Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0528E696D3D111EF91566E7A762E951A.roa
File: 0528E696D3D111EF91566E7A762E951A.roa (raw, json)
Hash identifier: 6HZwyHU7iIPoyWS48FtyWBpVWQpW0QkqjJxR46SO9JY=
Subject key identifier: 45:6B:30:0D:D9:AD:7B:9E:52:81:C2:A0:E9:74:25:EE:AE:2F:11:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010896
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0528E696D3D111EF91566E7A762E951A.roa
Signing time: Thu 16 Jan 2025 06:13:36 +0000
ROA not before: Thu 16 Jan 2025 06:13:32 +0000
ROA not after: Sat 03 Jan 2026 06:13:32 +0000
asID: 52925
IP address blocks: 45.194.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67734 (0x10896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 16 06:13:32 2025 GMT
Not After : Jan 3 06:13:32 2026 GMT
Subject: CN=6788a390-8951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:d2:66:56:c1:46:08:43:13:fa:fa:dc:c0:
1d:cf:37:ca:91:bd:25:d0:44:5a:89:13:a6:77:cd:
63:0e:2c:36:ac:4b:2b:52:c0:5f:6a:2a:16:ff:df:
40:35:bb:de:82:2e:af:fa:3d:68:4a:3e:c9:f4:3f:
72:50:14:b5:f8:db:0e:5f:7d:71:5f:02:a6:98:28:
db:87:e0:88:74:9e:ba:c0:cc:de:09:3a:18:42:88:
ad:ee:91:13:01:02:61:05:13:18:4e:75:fe:8d:24:
c0:96:14:0e:53:93:11:74:0f:22:8b:07:91:d6:2c:
8d:ff:fa:4d:2c:32:de:7c:d2:18:86:8f:3b:01:d5:
bb:b6:e5:0f:f8:4c:a6:f4:96:0d:90:ee:2a:09:43:
3f:ed:9b:af:b6:9a:b8:4f:77:b4:02:5d:df:6c:9e:
2a:72:1f:c2:76:ee:42:cc:c6:9c:ba:6c:1d:80:a2:
e1:c9:fd:f1:9b:ea:f2:21:9f:84:16:38:d0:97:c6:
23:4d:02:4c:85:63:1e:e6:d0:85:0e:6c:93:4c:d1:
32:63:e6:b0:43:48:8f:4c:4c:e4:2b:9f:bf:06:d8:
1a:c2:2a:f2:87:cb:7b:f2:a2:f3:ac:2b:7f:c3:c5:
34:b0:db:57:0d:2c:a2:82:49:ee:45:9f:42:1c:1f:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6B:30:0D:D9:AD:7B:9E:52:81:C2:A0:E9:74:25:EE:AE:2F:11:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0528E696D3D111EF91566E7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.42.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a3:36:a4:33:fe:f5:1a:07:fd:2a:7b:09:9d:1d:0b:8c:b0:
d7:5b:1d:a7:cb:19:27:5a:c4:ae:83:22:ec:93:05:a5:54:4d:
44:71:2d:14:d1:3d:9e:f8:57:22:88:39:79:0f:5d:86:9e:a4:
47:2f:fc:f3:04:84:6a:26:2f:18:02:bb:e0:72:5a:f6:e0:23:
c4:82:6c:c5:cc:55:5d:49:83:3c:de:95:14:94:32:23:9e:eb:
1e:70:6d:8d:b0:a3:cc:b7:85:7c:d5:84:b0:61:ee:53:28:bb:
46:73:a0:0a:5d:a8:39:db:92:21:74:26:00:96:99:5a:f3:b8:
5b:ee:59:f8:df:49:21:f8:2e:a2:44:18:de:53:bb:40:17:ff:
f3:e5:33:14:07:c2:3d:42:54:22:df:66:cb:f9:b8:de:27:3c:
7a:be:c9:56:3a:c6:93:0c:21:8b:f7:ba:b7:42:08:c9:2b:56:
c6:12:7d:5c:2b:97:bf:30:5b:5e:d3:1b:6d:7f:bf:7e:8f:74:
9f:65:fd:b6:81:2e:a1:07:cb:25:99:74:37:b6:7a:aa:30:3e:
0c:51:d2:1d:8c:da:6b:0d:f9:c1:c3:e0:86:ee:17:5c:5c:64:
cf:9c:76:40:36:b7:4e:53:6c:3e:07:47:35:35:f1:75:29:35:
e7:26:f7:90
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQiWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE2MDYxMzMyWhcNMjYwMTAzMDYxMzMyWjAYMRYw
FAYDVQQDEw02Nzg4YTM5MC04OTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxY/SZlbBRghDE/r63MAdzzfKkb0l0ERaiROmd81jDiw2rEsrUsBfaioW
/99ANbvegi6v+j1oSj7J9D9yUBS1+NsOX31xXwKmmCjbh+CIdJ66wMzeCToYQoit
7pETAQJhBRMYTnX+jSTAlhQOU5MRdA8iiweR1iyN//pNLDLefNIYho87AdW7tuUP
+Eym9JYNkO4qCUM/7Zuvtpq4T3e0Al3fbJ4qch/Cdu5CzMacumwdgKLhyf3xm+ry
IZ+EFjjQl8YjTQJMhWMe5tCFDmyTTNEyY+awQ0iPTEzkK5+/Btgawiryh8t78qLz
rCt/w8U0sNtXDSyigknuRZ9CHB8JGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEVr
MA3ZrXueUoHCoOl0Je6uLxFAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNTI4RTY5NkQzRDExMUVGOTE1NjZFN0E3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIqMA0GCSqGSIb3DQEBCwUA
A4IBAQAMozakM/71Ggf9KnsJnR0LjLDXWx2nyxknWsSugyLskwWlVE1EcS0U0T2e
+FciiDl5D12GnqRHL/zzBIRqJi8YArvgclr24CPEgmzFzFVdSYM83pUUlDIjnuse
cG2NsKPMt4V81YSwYe5TKLtGc6AKXag525IhdCYAlpla87hb7ln430kh+C6iRBje
U7tAF//z5TMUB8I9QlQi32bL+bjeJzx6vslWOsaTDCGL97q3QgjJK1bGEn1cK5e/
MFte0xttf79+j3SfZf22gS6hB8slmXQ3tnqqMD4MUdIdjNprDfnBw+CG7hdcXGTP
nHZANrdOU2w+B0c1NfF1KTXnJveQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:32 2025 by rpki-client