Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41DBBBEC04B711F08FB74891762E951A.roa
File: 41DBBBEC04B711F08FB74891762E951A.roa (raw, json)
Hash identifier: WCer26xACrIytl64C2sKiZz0Ea37ssErJ8WiYUb3vu4=
Subject key identifier: 39:4A:BD:F2:91:25:C4:54:F7:26:FF:50:AA:51:85:6F:40:00:CF:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41DBBBEC04B711F08FB74891762E951A.roa
Signing time: Wed 19 Mar 2025 11:42:38 +0000
ROA not before: Wed 19 Mar 2025 11:42:34 +0000
ROA not after: Sun 27 Apr 2025 11:42:34 +0000
asID: 62240
IP address blocks: 45.192.32.0/24 maxlen: 24
45.192.33.0/24 maxlen: 24
45.192.34.0/24 maxlen: 24
45.192.35.0/24 maxlen: 24
45.192.36.0/24 maxlen: 24
45.192.37.0/24 maxlen: 24
45.192.38.0/24 maxlen: 24
45.192.39.0/24 maxlen: 24
45.192.40.0/24 maxlen: 24
45.192.41.0/24 maxlen: 24
45.192.42.0/24 maxlen: 24
45.192.43.0/24 maxlen: 24
45.192.44.0/24 maxlen: 24
45.192.45.0/24 maxlen: 24
45.192.46.0/24 maxlen: 24
45.192.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83690 (0x146ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 19 11:42:34 2025 GMT
Not After : Apr 27 11:42:34 2025 GMT
Subject: CN=67daadae-715c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:1a:ef:b5:9b:1e:8a:b0:3c:d5:0e:51:07:
28:d5:8b:40:fb:58:c8:3d:c5:11:37:fd:3a:95:19:
48:c5:b0:bb:25:36:42:5f:a4:72:b2:6b:bb:81:71:
17:4f:16:cb:8c:76:fc:ff:c3:f6:4a:39:2e:39:7b:
0f:27:e4:91:f3:41:41:e1:25:ef:dc:fe:73:51:6d:
76:88:fc:59:ff:45:34:6c:9f:73:00:3e:08:f6:ae:
8e:76:a7:6d:aa:90:d2:b5:b6:52:3e:c2:6a:2c:b3:
b6:7d:1c:3c:9c:47:19:e3:22:ae:94:a8:14:c2:43:
87:6e:33:7a:ee:a0:86:2d:8b:7d:e9:ed:91:a7:a9:
03:0b:ae:f6:b8:9d:4b:78:5b:4e:16:be:11:61:cb:
ff:18:e7:b9:47:7b:d4:31:60:6b:78:df:dd:89:d8:
f5:04:59:31:72:74:04:fe:6b:c5:3d:7a:48:91:9a:
8e:03:e0:ed:b6:4a:26:94:6c:46:94:c7:ff:79:17:
73:d0:d2:c1:d1:fb:84:77:a9:91:52:fc:ba:f8:d9:
25:c2:df:54:a7:7e:87:b4:99:49:11:78:f5:50:a1:
0f:a4:45:55:ca:e3:df:83:91:b4:c0:83:b7:71:1e:
88:07:8e:45:a3:29:3e:77:2b:f7:53:3c:bf:90:5b:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4A:BD:F2:91:25:C4:54:F7:26:FF:50:AA:51:85:6F:40:00:CF:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41DBBBEC04B711F08FB74891762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.32.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:0a:11:f4:a3:17:1f:25:4b:f4:c2:2f:b3:e1:3e:1a:12:c0:
36:50:86:3d:dc:3c:26:41:03:b7:e7:e8:bd:b6:2b:76:7b:e4:
e1:00:c5:d9:cd:e0:c8:39:91:80:62:7d:3b:62:f6:b4:c5:16:
cb:8a:23:0c:d1:56:17:22:21:86:f0:e5:a3:15:6a:22:c3:d8:
cf:94:4b:5a:64:c9:65:b2:a7:fb:02:4c:ac:18:ab:e5:7d:0b:
a7:59:ee:6a:0b:e0:77:29:eb:ae:cc:79:6c:70:d7:86:be:35:
c5:09:7b:5a:f6:6d:92:e2:e3:77:25:dd:fa:c7:b3:b6:40:aa:
e1:65:a4:33:32:63:49:e1:de:b4:15:ed:6f:84:d2:6b:9c:91:
d2:1e:74:38:1d:6b:41:ef:5a:02:09:d4:24:b4:b6:88:88:e5:
38:3a:36:d9:ba:e6:67:a5:93:ab:58:d6:6c:38:97:a9:41:c4:
0a:68:f0:66:33:78:58:cd:30:96:fa:7e:bc:02:f5:e9:d2:d9:
57:6c:88:55:99:ba:f7:35:dd:0a:e5:66:ea:7b:37:0b:b6:17:
7f:21:9d:46:14:63:a4:f2:a1:16:03:f0:2c:1b:af:e1:b3:8f:
be:0f:6a:28:41:72:b5:44:37:53:22:42:d3:ba:0e:75:49:96:
2d:c0:78:e9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUbqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE5MTE0MjM0WhcNMjUwNDI3MTE0MjM0WjAYMRYw
FAYDVQQDEw02N2RhYWRhZS03MTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxmca77WbHoqwPNUOUQco1YtA+1jIPcURN/06lRlIxbC7JTZCX6Rysmu7
gXEXTxbLjHb8/8P2SjkuOXsPJ+SR80FB4SXv3P5zUW12iPxZ/0U0bJ9zAD4I9q6O
dqdtqpDStbZSPsJqLLO2fRw8nEcZ4yKulKgUwkOHbjN67qCGLYt96e2Rp6kDC672
uJ1LeFtOFr4RYcv/GOe5R3vUMWBreN/didj1BFkxcnQE/mvFPXpIkZqOA+Dttkom
lGxGlMf/eRdz0NLB0fuEd6mRUvy6+Nklwt9Up36HtJlJEXj1UKEPpEVVyuPfg5G0
wIO3cR6IB45Foyk+dyv3Uzy/kFtNgQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDlK
vfKRJcRU9yb/UKpRhW9AAM+TMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MURCQkJFQzA0QjcxMUYwOEZCNzQ4OTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcAgMA0GCSqGSIb3DQEBCwUA
A4IBAQCtChH0oxcfJUv0wi+z4T4aEsA2UIY93DwmQQO35+i9tit2e+ThAMXZzeDI
OZGAYn07Yva0xRbLiiMM0VYXIiGG8OWjFWoiw9jPlEtaZMllsqf7AkysGKvlfQun
We5qC+B3KeuuzHlscNeGvjXFCXta9m2S4uN3Jd36x7O2QKrhZaQzMmNJ4d60Fe1v
hNJrnJHSHnQ4HWtB71oCCdQktLaIiOU4OjbZuuZnpZOrWNZsOJepQcQKaPBmM3hY
zTCW+n68AvXp0tlXbIhVmbr3Nd0K5WbqezcLthd/IZ1GFGOk8qEWA/AsG6/hs4++
D2ooQXK1RDdTIkLTug51SZYtwHjp
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:33:19 2025 by rpki-client