Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/84D8F36CDF9911EFB663908A762E951A.roa
File: 84D8F36CDF9911EFB663908A762E951A.roa (raw, json)
Hash identifier: ahGCGFkUnt3MxmRNn6UcOW6Ec9tfP0BMrN6nhGYNYw8=
Subject key identifier: 7D:D6:AF:7F:C2:B8:CF:38:52:5C:AF:35:46:07:BC:66:70:B8:82:F1
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 046B
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/84D8F36CDF9911EFB663908A762E951A.roa
Signing time: Fri 31 Jan 2025 06:06:32 +0000
ROA not before: Fri 31 Jan 2025 06:06:27 +0000
ROA not after: Sat 31 Jan 2026 06:06:27 +0000
asID: 43260
IP address blocks: 45.221.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1131 (0x46b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR
Validity
Not Before: Jan 31 06:06:27 2025 GMT
Not After : Jan 31 06:06:27 2026 GMT
Subject: CN=679c6868-d7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:0d:49:6a:5f:7e:7d:75:09:98:a5:26:8f:af:
c7:a8:28:3b:b9:ec:c1:2f:c9:ca:9f:bd:fd:de:8a:
d7:49:c5:5a:27:13:aa:a1:1f:c5:31:d8:51:33:63:
ff:f9:83:70:d4:d8:93:7c:5c:85:5f:1e:f8:55:0e:
1f:1a:8b:f5:3e:ff:ba:b3:06:d9:71:36:e9:8b:fe:
40:05:15:81:43:68:ad:db:19:4c:f8:98:bc:03:c2:
fa:67:b0:f5:94:0b:df:7a:54:45:66:69:af:a7:2f:
19:09:11:4f:52:da:d6:b5:a1:2d:a2:7b:8e:8e:0c:
d6:4c:75:1d:c7:e5:92:a4:a5:a3:e6:f0:49:d5:ff:
d7:da:46:75:61:7d:4b:e2:3e:23:75:1f:40:ca:7e:
f6:b1:15:62:ce:be:f3:10:7e:02:da:88:99:04:5f:
db:17:1f:ca:fd:e0:ec:21:aa:ac:31:c7:cf:8d:36:
1a:9b:37:a3:5c:03:66:d1:37:8b:05:26:d0:8f:7a:
cd:e3:77:a9:d7:eb:2a:c1:74:9e:70:32:d1:b1:dc:
1e:4a:83:d0:f4:01:b6:98:5f:56:3b:84:1a:49:e3:
ed:37:3d:4b:21:b7:e4:82:74:7e:49:12:d9:ba:f9:
72:9c:7e:e9:f8:fb:f3:0a:17:22:9e:4a:b5:05:ce:
3f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D6:AF:7F:C2:B8:CF:38:52:5C:AF:35:46:07:BC:66:70:B8:82:F1
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/84D8F36CDF9911EFB663908A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.71.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:a1:ff:eb:0b:c7:48:fa:a4:f9:a5:8e:89:94:e0:87:6b:76:
67:95:b4:76:95:3e:7e:51:c8:16:a3:76:80:5e:43:e4:b5:48:
0e:64:a3:d5:06:9f:86:26:9d:95:c9:89:42:15:18:45:0d:05:
cf:30:94:d7:13:75:c9:1e:17:b2:45:06:25:97:10:48:f0:d5:
c4:85:9e:3f:d9:ee:c7:6d:67:ea:53:57:24:18:ea:d1:87:12:
8d:cc:6a:d0:f8:3b:4b:ac:86:47:e5:35:ee:1d:3e:89:74:60:
e3:34:2e:96:7c:8a:01:20:c7:b8:8f:f0:ca:6a:6f:d6:52:e6:
d8:a8:58:f1:1b:4e:60:cd:63:3c:a6:c3:63:6b:04:1b:82:3e:
bd:20:ae:48:a0:88:80:6d:7f:d2:83:b7:8f:be:c9:21:10:8a:
58:e1:fb:84:4b:9a:0b:fb:92:db:72:92:03:2d:03:d9:8a:6c:
59:8c:97:1a:6f:f4:db:55:38:b4:0a:bc:e1:f4:a1:9f:0c:04:
68:04:fd:f8:9b:eb:50:ea:80:d4:3b:a3:62:5d:6d:52:85:11:
e4:05:f7:f4:88:66:37:5c:08:26:3c:29:23:fb:7f:67:83:6d:
67:5c:f2:65:f0:94:d7:ff:f7:71:8d:19:9d:23:05:39:cc:f6:
12:74:90:4a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBGswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yNTAxMzEwNjA2MjdaFw0yNjAxMzEwNjA2MjdaMBgxFjAU
BgNVBAMTDTY3OWM2ODY4LWQ3YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD8DUlqX359dQmYpSaPr8eoKDu57MEvycqfvf3eitdJxVonE6qhH8Ux2FEz
Y//5g3DU2JN8XIVfHvhVDh8ai/U+/7qzBtlxNumL/kAFFYFDaK3bGUz4mLwDwvpn
sPWUC996VEVmaa+nLxkJEU9S2ta1oS2ie46ODNZMdR3H5ZKkpaPm8EnV/9faRnVh
fUviPiN1H0DKfvaxFWLOvvMQfgLaiJkEX9sXH8r94Owhqqwxx8+NNhqbN6NcA2bR
N4sFJtCPes3jd6nX6yrBdJ5wMtGx3B5Kg9D0AbaYX1Y7hBpJ4+03PUsht+SCdH5J
Etm6+XKcfun4+/MKFyKeSrUFzj/lAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfdav
f8K4zzhSXK81Rge8ZnC4gvEwHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBE
NTc3Lzg0RDhGMzZDREY5OTExRUZCNjYzOTA4QTc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt3UcwDQYJKoZIhvcNAQELBQAD
ggEBAMCh/+sLx0j6pPmljomU4IdrdmeVtHaVPn5RyBajdoBeQ+S1SA5ko9UGn4Ym
nZXJiUIVGEUNBc8wlNcTdckeF7JFBiWXEEjw1cSFnj/Z7sdtZ+pTVyQY6tGHEo3M
atD4O0ushkflNe4dPol0YOM0LpZ8igEgx7iP8Mpqb9ZS5tioWPEbTmDNYzymw2Nr
BBuCPr0grkigiIBtf9KDt4++ySEQiljh+4RLmgv7kttykgMtA9mKbFmMlxpv9NtV
OLQKvOH0oZ8MBGgE/fib61DqgNQ7o2JdbVKFEeQF9/SIZjdcCCY8KSP7f2eDbWdc
8mXwlNf/93GNGZ0jBTnM9hJ0kEo=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:27 2025 by rpki-client