Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032B2AE4F38811EF827F2F52762E951A.roa
File: 032B2AE4F38811EF827F2F52762E951A.roa (raw, json)
Hash identifier: 0Ch3iajEA/9ujVjtLDLDkEUOr3TyReZr4+HxDRCpSCw=
Subject key identifier: DC:C0:4F:AC:3C:FE:24:FD:64:93:AB:00:85:95:38:55:03:C4:52:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E40
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032B2AE4F38811EF827F2F52762E951A.roa
Signing time: Tue 25 Feb 2025 14:51:37 +0000
ROA not before: Tue 25 Feb 2025 14:51:26 +0000
ROA not after: Wed 09 Apr 2025 14:51:26 +0000
asID: 63139
IP address blocks: 45.197.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77376 (0x12e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 14:51:26 2025 GMT
Not After : Apr 9 14:51:26 2025 GMT
Subject: CN=67bdd8f9-10eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:87:2e:b8:cf:ef:bb:fa:a3:64:eb:5e:41:
30:ee:56:b1:fe:cf:f7:0a:f1:ff:88:71:38:d4:6c:
2c:06:85:b2:ee:d4:12:9e:35:a3:98:35:80:a3:64:
73:12:ac:fe:15:69:6e:93:af:da:3a:0b:dc:05:16:
f6:a6:10:57:e5:08:91:21:a0:45:42:c7:91:c6:df:
f4:7a:ab:58:e9:a8:a6:b1:46:3a:fa:63:f2:da:51:
e2:59:f5:5c:a7:cc:41:b4:42:28:4f:92:c6:56:23:
1b:01:3f:db:a9:f3:e0:11:2c:3d:58:ba:30:d5:2a:
c8:9c:f4:e3:9b:49:ff:00:31:8b:b0:c3:44:eb:2f:
5c:97:d2:ad:a5:35:04:b1:0b:d3:64:d7:47:44:66:
30:ba:a1:85:a1:11:f9:ce:87:7c:08:51:9e:63:30:
99:f8:34:4f:33:fc:f7:96:ae:90:58:78:b0:3d:66:
75:f9:55:9e:40:7f:bc:e0:9e:a9:b6:af:b9:e9:9b:
95:ce:3e:22:23:7f:e9:08:17:35:82:b5:da:69:41:
21:3c:22:d6:68:7a:e9:e7:ba:b0:f8:93:33:fb:fe:
8e:41:78:77:5a:ef:98:fa:7b:32:d7:f7:e9:15:a1:
99:18:87:71:23:41:29:14:5b:22:dc:63:37:b1:d0:
66:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C0:4F:AC:3C:FE:24:FD:64:93:AB:00:85:95:38:55:03:C4:52:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032B2AE4F38811EF827F2F52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.91.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0b:3b:75:fe:89:5c:26:41:90:55:cc:df:c7:31:65:f2:67:
be:79:19:fa:c3:17:92:9d:7d:0d:f8:13:18:85:de:e2:e2:7c:
52:d3:eb:4c:04:9f:b7:ef:12:9e:d8:eb:56:89:19:d9:17:2c:
8f:16:6b:a0:7c:a0:d9:32:52:46:21:37:37:ac:cc:95:05:38:
f5:49:4f:68:fa:db:39:69:4d:76:a3:44:8a:86:b2:52:d1:3a:
3f:7a:8f:2b:29:a4:bb:98:db:ef:7c:e2:ce:0b:8b:f0:13:a5:
2a:fc:76:0d:cb:f9:57:78:1a:02:89:a5:cf:3b:9f:9c:10:8b:
8c:b6:e7:75:1e:b4:60:03:a3:c2:4d:eb:06:4d:7c:bb:40:ef:
a5:e3:4f:b1:f2:b1:ae:4a:d1:45:7b:b5:8d:88:4f:7e:e1:6b:
88:ab:cc:da:60:75:7e:ad:15:20:7c:72:4c:67:b2:54:d8:ca:
84:6c:36:02:5f:b7:9b:5b:4a:e7:6d:ba:b3:32:3b:9d:62:97:
fa:23:02:12:99:8e:37:12:db:76:ad:9e:72:7d:ff:90:f2:1a:
6d:08:c9:68:2f:d6:99:81:c2:8e:f8:6c:93:c1:a2:48:07:df:
af:b3:aa:01:98:09:fe:f9:c6:79:e2:d9:f8:93:09:07:55:1a:
5b:f2:cb:0f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS5AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MTQ1MTI2WhcNMjUwNDA5MTQ1MTI2WjAYMRYw
FAYDVQQDEw02N2JkZDhmOS0xMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw36HLrjP77v6o2TrXkEw7lax/s/3CvH/iHE41GwsBoWy7tQSnjWjmDWA
o2RzEqz+FWluk6/aOgvcBRb2phBX5QiRIaBFQseRxt/0eqtY6aimsUY6+mPy2lHi
WfVcp8xBtEIoT5LGViMbAT/bqfPgESw9WLow1SrInPTjm0n/ADGLsMNE6y9cl9Kt
pTUEsQvTZNdHRGYwuqGFoRH5zod8CFGeYzCZ+DRPM/z3lq6QWHiwPWZ1+VWeQH+8
4J6ptq+56ZuVzj4iI3/pCBc1grXaaUEhPCLWaHrp57qw+JMz+/6OQXh3Wu+Y+nsy
1/fpFaGZGIdxI0EpFFsi3GM3sdBmBQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNzA
T6w8/iT9ZJOrAIWVOFUDxFLUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMzJCMkFFNEYzODgxMUVGODI3RjJGNTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcVbMA0GCSqGSIb3DQEBCwUA
A4IBAQAkCzt1/olcJkGQVczfxzFl8me+eRn6wxeSnX0N+BMYhd7i4nxS0+tMBJ+3
7xKe2OtWiRnZFyyPFmugfKDZMlJGITc3rMyVBTj1SU9o+ts5aU12o0SKhrJS0To/
eo8rKaS7mNvvfOLOC4vwE6Uq/HYNy/lXeBoCiaXPO5+cEIuMtud1HrRgA6PCTesG
TXy7QO+l40+x8rGuStFFe7WNiE9+4WuIq8zaYHV+rRUgfHJMZ7JU2MqEbDYCX7eb
W0rnbbqzMjudYpf6IwISmY43Ett2rZ5yff+Q8hptCMloL9aZgcKO+GyTwaJIB9+v
s6oBmAn++cZ54tn4kwkHVRpb8ssP
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:59 2025 by rpki-client