Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A360300F38911EFB04D9C59762E951A.roa
File: 3A360300F38911EFB04D9C59762E951A.roa (raw, json)
Hash identifier: Wyw7fk63Eig+/swNwlgriDZVncpSUq4QdJde9tPVZgM=
Subject key identifier: EA:CA:F7:D4:A2:43:55:1C:E7:67:C3:28:F9:B2:B7:14:0E:D4:A3:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A360300F38911EFB04D9C59762E951A.roa
Signing time: Tue 25 Feb 2025 15:00:18 +0000
ROA not before: Tue 25 Feb 2025 15:00:15 +0000
ROA not after: Wed 09 Apr 2025 15:00:15 +0000
asID: 63139
IP address blocks: 45.197.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77390 (0x12e4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 15:00:15 2025 GMT
Not After : Apr 9 15:00:15 2025 GMT
Subject: CN=67bddb02-a9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:8a:19:93:72:44:28:72:88:30:68:21:2d:
76:6a:d1:3b:ee:de:04:09:96:0d:94:8e:13:9e:77:
69:67:69:2a:88:97:db:0f:20:9e:fd:2a:1a:b1:ee:
67:22:20:bf:03:3a:f2:91:89:db:45:f5:ff:b7:3d:
54:6d:d9:6c:b8:71:c0:40:a2:f7:ef:88:01:23:c9:
e1:82:1f:6e:bf:3d:a4:ae:ce:18:8e:25:05:b8:2a:
04:17:57:6f:f3:6e:b1:d8:1d:2e:17:4e:15:86:a8:
17:00:f4:22:95:bd:d8:12:ba:65:22:c9:7b:2c:9f:
2e:b0:0f:b8:3d:5a:44:3d:8e:37:dd:e6:cc:8f:d1:
2a:00:ff:58:8a:82:2e:07:dc:67:78:67:2a:89:83:
11:2f:a7:4e:c1:3d:49:07:ef:b9:be:ff:31:eb:d4:
8d:f3:86:ca:6a:80:b6:29:02:e6:b9:0c:1c:b5:ae:
fe:41:0f:1e:f3:97:d4:eb:52:ba:57:e0:01:75:33:
b3:3a:24:a5:87:66:a7:dc:16:3d:3d:c8:fb:1b:16:
11:5a:5a:9a:71:5f:9c:76:55:82:ac:04:9a:29:3f:
b7:fa:0d:4d:19:5d:15:35:e2:4f:6f:57:0e:f0:dd:
5a:15:21:7b:ef:d8:b5:8a:c2:26:18:af:30:4b:cc:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CA:F7:D4:A2:43:55:1C:E7:67:C3:28:F9:B2:B7:14:0E:D4:A3:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A360300F38911EFB04D9C59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:02:cf:2e:09:f0:ca:2b:e0:29:ad:1d:66:59:61:db:f0:f5:
c1:69:24:fa:eb:60:8a:5a:0a:11:de:e4:89:8c:3c:bc:29:c6:
d0:83:75:40:5e:b4:a3:55:30:23:84:3b:08:f4:9d:15:b8:28:
2e:5e:a0:9e:6e:8d:24:30:b3:2b:4e:e1:41:07:3a:75:3f:73:
44:c8:b0:a3:e6:8c:8f:54:b7:7d:a5:78:87:15:82:00:78:64:
20:35:75:bd:1d:89:ff:9c:eb:ef:8b:85:64:9f:07:22:80:e2:
99:d6:92:e0:9f:ec:68:00:cf:de:0b:74:17:eb:69:f8:f4:c4:
63:bb:57:41:af:92:27:63:35:46:a8:23:ae:c7:1e:03:c2:d4:
8d:2f:9c:c0:7f:c9:76:a2:22:87:1b:43:3e:3d:7e:4e:e8:b1:
ac:cc:ac:fc:c8:6c:a9:fd:6f:33:fb:d1:68:10:34:08:5c:92:
84:aa:59:e7:58:82:42:e0:59:3f:44:98:44:5e:8b:a7:a2:a2:
ab:28:20:4c:6f:65:4e:3b:11:7e:b7:3a:1b:72:d3:a8:5f:bf:
4d:cd:58:b4:ac:98:81:a3:53:bf:2a:c7:39:85:60:c8:4f:a1:
3d:45:54:17:cf:4e:5f:bd:a8:41:51:01:75:95:c1:74:7d:a8:
ee:84:82:bd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS5OMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MTUwMDE1WhcNMjUwNDA5MTUwMDE1WjAYMRYw
FAYDVQQDEw02N2JkZGIwMi1hOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo0+KGZNyRChyiDBoIS12atE77t4ECZYNlI4TnndpZ2kqiJfbDyCe/Soa
se5nIiC/AzrykYnbRfX/tz1UbdlsuHHAQKL374gBI8nhgh9uvz2krs4YjiUFuCoE
F1dv826x2B0uF04VhqgXAPQilb3YErplIsl7LJ8usA+4PVpEPY433ebMj9EqAP9Y
ioIuB9xneGcqiYMRL6dOwT1JB++5vv8x69SN84bKaoC2KQLmuQwcta7+QQ8e85fU
61K6V+ABdTOzOiSlh2an3BY9Pcj7GxYRWlqacV+cdlWCrASaKT+3+g1NGV0VNeJP
b1cO8N1aFSF779i1isImGK8wS8xOtQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOrK
99SiQ1Uc52fDKPmytxQO1KOzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQTM2MDMwMEYzODkxMUVGQjA0RDlDNTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcVfMA0GCSqGSIb3DQEBCwUA
A4IBAQCeAs8uCfDKK+AprR1mWWHb8PXBaST662CKWgoR3uSJjDy8KcbQg3VAXrSj
VTAjhDsI9J0VuCguXqCebo0kMLMrTuFBBzp1P3NEyLCj5oyPVLd9pXiHFYIAeGQg
NXW9HYn/nOvvi4VknwcigOKZ1pLgn+xoAM/eC3QX62n49MRju1dBr5InYzVGqCOu
xx4DwtSNL5zAf8l2oiKHG0M+PX5O6LGszKz8yGyp/W8z+9FoEDQIXJKEqlnnWIJC
4Fk/RJhEXounoqKrKCBMb2VOOxF+tzobctOoX79NzVi0rJiBo1O/Ksc5hWDIT6E9
RVQXz05fvahBUQF1lcF0fajuhIK9
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:55 2025 by rpki-client