtMSEqaXWRTcAQSE/jLpjPPXTvNnzD+fHutf2Y
UkHFg5pYfCnlTXSGyl85toLb8HegnQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCKp
Y4qjB7WhV0qaWx1S0poAd/XAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNTc0NTA2MkQ3MjkxMUVGQTk1ODZCNUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcv0MA0GCSqGSIb3DQEBCwUA
A4IBAQACiy7R0Y/ov+CKpvNSzadjKsgC1wG7DTxenjIZpTabco3tTPD2ov23ZtLy
MV5ReXVTGpI5NEA2cH8uNlApQZiwWwFqAbNDUIHEW3RZCWPiDiFDSInl/zo+HYf7
dFF2AfCARcbVjBmoCX98nR6UzmFksrsLYO6cT4s13XvgSMFtnVqvZBulq/9iqHgj
nD3rmMB4ybuAmNi/f7Qb6zbBucNwizERHgskUfD+5NYq3Sj3WZvoqSLhE0FqrTDS
+d6dVL0GbMZlLj6cnwOV1HWRpcSwNUENZo/3EcXybiVhzQ5cv4t3+rTeu9fvcvbz
4ukjdlUm2SC/UvnmHIE2u6s5xs0a
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:08:49 2025 by rpki-client