Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/328C9562F47C11EF94D08469762E951A.roa
File: 328C9562F47C11EF94D08469762E951A.roa (raw, json)
Hash identifier: Fe/D7O2CnlWBpDCg0Ry3jHpjR4PN8TPxah0HdHNA+AM=
Subject key identifier: 05:0D:9A:C8:CC:BA:5A:A8:A1:D6:80:9F:43:A1:98:80:3F:F9:2C:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01374F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/328C9562F47C11EF94D08469762E951A.roa
Signing time: Wed 26 Feb 2025 19:59:33 +0000
ROA not before: Wed 26 Feb 2025 19:59:30 +0000
ROA not after: Thu 19 Feb 2026 19:59:30 +0000
asID: 984
IP address blocks: 45.201.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79695 (0x1374f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:59:30 2025 GMT
Not After : Feb 19 19:59:30 2026 GMT
Subject: CN=67bf72a5-4039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:87:ed:8f:ea:df:5e:61:e8:6b:e9:d6:9a:
a8:8c:f0:a0:cf:16:0d:cf:cb:05:3e:2c:c1:e7:76:
f5:bc:48:15:a1:5b:2f:73:f2:88:93:54:18:cb:51:
19:70:79:b1:d8:f1:89:d6:ed:c4:53:72:09:9d:0e:
c5:98:56:41:43:82:e5:dc:9e:cb:f8:1c:7e:6a:1b:
98:5a:73:79:5c:a9:f4:8e:7b:13:81:37:c8:37:08:
f0:ab:94:18:05:1f:eb:b4:d7:3c:de:27:6c:ff:e5:
18:ac:5c:79:8a:76:3b:08:ad:72:e2:c9:ac:d3:86:
4a:a9:62:1c:0f:72:9c:ee:e6:9c:5a:f7:ee:c3:33:
04:75:60:ed:bd:69:57:33:27:ac:f5:56:6e:91:bc:
19:96:af:10:6a:a4:e7:89:33:68:13:23:f0:56:20:
89:30:a1:41:3c:bf:dc:ae:c7:b0:d7:b2:59:56:7c:
69:d9:af:d3:9a:1e:77:80:4d:07:cf:07:3f:f1:98:
c8:f4:82:e7:4e:98:56:05:2e:6d:dc:cf:4f:71:e6:
04:46:fe:e7:53:1e:34:52:b2:4e:5f:36:14:f2:30:
6f:65:69:62:7f:30:16:1b:63:87:77:66:e2:4e:60:
99:fa:d5:14:87:05:f8:c6:bd:1e:02:25:78:69:c1:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0D:9A:C8:CC:BA:5A:A8:A1:D6:80:9F:43:A1:98:80:3F:F9:2C:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/328C9562F47C11EF94D08469762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.109.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fe:5a:46:a9:bf:45:a2:dd:39:0a:b5:20:3c:bb:2e:24:73:
25:94:18:89:05:3d:42:8b:e7:88:8c:89:3f:0c:32:e9:06:91:
23:ab:03:5a:fd:b2:62:ad:ee:45:2d:a1:f3:80:d6:76:cf:45:
d1:f3:fc:f8:d0:2a:33:c1:c3:13:64:49:02:60:22:e3:80:8b:
83:ae:63:e4:80:88:a6:f2:3e:38:57:6e:dc:c6:49:b5:99:82:
eb:c8:d2:fa:da:db:76:cb:ef:62:df:40:95:59:9b:90:2c:9f:
38:bc:ef:fc:11:cb:72:47:07:5f:a4:a6:a6:40:34:09:67:07:
cf:9f:7a:7d:61:71:33:24:47:7b:e0:03:03:4d:d2:5f:43:90:
0e:8d:fc:10:7d:15:58:66:1b:df:f2:48:43:89:08:36:00:52:
86:65:8c:f3:f8:16:ca:dd:71:65:a0:a2:d4:79:6a:8f:ff:25:
47:bd:53:06:d6:4e:d6:86:2a:5b:b6:60:32:5a:37:9d:45:d6:
22:e5:4f:a7:a8:b7:ae:ae:b0:bf:b9:5f:dd:20:15:4a:c3:9e:
ff:fa:94:84:c3:30:95:ce:7d:08:7f:14:6d:ef:96:f1:a5:4c:
c0:83:5e:e6:ed:80:04:03:7f:6e:52:97:95:c9:93:69:0d:0d:
69:6f:57:c1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATdPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTk1OTMwWhcNMjYwMjE5MTk1OTMwWjAYMRYw
FAYDVQQDEw02N2JmNzJhNS00MDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtXyH7Y/q315h6Gvp1pqojPCgzxYNz8sFPizB53b1vEgVoVsvc/KIk1QY
y1EZcHmx2PGJ1u3EU3IJnQ7FmFZBQ4Ll3J7L+Bx+ahuYWnN5XKn0jnsTgTfINwjw
q5QYBR/rtNc83ids/+UYrFx5inY7CK1y4sms04ZKqWIcD3Kc7uacWvfuwzMEdWDt
vWlXMyes9VZukbwZlq8QaqTniTNoEyPwViCJMKFBPL/crsew17JZVnxp2a/Tmh53
gE0Hzwc/8ZjI9ILnTphWBS5t3M9PceYERv7nUx40UrJOXzYU8jBvZWlifzAWG2OH
d2biTmCZ+tUUhwX4xr0eAiV4acEMkwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAUN
msjMulqoodaAn0OhmIA/+SwTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMjhDOTU2MkY0N0MxMUVGOTREMDg0Njk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcltMA0GCSqGSIb3DQEBCwUA
A4IBAQBY/lpGqb9Fot05CrUgPLsuJHMllBiJBT1Ci+eIjIk/DDLpBpEjqwNa/bJi
re5FLaHzgNZ2z0XR8/z40CozwcMTZEkCYCLjgIuDrmPkgIim8j44V27cxkm1mYLr
yNL62tt2y+9i30CVWZuQLJ84vO/8EctyRwdfpKamQDQJZwfPn3p9YXEzJEd74AMD
TdJfQ5AOjfwQfRVYZhvf8khDiQg2AFKGZYzz+BbK3XFloKLUeWqP/yVHvVMG1k7W
hipbtmAyWjedRdYi5U+nqLeurrC/uV/dIBVKw57/+pSEwzCVzn0IfxRt75bxpUzA
g17m7YAEA39uUpeVyZNpDQ1pb1fB
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:36 2025 by rpki-client