Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/136C0156FF2911EF80F99A8C762E951A.roa
File: 136C0156FF2911EF80F99A8C762E951A.roa (raw, json)
Hash identifier: kl3aE5k8r6BeNTPPakbcRurtAyoodW+MBerWTFO7sss=
Subject key identifier: D0:7F:33:0E:A5:19:F3:F4:03:5E:B3:AF:F3:FC:3E:9A:8D:AD:74:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014538
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/136C0156FF2911EF80F99A8C762E951A.roa
Signing time: Wed 12 Mar 2025 10:02:16 +0000
ROA not before: Wed 12 Mar 2025 10:02:12 +0000
ROA not after: Wed 30 Apr 2025 10:02:12 +0000
asID: 54600
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83256 (0x14538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 10:02:12 2025 GMT
Not After : Apr 30 10:02:12 2025 GMT
Subject: CN=67d15ba8-d1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:05:d3:81:86:ab:70:45:e3:2c:99:c3:db:
d8:14:9a:e4:52:28:cf:91:0d:8d:e7:0f:7e:03:a2:
5d:da:60:91:db:c4:c1:47:78:2c:d8:18:9d:76:f2:
2d:3d:f5:0d:21:90:68:ec:4d:a5:a0:ab:40:e5:d2:
b2:83:c2:96:68:12:8b:ae:ea:c8:88:59:df:5d:dc:
6a:b7:59:75:f7:8e:d0:73:b2:96:fc:37:60:84:6c:
f1:41:ce:73:cb:0c:48:1f:18:13:58:2d:48:5a:81:
24:5a:9d:d7:37:56:51:88:32:a9:00:3c:d8:ae:ae:
a9:d9:9b:9e:c2:3e:63:ba:1b:f1:79:cd:2e:29:dd:
a6:c4:80:fe:16:61:a5:65:61:2e:9a:b2:c3:1c:c7:
61:21:8b:4d:21:1b:c3:5b:a2:d1:1d:08:b9:5e:66:
f9:47:98:88:40:b3:8f:1b:dd:d4:6c:81:53:cd:9d:
99:9b:21:00:9c:db:da:a4:20:e6:62:23:ca:95:7f:
e1:07:25:01:40:9f:79:97:49:16:ae:3f:e5:7c:f4:
f9:50:50:b0:b8:2b:e9:7d:41:ac:22:20:b4:9f:e4:
37:96:67:28:b3:8d:90:ea:1a:0a:7d:82:9c:d7:bb:
70:de:c9:0c:e4:28:32:7a:81:76:9c:bd:5f:f0:ce:
c1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7F:33:0E:A5:19:F3:F4:03:5E:B3:AF:F3:FC:3E:9A:8D:AD:74:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/136C0156FF2911EF80F99A8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
16:1b:cd:3f:f5:09:e4:be:33:9f:12:37:9e:3e:3f:8b:8e:3c:
08:d9:fd:b1:46:94:2c:81:e5:82:7a:74:80:82:eb:9f:2b:98:
a3:a6:01:3f:8e:c3:5a:3f:b7:ad:f0:c3:c1:24:8c:e7:a6:92:
56:6b:f7:17:6a:f1:0c:c3:5e:3d:e7:3c:33:7b:1f:d4:95:bd:
6e:a3:9f:1c:73:79:76:29:dd:61:df:43:ee:4a:c2:14:61:d6:
14:ea:19:8c:1a:f5:06:6c:80:18:3a:71:00:e3:17:c0:71:30:
72:30:ea:ca:c7:6c:c0:96:09:99:bd:5e:ce:01:d1:8b:14:c9:
c2:d7:40:9f:88:b7:7a:1f:b1:14:f7:96:c4:d9:4a:c7:dc:fc:
e7:73:ff:87:ea:2e:c2:40:90:6a:e4:d9:6e:be:31:51:94:9c:
9c:00:8e:c7:65:b3:c3:be:d3:7e:f9:af:fb:83:37:9e:3f:cf:
e6:7a:c2:57:07:40:a3:d7:2f:db:13:cf:e6:4b:ad:e5:ce:da:
06:cd:b0:70:3d:3b:a8:69:ff:58:fa:53:27:d0:dc:39:bd:5e:
d4:4a:77:30:81:2d:aa:4d:ca:14:ef:81:9f:e5:0c:3f:35:63:
59:68:1b:d2:8b:3a:f6:f9:86:31:e1:56:c7:a7:b5:f3:52:8d:
e2:e8:e6:d2
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAUU4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzEyMTAwMjEyWhcNMjUwNDMwMTAwMjEyWjAYMRYw
FAYDVQQDEw02N2QxNWJhOC1kMWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuU4F04GGq3BF4yyZw9vYFJrkUijPkQ2N5w9+A6Jd2mCR28TBR3gs2Bid
dvItPfUNIZBo7E2loKtA5dKyg8KWaBKLrurIiFnfXdxqt1l1947Qc7KW/DdghGzx
Qc5zywxIHxgTWC1IWoEkWp3XN1ZRiDKpADzYrq6p2Zuewj5juhvxec0uKd2mxID+
FmGlZWEumrLDHMdhIYtNIRvDW6LRHQi5Xmb5R5iIQLOPG93UbIFTzZ2ZmyEAnNva
pCDmYiPKlX/hByUBQJ95l0kWrj/lfPT5UFCwuCvpfUGsIiC0n+Q3lmcos42Q6hoK
fYKc17tw3skM5CgyeoF2nL1f8M7BGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNB/
Mw6lGfP0A16zr/P8PpqNrXTjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMzZDMDE1NkZGMjkxMUVGODBGOTlBOEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELcDAAwQGLcjAMA0GCSqGSIb3
DQEBCwUAA4IBAQAWG80/9QnkvjOfEjeePj+LjjwI2f2xRpQsgeWCenSAguufK5ij
pgE/jsNaP7et8MPBJIznppJWa/cXavEMw1495zwzex/Ulb1uo58cc3l2Kd1h30Pu
SsIUYdYU6hmMGvUGbIAYOnEA4xfAcTByMOrKx2zAlgmZvV7OAdGLFMnC10CfiLd6
H7EU95bE2UrH3Pznc/+H6i7CQJBq5NluvjFRlJycAI7HZbPDvtN++a/7gzeeP8/m
esJXB0Cj1y/bE8/mS63lztoGzbBwPTuoaf9Y+lMn0Nw5vV7USncwgS2qTcoU74Gf
5Qw/NWNZaBvSizr2+YYx4VbHp7XzUo3i6ObS
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:44 2025 by rpki-client