Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E5B0E88F43711EFBF52EF85762E951A.roa
File: 1E5B0E88F43711EFBF52EF85762E951A.roa (raw, json)
Hash identifier: Hd5WJ0xUa1EIfUw7orohu/NKT1J1vDZHw0JZ7j7uWfA=
Subject key identifier: F5:31:33:0C:B4:96:57:9D:BC:0B:C6:AF:48:F1:A0:87:E7:77:8D:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E5B0E88F43711EFBF52EF85762E951A.roa
Signing time: Wed 26 Feb 2025 11:45:04 +0000
ROA not before: Wed 26 Feb 2025 11:44:59 +0000
ROA not after: Sat 19 Feb 2028 11:44:59 +0000
asID: 17561
IP address blocks: 45.196.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78314 (0x131ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:44:59 2025 GMT
Not After : Feb 19 11:44:59 2028 GMT
Subject: CN=67befec0-b053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:04:52:4c:fd:32:3a:1b:ea:73:79:a3:51:
b7:43:96:04:29:2b:51:6a:a7:da:59:67:20:b4:72:
bd:9e:8f:da:7f:9e:06:f2:bd:f6:37:65:43:cb:59:
04:f7:1b:e7:83:9c:16:5d:e3:06:98:23:98:6f:42:
fe:f8:23:38:7d:f7:af:2e:df:f8:50:a6:7e:06:97:
a2:64:cc:34:e7:03:ff:e9:22:17:a3:fd:8a:09:e6:
75:7a:da:d7:35:63:fa:aa:81:2a:7d:9c:c5:df:bd:
01:d6:27:f8:0d:48:36:da:00:69:b2:ac:5c:31:e9:
5c:cd:fe:51:47:fd:13:41:5e:cb:e1:78:82:7e:34:
88:2e:4b:4a:21:1c:a0:ce:8f:87:88:d5:6e:0f:1f:
59:de:e4:2b:c9:ff:21:b3:98:c0:f1:01:14:0b:b0:
c8:9b:c2:20:06:86:22:b6:9b:ad:b5:b0:fc:11:1c:
85:d8:b4:c4:93:68:36:d3:52:db:21:57:4a:32:53:
c8:98:4b:a2:88:56:8d:05:04:49:77:a5:58:2e:98:
6d:69:65:a8:21:5f:72:6d:b2:e2:5b:22:bd:5e:53:
ba:30:73:5e:0d:47:73:95:5c:e8:09:75:a8:ec:bf:
33:bd:88:51:f6:c6:d3:3e:a9:bc:80:d3:89:9f:18:
74:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:31:33:0C:B4:96:57:9D:BC:0B:C6:AF:48:F1:A0:87:E7:77:8D:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E5B0E88F43711EFBF52EF85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.10.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:5b:93:cc:15:79:dc:3e:55:c1:ea:0f:1c:51:9c:1b:22:55:
67:71:46:b1:04:24:de:cb:5c:f2:a5:15:fd:e1:58:c5:9f:76:
0e:63:d1:19:18:3c:b7:df:eb:d9:ad:88:50:27:f2:ba:47:05:
e7:29:bc:f4:3e:94:86:ee:4d:48:d3:12:03:e6:2d:1c:ca:0d:
aa:98:a3:30:ef:32:0b:a9:43:e8:69:18:7b:d6:64:05:31:ac:
5b:2e:f2:98:ab:79:04:49:ac:ab:97:9c:93:fb:49:67:ea:3d:
79:20:a9:64:d8:19:51:3c:4c:60:32:73:1c:a2:92:9c:31:c3:
4a:ee:6e:de:f1:c1:e4:7e:2f:ce:ab:5a:f4:ce:ce:a6:a6:e8:
6f:c8:85:d5:bf:22:82:84:8c:12:fe:6a:ba:0a:87:e7:42:b2:
ce:b9:ef:70:74:73:4a:de:da:40:bb:0f:91:c1:00:e8:7a:f6:
a5:78:f2:8f:8d:77:51:94:e9:46:de:0f:5c:0d:68:84:67:40:
dc:8c:32:89:5a:2e:e0:38:37:f1:11:3a:9b:bf:b3:7a:32:19:
34:b9:e6:01:2b:29:04:55:9e:c9:81:3d:a8:b1:a2:21:d1:fb:
4f:db:69:58:7b:d4:50:48:1a:1b:44:12:9c:da:d0:dd:c6:b0:
73:7f:0a:c4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATHqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTE0NDU5WhcNMjgwMjE5MTE0NDU5WjAYMRYw
FAYDVQQDEw02N2JlZmVjMC1iMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuiwEUkz9Mjob6nN5o1G3Q5YEKStRaqfaWWcgtHK9no/af54G8r32N2VD
y1kE9xvng5wWXeMGmCOYb0L++CM4ffevLt/4UKZ+BpeiZMw05wP/6SIXo/2KCeZ1
etrXNWP6qoEqfZzF370B1if4DUg22gBpsqxcMelczf5RR/0TQV7L4XiCfjSILktK
IRygzo+HiNVuDx9Z3uQryf8hs5jA8QEUC7DIm8IgBoYitputtbD8ERyF2LTEk2g2
01LbIVdKMlPImEuiiFaNBQRJd6VYLphtaWWoIV9ybbLiWyK9XlO6MHNeDUdzlVzo
CXWo7L8zvYhR9sbTPqm8gNOJnxh0VwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPUx
Mwy0lledvAvGr0jxoIfnd426MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRTVCMEU4OEY0MzcxMUVGQkY1MkVGODU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcQKMA0GCSqGSIb3DQEBCwUA
A4IBAQAOW5PMFXncPlXB6g8cUZwbIlVncUaxBCTey1zypRX94VjFn3YOY9EZGDy3
3+vZrYhQJ/K6RwXnKbz0PpSG7k1I0xID5i0cyg2qmKMw7zILqUPoaRh71mQFMaxb
LvKYq3kESayrl5yT+0ln6j15IKlk2BlRPExgMnMcopKcMcNK7m7e8cHkfi/Oq1r0
zs6mpuhvyIXVvyKChIwS/mq6CofnQrLOue9wdHNK3tpAuw+RwQDoevalePKPjXdR
lOlG3g9cDWiEZ0DcjDKJWi7gODfxETqbv7N6Mhk0ueYBKykEVZ7JgT2osaIh0ftP
22lYe9RQSBobRBKc2tDdxrBzfwrE
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:03 2025 by rpki-client