Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E11EA6F38611EF8B707446762E951A.roa
File: 34E11EA6F38611EF8B707446762E951A.roa (raw, json)
Hash identifier: y2Ug2Qyc9k9oomrxV75gwvLr5fkdERqdvtswEq043NQ=
Subject key identifier: 27:AF:DF:3C:59:F1:C1:86:8E:D6:30:62:45:90:C8:61:87:4F:31:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E30
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E11EA6F38611EF8B707446762E951A.roa
Signing time: Tue 25 Feb 2025 14:38:41 +0000
ROA not before: Tue 25 Feb 2025 14:38:37 +0000
ROA not after: Wed 09 Apr 2025 14:38:37 +0000
asID: 63139
IP address blocks: 45.197.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77360 (0x12e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 14:38:37 2025 GMT
Not After : Apr 9 14:38:37 2025 GMT
Subject: CN=67bdd5f1-c4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:c5:30:4a:50:93:0a:9c:33:9f:fd:35:16:
ad:4b:9e:90:3e:9b:d7:f7:06:4a:73:40:50:0e:1b:
40:22:3c:18:c6:4b:ff:2e:d8:49:ad:e4:3a:6e:f7:
0c:5e:27:99:d6:eb:2a:2d:8a:a9:fd:6b:d8:f4:d2:
ad:3d:d3:aa:61:57:cc:b2:15:6f:24:1d:2b:78:ae:
18:d3:ea:c2:3f:cf:4a:0e:95:ec:37:ae:d4:c3:b0:
52:89:3a:a8:3c:83:8a:59:a6:16:1b:23:cc:36:d1:
f0:57:61:be:1b:3c:27:b0:28:50:4a:a0:9c:30:a5:
bf:84:cf:03:a1:25:32:c7:27:21:b7:bc:87:e8:d5:
0f:8a:68:5a:ed:a3:b8:d2:24:2a:47:7e:35:34:84:
2c:6c:49:ec:e0:f7:a2:2b:1b:5e:e1:17:c3:1e:8c:
b4:ef:32:17:b4:64:9f:b2:3c:a7:c5:b6:b5:32:f4:
5a:23:e5:5a:4f:54:12:c5:65:bf:76:40:3e:58:49:
37:06:ff:ec:d8:4f:95:d6:a5:b3:93:9f:a6:30:42:
8b:8a:01:bb:eb:46:1d:dc:12:cb:d9:ec:75:9d:8f:
ac:54:ad:c1:32:aa:47:09:65:d2:57:fa:51:16:f7:
e0:00:9e:41:69:ae:0a:55:bb:9c:4a:0a:d7:56:64:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AF:DF:3C:59:F1:C1:86:8E:D6:30:62:45:90:C8:61:87:4F:31:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E11EA6F38611EF8B707446762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.86.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3d:62:2b:c9:c8:cd:4e:fe:89:b0:df:1c:ac:a2:4c:24:97:
38:9e:b7:22:62:6e:08:a3:c7:05:f5:f6:dd:99:cc:b9:b0:d1:
e9:6f:5a:52:e1:b4:f3:4b:ff:7f:85:86:e2:85:58:71:94:e4:
81:4a:54:8c:25:6e:b2:c6:ac:6d:cd:7b:03:a4:0d:fd:10:67:
50:4a:e5:28:f0:cf:2b:c1:72:e5:80:ef:42:e5:1d:82:9c:de:
2c:c0:ec:c0:8c:39:23:72:2c:b5:38:9f:c5:2f:36:fb:fe:ea:
ee:81:a9:89:97:84:a0:98:57:bc:43:be:5e:dd:c3:ff:40:e5:
eb:66:a4:6f:4f:43:80:50:0b:85:64:f6:f0:66:8e:a8:2c:04:
53:82:dc:5c:f0:fd:6e:b0:17:f3:fa:f7:c4:1f:31:08:14:ac:
d6:a6:f2:3f:74:02:33:2c:cb:b8:30:37:f4:02:5a:71:50:3b:
49:69:e6:c6:b2:67:dd:10:8a:31:bb:cd:e9:58:c5:bd:b0:95:
34:85:6f:0b:dc:47:b9:21:13:96:d7:5c:e6:e0:e7:ce:b9:be:
63:9b:d4:79:78:d1:ec:11:97:6c:f8:8b:e2:d9:ac:e3:3b:17:
a8:88:a2:7e:e9:f9:3f:29:45:01:fe:f2:7d:83:f6:bf:a2:c0:
c3:a5:21:47
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS4wMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MTQzODM3WhcNMjUwNDA5MTQzODM3WjAYMRYw
FAYDVQQDEw02N2JkZDVmMS1jNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmtXFMEpQkwqcM5/9NRatS56QPpvX9wZKc0BQDhtAIjwYxkv/LthJreQ6
bvcMXieZ1usqLYqp/WvY9NKtPdOqYVfMshVvJB0reK4Y0+rCP89KDpXsN67Uw7BS
iTqoPIOKWaYWGyPMNtHwV2G+GzwnsChQSqCcMKW/hM8DoSUyxycht7yH6NUPimha
7aO40iQqR341NIQsbEns4PeiKxte4RfDHoy07zIXtGSfsjynxba1MvRaI+VaT1QS
xWW/dkA+WEk3Bv/s2E+V1qWzk5+mMEKLigG760Yd3BLL2ex1nY+sVK3BMqpHCWXS
V/pRFvfgAJ5Baa4KVbucSgrXVmSYeQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCev
3zxZ8cGGjtYwYkWQyGGHTzGBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNEUxMUVBNkYzODYxMUVGOEI3MDc0NDY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcVWMA0GCSqGSIb3DQEBCwUA
A4IBAQAPPWIrycjNTv6JsN8crKJMJJc4nrciYm4Io8cF9fbdmcy5sNHpb1pS4bTz
S/9/hYbihVhxlOSBSlSMJW6yxqxtzXsDpA39EGdQSuUo8M8rwXLlgO9C5R2CnN4s
wOzAjDkjciy1OJ/FLzb7/urugamJl4SgmFe8Q75e3cP/QOXrZqRvT0OAUAuFZPbw
Zo6oLARTgtxc8P1usBfz+vfEHzEIFKzWpvI/dAIzLMu4MDf0AlpxUDtJaebGsmfd
EIoxu83pWMW9sJU0hW8L3Ee5IROW11zm4OfOub5jm9R5eNHsEZds+Ivi2azjOxeo
iKJ+6fk/KUUB/vJ9g/a/osDDpSFH
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:34 2025 by rpki-client