Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6FA2390DC9611EFB3C552B3762E951A.roa
File: F6FA2390DC9611EFB3C552B3762E951A.roa (raw, json)
Hash identifier: BoxqZ3sZKNuW0WkG+8IAEKku0raVAeRJhAmgBwd22ok=
Subject key identifier: 41:45:5D:E6:51:4B:48:4A:40:35:8A:6B:DF:13:FF:59:E7:C6:D1:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6FA2390DC9611EFB3C552B3762E951A.roa
Signing time: Mon 27 Jan 2025 10:10:42 +0000
ROA not before: Mon 27 Jan 2025 10:10:38 +0000
ROA not after: Sat 08 Feb 2025 10:10:38 +0000
asID: 5065
IP address blocks: 45.199.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70869 (0x114d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 10:10:38 2025 GMT
Not After : Feb 8 10:10:38 2025 GMT
Subject: CN=67975ba2-d084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:75:58:53:ea:25:3f:09:be:4d:09:63:5e:
ba:66:6f:81:b4:cd:8f:23:2d:54:9c:21:e0:ce:e1:
2b:4d:9a:c2:65:e6:a4:de:a4:59:06:0e:69:70:fb:
02:36:ce:83:c9:9a:f7:92:1c:87:2f:2b:ab:0d:7e:
e6:d3:6e:98:7c:ed:6d:57:a7:5e:b0:ce:a4:13:49:
25:d6:1a:75:c9:66:bc:00:9b:3d:77:7e:c7:37:19:
0f:bf:37:a6:33:9d:53:f4:ea:3a:a5:01:24:2c:ed:
59:19:29:0d:58:d5:49:21:69:4b:19:3c:65:78:c4:
70:94:52:54:ca:9e:e2:37:5c:d5:8c:37:ef:87:02:
ff:98:60:da:5d:b0:d0:33:36:3e:38:c9:3b:9f:79:
05:84:bc:ef:46:23:c8:93:8c:7f:ff:60:e7:96:fd:
41:60:5e:c1:1b:ca:95:bb:ed:62:0b:88:16:be:0e:
ce:9c:77:77:ef:62:28:17:0c:78:8d:07:75:d2:e7:
a3:31:dd:53:b4:29:2e:1b:f8:a3:16:48:98:11:18:
47:40:67:1a:58:23:f4:b8:a1:10:bf:08:56:91:e0:
39:9a:45:bb:d2:88:49:20:23:f0:63:31:ac:78:ea:
29:ec:2d:9b:36:84:69:39:3e:b3:f8:d9:d1:57:9f:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:45:5D:E6:51:4B:48:4A:40:35:8A:6B:DF:13:FF:59:E7:C6:D1:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6FA2390DC9611EFB3C552B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.156.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:82:5c:43:ab:7a:ba:ca:5a:43:55:e6:13:26:cd:fe:8d:59:
f3:34:7b:48:ac:3c:bb:38:88:60:8b:cd:0f:22:e1:2d:cd:a6:
67:60:f7:52:7c:fb:4f:f3:5b:1a:e8:70:f9:eb:20:02:9a:17:
5b:75:d3:0d:27:f1:b1:28:bc:00:c0:82:c3:a6:81:73:5d:e5:
5d:77:e2:07:77:6d:db:78:5a:b1:4e:b7:1d:72:1d:9b:89:15:
4c:f2:51:d3:9c:30:c4:25:49:38:f0:6f:de:13:ec:b3:35:07:
81:44:d0:5b:43:ba:9e:d2:49:0d:8f:28:e1:9f:b2:0e:fd:20:
4e:f2:19:98:86:d9:bd:bd:5a:b7:f1:06:a5:5d:18:fe:d4:d6:
1d:e5:41:e4:9e:2c:75:6c:54:c2:19:14:1f:70:17:45:6a:90:
e1:f7:9a:74:e8:19:31:0c:18:7a:7e:f6:0c:c1:ca:3d:1b:84:
49:66:84:f7:52:96:ac:22:92:f1:b8:be:f0:e3:90:8e:f8:29:
e1:9f:cc:03:0c:ca:86:0c:73:b9:11:7d:bd:35:1f:43:d2:50:
8e:9d:95:a6:92:61:e4:51:27:ba:67:ea:52:34:b4:61:02:40:
38:bb:20:c4:85:fb:74:ef:35:0d:bd:69:fe:1c:0f:75:0a:14:
b2:f4:34:5d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARTVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MTAxMDM4WhcNMjUwMjA4MTAxMDM4WjAYMRYw
FAYDVQQDEw02Nzk3NWJhMi1kMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArLV1WFPqJT8Jvk0JY166Zm+BtM2PIy1UnCHgzuErTZrCZeak3qRZBg5p
cPsCNs6DyZr3khyHLyurDX7m026YfO1tV6desM6kE0kl1hp1yWa8AJs9d37HNxkP
vzemM51T9Oo6pQEkLO1ZGSkNWNVJIWlLGTxleMRwlFJUyp7iN1zVjDfvhwL/mGDa
XbDQMzY+OMk7n3kFhLzvRiPIk4x//2Dnlv1BYF7BG8qVu+1iC4gWvg7OnHd372Io
Fwx4jQd10uejMd1TtCkuG/ijFkiYERhHQGcaWCP0uKEQvwhWkeA5mkW70ohJICPw
YzGseOop7C2bNoRpOT6z+NnRV5+TWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEFF
XeZRS0hKQDWKa98T/1nnxtE1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNkZBMjM5MERDOTYxMUVGQjNDNTUyQjM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcecMA0GCSqGSIb3DQEBCwUA
A4IBAQA+glxDq3q6ylpDVeYTJs3+jVnzNHtIrDy7OIhgi80PIuEtzaZnYPdSfPtP
81sa6HD56yACmhdbddMNJ/GxKLwAwILDpoFzXeVdd+IHd23beFqxTrcdch2biRVM
8lHTnDDEJUk48G/eE+yzNQeBRNBbQ7qe0kkNjyjhn7IO/SBO8hmYhtm9vVq38Qal
XRj+1NYd5UHknix1bFTCGRQfcBdFapDh95p06BkxDBh6fvYMwco9G4RJZoT3Upas
IpLxuL7w45CO+Cnhn8wDDMqGDHO5EX29NR9D0lCOnZWmkmHkUSe6Z+pSNLRhAkA4
uyDEhft07zUNvWn+HA91ChSy9DRd
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:44:35 2025 by rpki-client