Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D49F7DCFF2511EFA333F374762E951A.roa
File: 5D49F7DCFF2511EFA333F374762E951A.roa (raw, json)
Hash identifier: I5pa5FOgzutZ7vL8T69aHxLm+rO80jnE1V4nzxa7KnQ=
Subject key identifier: D2:8F:C6:E8:D6:0A:09:44:6B:0E:E2:99:AB:E5:50:21:B1:69:0D:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01452A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D49F7DCFF2511EFA333F374762E951A.roa
Signing time: Wed 12 Mar 2025 09:35:42 +0000
ROA not before: Wed 12 Mar 2025 09:35:38 +0000
ROA not after: Wed 30 Apr 2025 09:35:38 +0000
asID: 398993
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83242 (0x1452a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 09:35:38 2025 GMT
Not After : Apr 30 09:35:38 2025 GMT
Subject: CN=67d1556d-7afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:0d:c4:fe:9f:02:e9:53:d4:64:af:64:f4:
bc:79:0f:36:2b:d4:13:0a:10:f0:98:75:9e:45:92:
22:d7:34:a9:c4:08:d7:72:01:00:12:8d:19:0b:64:
cd:44:0a:90:3a:a3:ef:06:e4:2f:09:3a:82:32:32:
a6:4d:4e:fc:99:c6:4b:14:e9:3c:83:f4:0f:b4:be:
e6:c2:69:cd:6e:08:7b:4d:e0:cb:e2:25:9f:26:07:
88:5a:00:68:98:39:8f:aa:3e:0f:6c:18:e8:b3:0d:
8a:21:13:68:9b:b8:0f:6d:3c:d7:a5:e8:e5:31:d5:
5b:4a:77:74:13:98:8d:01:18:d0:81:58:40:8f:71:
04:80:08:47:84:14:f9:15:a1:4d:77:90:35:46:82:
57:c7:38:ba:43:82:49:ef:61:bb:ec:26:71:65:e8:
2d:18:73:16:96:55:1b:26:78:00:78:43:f5:4b:03:
a8:7f:82:de:33:f6:d5:7b:83:57:26:b6:42:c0:0e:
fb:9c:5f:29:cc:3a:f8:81:27:a3:8d:71:5f:d2:42:
30:4d:0f:eb:d6:d2:58:c8:94:6d:0b:de:bd:d2:e5:
0f:07:d7:12:2d:3f:f2:5a:f6:bd:c7:92:77:d6:d0:
2a:78:5c:97:87:50:92:66:c3:6c:0d:45:fb:a2:67:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8F:C6:E8:D6:0A:09:44:6B:0E:E2:99:AB:E5:50:21:B1:69:0D:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D49F7DCFF2511EFA333F374762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
01:6b:68:84:8b:34:25:cc:e7:f3:f0:c0:71:63:03:d3:94:f9:
f3:1c:f1:4c:61:1f:c8:d0:47:fb:ba:dc:f6:b5:55:3a:ab:94:
3e:86:53:b2:32:cc:17:c6:f0:f6:b8:91:90:9e:c5:a8:4b:13:
31:47:21:be:72:c4:82:3f:c9:b2:26:23:65:4a:01:b7:57:99:
2c:df:7f:99:56:c1:80:3e:ba:c2:3b:7c:e0:a7:d9:57:06:9d:
72:84:9e:d0:a6:da:86:e6:66:eb:f9:f6:aa:e3:08:f6:d8:b3:
2c:69:4b:54:65:cf:3a:49:54:8e:ff:f3:15:b2:17:ab:67:b8:
4f:d9:b2:00:f4:21:9f:90:5b:cc:7a:ce:20:bf:a3:fc:ee:c8:
4f:17:dc:70:dd:50:3a:ca:71:88:85:36:7a:bb:28:5c:ba:89:
82:94:fa:4a:da:61:68:0f:a7:f5:c1:9c:31:4c:1a:7c:1e:2f:
00:80:d5:24:21:f5:44:51:66:fa:cb:13:fd:93:d6:a6:26:61:
8e:97:70:2d:ef:59:56:d5:e2:8e:7c:b8:58:f4:6c:a9:5a:14:
fa:03:41:14:1f:27:ee:58:07:2f:e6:df:d9:9f:64:51:4f:62:
5a:07:7c:ef:b5:45:91:e0:b6:59:ab:68:ac:1f:38:48:3b:46:
80:5f:ca:81
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAUUqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzEyMDkzNTM4WhcNMjUwNDMwMDkzNTM4WjAYMRYw
FAYDVQQDEw02N2QxNTU2ZC03YWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzE0NxP6fAulT1GSvZPS8eQ82K9QTChDwmHWeRZIi1zSpxAjXcgEAEo0Z
C2TNRAqQOqPvBuQvCTqCMjKmTU78mcZLFOk8g/QPtL7mwmnNbgh7TeDL4iWfJgeI
WgBomDmPqj4PbBjosw2KIRNom7gPbTzXpejlMdVbSnd0E5iNARjQgVhAj3EEgAhH
hBT5FaFNd5A1RoJXxzi6Q4JJ72G77CZxZegtGHMWllUbJngAeEP1SwOof4LeM/bV
e4NXJrZCwA77nF8pzDr4gSejjXFf0kIwTQ/r1tJYyJRtC9690uUPB9cSLT/yWva9
x5J31tAqeFyXh1CSZsNsDUX7omeqOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKP
xujWCglEaw7imavlUCGxaQ30MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81RDQ5RjdEQ0ZGMjUxMUVGQTMzM0YzNzQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELcDAAwQGLcjAMA0GCSqGSIb3
DQEBCwUAA4IBAQABa2iEizQlzOfz8MBxYwPTlPnzHPFMYR/I0Ef7utz2tVU6q5Q+
hlOyMswXxvD2uJGQnsWoSxMxRyG+csSCP8myJiNlSgG3V5ks33+ZVsGAPrrCO3zg
p9lXBp1yhJ7QptqG5mbr+faq4wj22LMsaUtUZc86SVSO//MVsherZ7hP2bIA9CGf
kFvMes4gv6P87shPF9xw3VA6ynGIhTZ6uyhcuomClPpK2mFoD6f1wZwxTBp8Hi8A
gNUkIfVEUWb6yxP9k9amJmGOl3At71lW1eKOfLhY9GypWhT6A0EUHyfuWAcv5t/Z
n2RRT2JaB3zvtUWR4LZZq2isHzhIO0aAX8qB
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:07:28 2025 by rpki-client