Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BD1A96EF46A11EF9BCB3A6B762E951A.roa
File: 1BD1A96EF46A11EF9BCB3A6B762E951A.roa (raw, json)
Hash identifier: dT7qmKiIwrfoYQM0H6gs16jpf6X2uvmFC4AqUbH2CdI=
Subject key identifier: E2:BA:BE:DB:BF:2A:32:29:D7:55:21:2B:FC:C7:0F:AD:DC:56:EF:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BD1A96EF46A11EF9BCB3A6B762E951A.roa
Signing time: Wed 26 Feb 2025 17:50:04 +0000
ROA not before: Wed 26 Feb 2025 17:50:00 +0000
ROA not after: Thu 19 Feb 2026 17:50:00 +0000
asID: 984
IP address blocks: 45.201.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79331 (0x135e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:50:00 2025 GMT
Not After : Feb 19 17:50:00 2026 GMT
Subject: CN=67bf544c-4db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:dc:aa:ab:1a:ed:24:88:39:6d:af:0d:8e:
5f:e8:6a:af:7f:7d:7b:a7:6a:b8:c7:04:85:b2:80:
c3:b3:71:b4:39:1b:98:d1:bc:11:c8:d5:db:14:ae:
20:77:11:dc:b3:ef:e1:66:4c:03:0b:06:7c:8f:54:
91:6f:8c:0b:fd:60:56:f6:71:94:99:95:26:8a:d2:
1f:bf:7d:a8:d4:ab:f3:ad:70:92:b1:ee:c1:11:8e:
3a:de:cb:3f:d6:db:12:95:66:b3:a7:2f:d1:fa:8a:
c5:52:64:04:27:28:43:9a:84:9a:8f:63:59:6f:3d:
bf:03:0c:3d:57:08:06:86:46:fa:73:20:62:61:99:
c5:63:34:55:ec:86:30:5e:f4:61:6c:fa:3f:e2:70:
5a:50:6c:80:c0:1f:bb:ec:9f:a6:cf:c6:22:81:aa:
7a:b3:ec:11:61:e5:2f:ac:c0:0d:14:b9:71:8f:0f:
8f:15:26:da:28:90:ee:8f:ea:92:44:bf:a3:18:01:
1a:14:86:c5:ad:9f:5e:04:d3:f2:3d:8f:a5:dd:47:
1c:7d:94:f7:a7:97:c8:69:b8:bd:28:72:4c:1a:ca:
9c:93:0e:1d:13:41:cf:e8:e3:13:4a:96:2d:9e:49:
09:85:54:9b:f6:55:ec:d6:02:2c:7d:28:e2:47:ff:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BA:BE:DB:BF:2A:32:29:D7:55:21:2B:FC:C7:0F:AD:DC:56:EF:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BD1A96EF46A11EF9BCB3A6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.53.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ba:ad:99:38:2c:14:64:5a:2b:ea:92:7f:8a:6e:e2:54:15:
ec:72:e9:a7:b2:b0:be:20:b0:3e:c4:e3:52:8b:07:f7:0e:f1:
78:b1:22:7d:f5:93:6e:40:3d:0a:2f:31:3a:33:86:6e:78:ca:
6f:63:39:72:d1:fd:ca:15:40:ee:6c:1c:ad:c4:e8:6a:e5:22:
9d:d7:b4:b5:c1:c0:e5:24:e0:40:fb:fb:5b:dd:6f:ef:fb:a0:
20:ed:e0:18:c9:a8:9b:e4:65:4b:9a:0a:01:0c:ec:05:ec:53:
4a:d9:61:90:bc:54:43:3f:73:08:02:52:cb:c8:47:3a:c9:34:
30:09:8f:af:2e:0d:e5:ca:c2:bd:d9:a6:30:d9:1f:3f:c3:59:
6d:b9:ce:b7:fb:32:7b:3f:c5:c4:1a:27:52:6c:2e:2f:52:67:
57:98:33:28:b9:b3:b7:6d:f9:db:e9:26:1c:7e:a7:45:63:09:
d8:a4:bd:b3:15:ce:64:40:5a:b8:11:3a:00:dc:16:c7:88:62:
f8:7a:c5:49:4d:a2:7a:b8:98:ac:70:25:20:65:e0:b3:17:f4:
13:40:1b:d4:91:c1:21:1f:e4:5a:63:3b:12:bb:5e:3b:ff:d9:
64:3a:5e:4e:8d:7f:ce:81:08:52:4e:3f:7f:6f:8f:a1:cd:b0:
19:69:c9:da
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATXjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTc1MDAwWhcNMjYwMjE5MTc1MDAwWjAYMRYw
FAYDVQQDEw02N2JmNTQ0Yy00ZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvaXcqqsa7SSIOW2vDY5f6Gqvf317p2q4xwSFsoDDs3G0ORuY0bwRyNXb
FK4gdxHcs+/hZkwDCwZ8j1SRb4wL/WBW9nGUmZUmitIfv32o1KvzrXCSse7BEY46
3ss/1tsSlWazpy/R+orFUmQEJyhDmoSaj2NZbz2/Aww9VwgGhkb6cyBiYZnFYzRV
7IYwXvRhbPo/4nBaUGyAwB+77J+mz8Yigap6s+wRYeUvrMANFLlxjw+PFSbaKJDu
j+qSRL+jGAEaFIbFrZ9eBNPyPY+l3UccfZT3p5fIabi9KHJMGsqckw4dE0HP6OMT
SpYtnkkJhVSb9lXs1gIsfSjiR/9ErwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOK6
vtu/KjIp11UhK/zHD63cVu9gMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQkQxQTk2RUY0NkExMUVGOUJDQjNBNkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALck1MA0GCSqGSIb3DQEBCwUA
A4IBAQCbuq2ZOCwUZFor6pJ/im7iVBXscumnsrC+ILA+xONSiwf3DvF4sSJ99ZNu
QD0KLzE6M4ZueMpvYzly0f3KFUDubBytxOhq5SKd17S1wcDlJOBA+/tb3W/v+6Ag
7eAYyaib5GVLmgoBDOwF7FNK2WGQvFRDP3MIAlLLyEc6yTQwCY+vLg3lysK92aYw
2R8/w1ltuc63+zJ7P8XEGidSbC4vUmdXmDMoubO3bfnb6SYcfqdFYwnYpL2zFc5k
QFq4EToA3BbHiGL4esVJTaJ6uJiscCUgZeCzF/QTQBvUkcEhH+RaYzsSu147/9lk
Ol5OjX/OgQhSTj9/b4+hzbAZacna
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:11 2025 by rpki-client