Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/227B2A26E89711EFADDF935D762E951A.roa
File: 227B2A26E89711EFADDF935D762E951A.roa (raw, json)
Hash identifier: uhoYR0I0AOJfC/vwD3QnF0iDtPJTrEAkNY1vzZ2Kh6U=
Subject key identifier: BD:3F:C1:B3:B5:86:A3:17:34:FB:06:D0:F9:70:41:51:A2:5F:11:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012140
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/227B2A26E89711EFADDF935D762E951A.roa
Signing time: Tue 11 Feb 2025 16:42:09 +0000
ROA not before: Tue 11 Feb 2025 16:42:05 +0000
ROA not after: Tue 25 Feb 2025 16:42:05 +0000
asID: 141159
IP address blocks: 45.205.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74048 (0x12140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 11 16:42:05 2025 GMT
Not After : Feb 25 16:42:05 2025 GMT
Subject: CN=67ab7de1-e9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:cb:1f:a7:b4:4a:b9:5c:56:8f:f9:0e:f7:
ef:bc:98:e8:3e:f6:ea:bb:0c:34:33:af:6b:fc:7a:
ef:9d:5e:11:d3:47:4e:c1:79:b3:27:94:ae:7a:38:
0c:fe:6a:f6:2e:82:f6:80:1d:e8:b0:50:49:8c:14:
13:b7:61:8e:06:7e:e0:c2:42:3f:5a:e5:2a:58:16:
f1:48:8f:e3:e0:97:2d:b9:c9:1b:84:38:30:84:2c:
b0:67:c3:53:1d:c9:07:a9:71:9e:53:88:97:14:f0:
37:c1:76:6d:a0:41:f6:41:18:08:62:8e:ef:93:89:
05:d2:b8:36:d6:de:e8:6f:d0:de:56:02:71:f1:f1:
b4:11:75:23:d3:4a:c8:cc:04:19:a1:0f:3d:27:c5:
15:c3:82:19:16:55:22:26:cf:17:92:78:1f:62:77:
ec:c0:3d:54:d1:21:78:aa:0d:ee:2e:c7:38:5b:2b:
dd:16:dd:24:9e:80:19:8a:f2:34:e0:7e:65:be:4d:
71:cb:45:ab:88:fc:c1:d6:a3:26:9f:d6:41:d1:36:
a9:eb:df:89:03:3d:fc:e6:ac:12:aa:5d:45:02:22:
4c:35:cb:aa:87:95:b3:41:99:e5:50:72:64:91:ff:
03:70:19:06:31:f6:bc:25:03:25:3c:ce:0c:f4:b3:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3F:C1:B3:B5:86:A3:17:34:FB:06:D0:F9:70:41:51:A2:5F:11:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/227B2A26E89711EFADDF935D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:1a:63:35:99:f1:e2:2c:43:e9:61:91:c2:9a:7f:69:97:69:
6b:b8:77:6f:cf:90:53:55:58:05:0a:bc:72:37:bc:b4:1a:a0:
3c:6f:1d:d4:7f:29:f7:bd:1a:4f:43:85:1e:f6:77:a0:82:0e:
ae:3e:95:64:21:25:bc:10:9e:7e:87:f6:c6:c2:43:04:5d:52:
98:8f:bb:8f:cb:f3:8c:52:e1:e5:7c:9d:26:01:79:c4:5c:0c:
43:0a:15:4d:70:54:c4:d3:3f:1f:e5:36:e8:56:17:82:ef:30:
ab:88:4b:eb:1c:0c:f9:d4:d3:2d:1a:d3:de:69:c7:3a:74:09:
45:3d:04:11:f6:71:4f:c4:29:ba:28:44:1b:69:94:29:68:5e:
f0:6e:0a:f3:2f:26:eb:3e:dc:4d:2f:1c:0f:04:6c:b1:0b:88:
c5:e4:9e:6a:0c:cf:3c:76:13:45:62:fc:cc:6c:2e:2b:34:ba:
37:12:b0:e2:5f:6b:71:5f:e9:53:1d:a1:49:66:f0:3f:b4:b2:
2c:7c:b3:71:a6:45:f1:62:88:9e:76:81:33:a9:6d:fa:9a:bf:
d7:2f:ec:09:3d:01:99:97:76:2f:82:43:ea:d9:36:79:ca:4d:
54:45:fa:dc:7c:7d:1f:b6:9f:01:5d:72:33:33:e9:c3:7b:6e:
cd:8b:ee:15
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASFAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjExMTY0MjA1WhcNMjUwMjI1MTY0MjA1WjAYMRYw
FAYDVQQDEw02N2FiN2RlMS1lOWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtezLH6e0SrlcVo/5DvfvvJjoPvbquww0M69r/HrvnV4R00dOwXmzJ5Su
ejgM/mr2LoL2gB3osFBJjBQTt2GOBn7gwkI/WuUqWBbxSI/j4JctuckbhDgwhCyw
Z8NTHckHqXGeU4iXFPA3wXZtoEH2QRgIYo7vk4kF0rg21t7ob9DeVgJx8fG0EXUj
00rIzAQZoQ89J8UVw4IZFlUiJs8XkngfYnfswD1U0SF4qg3uLsc4WyvdFt0knoAZ
ivI04H5lvk1xy0WriPzB1qMmn9ZB0Tap69+JAz385qwSql1FAiJMNcuqh5WzQZnl
UHJkkf8DcBkGMfa8JQMlPM4M9LNhuwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL0/
wbO1hqMXNPsG0PlwQVGiXxHFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMjdCMkEyNkU4OTcxMUVGQURERjkzNUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLc0QMA0GCSqGSIb3DQEBCwUA
A4IBAQA7GmM1mfHiLEPpYZHCmn9pl2lruHdvz5BTVVgFCrxyN7y0GqA8bx3Ufyn3
vRpPQ4Ue9neggg6uPpVkISW8EJ5+h/bGwkMEXVKYj7uPy/OMUuHlfJ0mAXnEXAxD
ChVNcFTE0z8f5TboVheC7zCriEvrHAz51NMtGtPeacc6dAlFPQQR9nFPxCm6KEQb
aZQpaF7wbgrzLybrPtxNLxwPBGyxC4jF5J5qDM88dhNFYvzMbC4rNLo3ErDiX2tx
X+lTHaFJZvA/tLIsfLNxpkXxYoiedoEzqW36mr/XL+wJPQGZl3YvgkPq2TZ5yk1U
RfrcfH0ftp8BXXIzM+nDe27Ni+4V
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:50:48 2025 by rpki-client