Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14B46C76EC8F11EFA23254AE762E951A.roa
File: 14B46C76EC8F11EFA23254AE762E951A.roa (raw, json)
Hash identifier: 8j+mB0wE+KRmfy3G4bUy7zekxnL2Y77SpWDdniVNjsc=
Subject key identifier: E3:6B:DB:26:48:30:4D:CF:1B:25:DA:7B:B4:84:21:E3:79:4A:F3:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012460
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14B46C76EC8F11EFA23254AE762E951A.roa
Signing time: Sun 16 Feb 2025 17:54:34 +0000
ROA not before: Sun 16 Feb 2025 17:54:31 +0000
ROA not after: Fri 21 Jan 2028 17:54:31 +0000
asID: 17561
IP address blocks: 45.196.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74848 (0x12460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 16 17:54:31 2025 GMT
Not After : Jan 21 17:54:31 2028 GMT
Subject: CN=67b2265a-91e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:8a:05:73:37:8b:1b:58:43:bf:be:ba:d2:
29:64:cb:67:8c:e2:a2:57:b8:aa:d5:52:64:26:ef:
98:a4:73:01:59:a2:89:83:95:a5:14:69:37:2e:78:
32:10:b7:60:ee:26:3e:81:23:b1:0b:bf:71:c3:1b:
6a:cf:14:75:16:ea:bf:7c:92:09:47:84:0c:bd:c2:
8b:a0:dd:f3:cd:d0:aa:33:f3:cc:d2:1f:61:82:ba:
eb:15:44:24:ed:db:5d:c4:15:37:08:b5:4d:25:d1:
ec:27:bf:31:f0:f8:fb:44:df:b4:00:74:97:90:66:
07:66:b3:1b:8a:73:a8:57:a2:03:51:dd:d1:51:25:
07:7d:b0:05:cb:14:5b:65:58:03:0d:3a:96:8c:1f:
37:88:97:ca:41:7d:3a:a1:38:78:5b:ff:4a:99:5d:
ca:28:9e:19:df:d4:8e:c8:b9:a2:7f:24:9f:93:c4:
67:c9:9e:c1:f5:7e:00:29:01:6e:7a:3b:e3:5b:2a:
22:f0:16:bb:57:39:dd:1d:c2:b9:ba:48:14:37:9b:
b9:b4:b2:71:f6:5c:fa:12:7b:82:9c:db:f1:3f:06:
96:7d:b9:27:0f:a1:d1:e1:b1:a4:c3:e2:76:91:12:
d4:cf:8e:20:80:18:19:60:03:a8:72:fc:36:f3:c7:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6B:DB:26:48:30:4D:CF:1B:25:DA:7B:B4:84:21:E3:79:4A:F3:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14B46C76EC8F11EFA23254AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.86.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fa:0f:50:d9:fe:db:3d:ea:8b:45:ec:7f:b0:30:e0:d5:65:
a4:45:41:3a:cb:cc:a7:24:37:ad:94:44:16:59:41:e4:ac:d4:
3c:cd:b3:cc:6c:46:88:89:3d:17:c8:ad:b9:ea:94:52:c9:75:
29:40:af:e7:64:0b:89:1a:76:77:fc:66:51:e2:af:65:b4:13:
ea:17:da:fa:27:28:3c:17:9e:ab:f2:ab:62:e0:96:c5:e1:cb:
35:a5:bb:f9:1e:1e:30:4f:19:41:af:26:db:c7:85:a7:6a:92:
24:b9:20:ea:82:12:6e:99:eb:f3:b6:6f:7c:e2:a4:11:06:ad:
dc:5e:35:7f:79:f7:2e:78:65:c3:41:cb:f6:36:9e:c5:32:70:
e9:fe:15:8f:4b:cc:c5:13:6c:7d:76:61:1a:2e:96:7f:c4:ff:
30:d4:6c:bd:a0:ca:24:72:f3:93:a6:3f:ff:bd:6b:c7:18:08:
59:d2:f4:f2:e8:d8:57:87:22:83:f2:c3:40:8d:6e:b5:86:92:
ef:6e:be:eb:34:43:67:45:80:70:97:aa:b5:4d:a3:3a:42:be:
48:9f:7d:f0:7c:d5:da:d2:53:32:0a:15:c6:b9:25:81:54:36:
23:76:25:45:b4:0c:28:ac:5b:27:60:9b:fd:5f:f6:95:9f:33:
3b:09:90:a4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASRgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjE2MTc1NDMxWhcNMjgwMTIxMTc1NDMxWjAYMRYw
FAYDVQQDEw02N2IyMjY1YS05MWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsnqKBXM3ixtYQ7++utIpZMtnjOKiV7iq1VJkJu+YpHMBWaKJg5WlFGk3
LngyELdg7iY+gSOxC79xwxtqzxR1Fuq/fJIJR4QMvcKLoN3zzdCqM/PM0h9hgrrr
FUQk7dtdxBU3CLVNJdHsJ78x8Pj7RN+0AHSXkGYHZrMbinOoV6IDUd3RUSUHfbAF
yxRbZVgDDTqWjB83iJfKQX06oTh4W/9KmV3KKJ4Z39SOyLmifySfk8RnyZ7B9X4A
KQFuejvjWyoi8Ba7VzndHcK5ukgUN5u5tLJx9lz6EnuCnNvxPwaWfbknD6HR4bGk
w+J2kRLUz44ggBgZYAOocvw288d8sQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFONr
2yZIME3PGyXae7SEIeN5SvOWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNEI0NkM3NkVDOEYxMUVGQTIzMjU0QUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcRWMA0GCSqGSIb3DQEBCwUA
A4IBAQCE+g9Q2f7bPeqLRex/sDDg1WWkRUE6y8ynJDetlEQWWUHkrNQ8zbPMbEaI
iT0XyK256pRSyXUpQK/nZAuJGnZ3/GZR4q9ltBPqF9r6Jyg8F56r8qti4JbF4cs1
pbv5Hh4wTxlBrybbx4WnapIkuSDqghJumevztm984qQRBq3cXjV/efcueGXDQcv2
Np7FMnDp/hWPS8zFE2x9dmEaLpZ/xP8w1Gy9oMokcvOTpj//vWvHGAhZ0vTy6NhX
hyKD8sNAjW61hpLvbr7rNENnRYBwl6q1TaM6Qr5In33wfNXa0lMyChXGuSWBVDYj
diVFtAworFsnYJv9X/aVnzM7CZCk
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:59 2025 by rpki-client