Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/33D2AB36C8CC11EFB0DCE57A762E951A.roa
File: 33D2AB36C8CC11EFB0DCE57A762E951A.roa (raw, json)
Hash identifier: L49VyWmo8558KB/fjlMRhNx+GggTl6IqnFHK5RSAWcI=
Subject key identifier: F4:BE:84:ED:6E:39:AC:8B:87:B3:17:7C:32:B6:B2:46:06:E8:CF:2D
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 043B
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/33D2AB36C8CC11EFB0DCE57A762E951A.roa
Signing time: Thu 02 Jan 2025 05:41:24 +0000
ROA not before: Thu 02 Jan 2025 05:41:20 +0000
ROA not after: Tue 01 Dec 2026 05:41:20 +0000
asID: 329007
IP address blocks: 45.221.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083 (0x43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR
Validity
Not Before: Jan 2 05:41:20 2025 GMT
Not After : Dec 1 05:41:20 2026 GMT
Subject: CN=67762704-95f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:43:9b:8c:21:97:bf:6e:b0:71:45:b2:97:
13:17:0f:c0:dd:ea:5f:2e:d5:7f:ca:5e:01:27:a9:
0b:00:50:2c:8b:b1:6e:73:fd:e2:d3:f2:f3:69:7f:
67:b0:ef:37:d7:77:52:af:3f:8e:c9:2f:66:d1:2c:
0a:39:0f:3c:6c:83:67:cb:2e:ab:49:0e:2c:2f:e3:
c3:69:8c:34:da:00:92:31:21:ab:cb:f6:04:05:0d:
d7:de:2c:f5:58:23:80:2c:88:a6:8c:fe:c6:b8:51:
52:2b:e7:9d:0a:92:72:70:95:98:32:7b:9d:a5:a8:
fd:70:2d:75:2d:9b:b7:94:28:cd:72:20:8c:b8:70:
66:95:34:51:1a:b9:d0:3f:4b:9f:c6:44:b5:7f:30:
96:74:1e:6a:7b:50:de:87:35:74:a2:65:96:d8:5e:
be:67:02:1c:f4:7e:da:98:c6:a9:18:83:28:f3:dd:
ee:f3:d3:b6:43:21:b6:80:18:06:47:ea:36:09:72:
c6:35:4c:86:44:90:12:c9:d9:08:14:8e:4a:25:42:
4a:51:04:f8:1e:dc:72:f4:b7:35:9e:6b:d6:82:db:
0e:97:fb:85:ac:7f:b4:f0:50:24:a3:9b:ac:49:ab:
55:1a:3c:f4:b7:e6:e1:29:a5:2e:ef:87:68:e5:0d:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BE:84:ED:6E:39:AC:8B:87:B3:17:7C:32:B6:B2:46:06:E8:CF:2D
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/33D2AB36C8CC11EFB0DCE57A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.66.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:35:27:7b:d6:f4:91:88:e4:94:f1:0c:fc:cf:f6:84:1e:5e:
bf:fc:77:fe:e8:5f:32:23:bb:29:46:22:5a:c9:b3:5e:fa:9d:
e6:51:a2:99:49:d5:6a:d9:17:04:aa:9c:99:39:a0:32:ec:db:
a9:50:e9:14:c1:3c:69:e8:68:1c:18:ef:e2:f8:8e:85:9f:1e:
07:82:f5:32:28:21:cf:d2:63:f8:0b:c8:21:b0:50:01:1c:fa:
fa:8a:63:2a:c8:03:8d:8a:74:12:7a:ef:86:d8:ed:ea:58:d4:
38:a7:45:36:4b:4d:08:ec:3d:d9:0b:d3:a6:ab:60:53:de:d9:
c1:45:39:50:19:79:e0:4b:22:18:35:d2:9a:41:0a:45:e1:78:
16:cb:a7:e3:87:9c:3e:33:30:62:24:46:51:97:f1:a8:93:58:
55:46:f3:40:79:c9:52:b6:8f:44:b1:51:81:f1:a3:5a:4a:40:
d2:bd:fd:7d:16:65:9a:ae:29:db:cf:59:8c:a3:67:fd:a7:5d:
4e:8f:a9:be:f3:f1:11:d1:d4:bc:53:2d:e8:0d:00:c1:89:1f:
fa:9b:3f:77:14:f9:93:98:12:c8:60:b1:b2:3c:0b:7f:e2:29:
82:ee:c0:92:0f:d8:ee:dd:5e:82:e3:09:7e:7e:b2:09:2b:89:
dc:20:ff:02
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBDswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yNTAxMDIwNTQxMjBaFw0yNjEyMDEwNTQxMjBaMBgxFjAU
BgNVBAMTDTY3NzYyNzA0LTk1ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDX8kObjCGXv26wcUWylxMXD8Dd6l8u1X/KXgEnqQsAUCyLsW5z/eLT8vNp
f2ew7zfXd1KvP47JL2bRLAo5Dzxsg2fLLqtJDiwv48NpjDTaAJIxIavL9gQFDdfe
LPVYI4AsiKaM/sa4UVIr550KknJwlZgye52lqP1wLXUtm7eUKM1yIIy4cGaVNFEa
udA/S5/GRLV/MJZ0Hmp7UN6HNXSiZZbYXr5nAhz0ftqYxqkYgyjz3e7z07ZDIbaA
GAZH6jYJcsY1TIZEkBLJ2QgUjkolQkpRBPge3HL0tzWea9aC2w6X+4Wsf7TwUCSj
m6xJq1UaPPS35uEppS7vh2jlDdLvAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU9L6E
7W45rIuHsxd8MrayRgbozy0wHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBE
NTc3LzMzRDJBQjM2QzhDQzExRUZCMERDRTU3QTc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt3UIwDQYJKoZIhvcNAQELBQAD
ggEBALg1J3vW9JGI5JTxDPzP9oQeXr/8d/7oXzIjuylGIlrJs176neZRoplJ1WrZ
FwSqnJk5oDLs26lQ6RTBPGnoaBwY7+L4joWfHgeC9TIoIc/SY/gLyCGwUAEc+vqK
YyrIA42KdBJ674bY7epY1DinRTZLTQjsPdkL06arYFPe2cFFOVAZeeBLIhg10ppB
CkXheBbLp+OHnD4zMGIkRlGX8aiTWFVG80B5yVK2j0SxUYHxo1pKQNK9/X0WZZqu
KdvPWYyjZ/2nXU6Pqb7z8RHR1LxTLegNAMGJH/qbP3cU+ZOYEshgsbI8C3/iKYLu
wJIP2O7dXoLjCX5+sgkridwg/wI=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:03 2025 by rpki-client