Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12452722F48811EF9E0A58B9762E951A.roa
File: 12452722F48811EF9E0A58B9762E951A.roa (raw, json)
Hash identifier: VZ1q88SPe2LTeVjpbnBEtBZsCLdFWhl+6bLC5pLi5Ss=
Subject key identifier: 8A:CA:19:54:9A:EB:33:75:DE:06:36:54:27:D0:F3:93:14:82:01:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0137D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12452722F48811EF9E0A58B9762E951A.roa
Signing time: Wed 26 Feb 2025 21:24:33 +0000
ROA not before: Wed 26 Feb 2025 21:24:29 +0000
ROA not after: Sat 19 Feb 2028 21:24:29 +0000
asID: 17561
IP address blocks: 45.202.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79826 (0x137d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 21:24:29 2025 GMT
Not After : Feb 19 21:24:29 2028 GMT
Subject: CN=67bf8691-06be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:78:88:2d:19:9f:8a:a5:6e:a0:73:1e:c0:
d0:2d:78:fe:9b:56:49:6f:75:d7:39:c9:e7:72:0b:
4c:8f:42:52:2a:1b:ea:f3:5e:65:03:36:10:3b:85:
8b:f1:8b:29:db:54:79:4a:f0:7c:09:30:50:a8:bf:
1e:53:d6:96:67:ed:8d:e2:5a:94:78:d4:b1:f7:e4:
5c:e8:b7:5e:e6:49:a2:7c:96:d0:57:51:3e:eb:5d:
57:78:71:fc:3a:45:99:7b:1c:f6:06:63:b8:f9:8e:
06:4c:79:39:6c:7b:c8:43:3d:da:75:e8:90:26:b7:
dd:3b:f5:2f:48:7d:16:51:1e:af:15:5b:5d:5f:35:
63:05:ca:c7:39:f6:99:00:44:78:7a:cc:83:7a:1d:
76:bb:63:ba:4b:dd:60:94:f9:33:c8:fc:e8:19:3f:
fb:47:f0:db:19:26:40:1b:64:36:fd:f5:a1:a1:b1:
e7:87:24:6b:2b:b8:87:30:e2:f9:2c:12:5e:5c:bb:
2d:53:f8:1f:dd:ee:6b:12:a3:d8:2f:6d:cf:5b:29:
69:0f:d0:bf:5c:6d:14:d4:51:59:09:c2:6e:99:71:
22:88:73:a1:3a:fc:04:99:9d:e8:ca:62:37:12:fc:
bc:84:77:a3:8c:8c:1b:b9:26:1d:61:e0:53:65:f7:
79:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CA:19:54:9A:EB:33:75:DE:06:36:54:27:D0:F3:93:14:82:01:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12452722F48811EF9E0A58B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.13.0/24
Signature Algorithm: sha256WithRSAEncryption
08:77:e6:37:82:bd:b9:7a:78:dd:e6:72:83:49:6d:1a:53:48:
44:83:07:4c:f8:8e:c9:d4:db:97:3c:47:ab:14:15:bf:27:1c:
d2:a0:a0:94:09:6b:86:2b:e2:51:b5:32:8c:5e:76:0b:a5:3e:
b8:98:a1:ad:1c:24:34:11:fb:c3:db:9d:df:fd:a8:50:3a:cc:
ee:ac:4a:86:d3:5e:1a:48:69:2e:22:ab:b4:9d:ad:ae:4a:d3:
6a:47:3c:85:76:c4:c9:e5:4a:94:f3:90:ed:b8:5b:21:66:44:
82:29:e6:ae:79:c0:59:ab:ec:ef:a3:db:9c:fb:e8:fd:f1:b6:
68:29:57:d2:2b:41:c9:7d:48:88:c9:02:b6:2d:4d:24:54:0a:
b3:0f:e6:93:76:83:45:f9:43:80:ce:cf:21:c8:eb:f3:4b:86:
ad:db:17:9c:c8:5e:2b:25:95:ed:63:43:d9:1d:d7:be:0f:ce:
ea:f8:72:6c:c3:bf:e6:11:22:5e:43:f2:11:70:77:78:22:ec:
fc:15:10:4a:97:a8:66:58:2e:fd:fe:7e:91:82:25:68:70:a9:
e8:b5:0f:1e:e5:22:c8:da:e9:ac:bf:82:f3:e4:5d:6a:b3:4c:
9a:ad:73:ba:cc:3a:34:4c:85:25:67:cd:71:f3:db:b1:69:31:
9f:ef:e2:31
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATfSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MjEyNDI5WhcNMjgwMjE5MjEyNDI5WjAYMRYw
FAYDVQQDEw02N2JmODY5MS0wNmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5YB4iC0Zn4qlbqBzHsDQLXj+m1ZJb3XXOcnncgtMj0JSKhvq815lAzYQ
O4WL8Ysp21R5SvB8CTBQqL8eU9aWZ+2N4lqUeNSx9+Rc6Lde5kmifJbQV1E+611X
eHH8OkWZexz2BmO4+Y4GTHk5bHvIQz3adeiQJrfdO/UvSH0WUR6vFVtdXzVjBcrH
OfaZAER4esyDeh12u2O6S91glPkzyPzoGT/7R/DbGSZAG2Q2/fWhobHnhyRrK7iH
MOL5LBJeXLstU/gf3e5rEqPYL23PWylpD9C/XG0U1FFZCcJumXEiiHOhOvwEmZ3o
ymI3Evy8hHejjIwbuSYdYeBTZfd53wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIrK
GVSa6zN13gY2VCfQ85MUggExMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMjQ1MjcyMkY0ODgxMUVGOUUwQTU4Qjk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcoNMA0GCSqGSIb3DQEBCwUA
A4IBAQAId+Y3gr25enjd5nKDSW0aU0hEgwdM+I7J1NuXPEerFBW/JxzSoKCUCWuG
K+JRtTKMXnYLpT64mKGtHCQ0EfvD253f/ahQOszurEqG014aSGkuIqu0na2uStNq
RzyFdsTJ5UqU85DtuFshZkSCKeauecBZq+zvo9uc++j98bZoKVfSK0HJfUiIyQK2
LU0kVAqzD+aTdoNF+UOAzs8hyOvzS4at2xecyF4rJZXtY0PZHde+D87q+HJsw7/m
ESJeQ/IRcHd4Iuz8FRBKl6hmWC79/n6RgiVocKnotQ8e5SLI2umsv4Lz5F1qs0ya
rXO6zDo0TIUlZ81x89uxaTGf7+Ix
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:54 2025 by rpki-client