Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B94F6A4F80C11EF994FCB47762E951A.roa
File: 6B94F6A4F80C11EF994FCB47762E951A.roa (raw, json)
Hash identifier: ubR/g8SS23lmUkA9Gj84/QG6xyj5Mpx90L0je97xWhQ=
Subject key identifier: 3A:F3:C5:B7:CF:51:E5:27:39:CB:2F:8E:69:73:12:9A:A4:19:8E:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0140DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B94F6A4F80C11EF994FCB47762E951A.roa
Signing time: Mon 03 Mar 2025 08:49:30 +0000
ROA not before: Mon 03 Mar 2025 08:49:26 +0000
ROA not after: Wed 23 Apr 2025 08:49:26 +0000
asID: 203020
IP address blocks: 45.198.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82140 (0x140dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 08:49:26 2025 GMT
Not After : Apr 23 08:49:26 2025 GMT
Subject: CN=67c56d1a-42fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:9b:c0:b2:ab:d6:19:d5:1c:e4:b9:79:4a:
74:55:44:90:3b:20:4b:b7:b9:22:f1:c4:33:5d:20:
19:66:a0:7b:3a:54:b5:8b:c3:b6:0d:f8:e4:e5:17:
9f:14:36:67:45:c5:66:7a:8d:94:43:69:63:19:f3:
c5:99:6c:6c:e6:96:02:c8:a4:e3:67:75:62:aa:dc:
06:65:3d:59:7c:0e:c4:44:a4:8a:54:8b:d9:25:b1:
ff:5e:6d:0f:63:e5:d7:24:08:92:be:db:7e:1b:d1:
d6:96:f8:67:be:e6:c8:93:cb:92:df:e5:19:5b:46:
bf:16:21:88:9e:9a:6e:4e:82:a7:23:d8:52:b6:12:
b7:50:3d:e5:88:9b:1a:a2:47:72:b8:73:92:8b:22:
d6:e6:21:4f:7d:f6:12:95:d5:09:09:ec:4c:e8:23:
49:cb:91:94:14:0e:c6:94:e5:dd:fe:b1:8d:6c:da:
82:fe:e9:a2:8c:03:e0:3e:8d:7c:f6:41:c4:a9:84:
44:34:c9:73:9f:20:7a:07:88:2a:e9:71:33:0a:9c:
07:09:f7:b7:d5:f5:ca:16:ff:94:a5:9d:ad:69:e6:
77:c3:a2:ed:68:36:76:6c:58:91:ec:8e:33:05:ec:
6d:a8:25:ed:dd:04:d0:03:c2:66:f1:aa:85:54:ab:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F3:C5:B7:CF:51:E5:27:39:CB:2F:8E:69:73:12:9A:A4:19:8E:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B94F6A4F80C11EF994FCB47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.200.0/21
Signature Algorithm: sha256WithRSAEncryption
51:99:0c:45:fb:df:bc:2a:61:93:fa:0e:92:ef:2b:9c:d7:b9:
ee:7c:d2:44:40:e7:57:a0:af:09:d7:e2:1c:7c:b6:f9:be:38:
c6:74:7e:d5:68:a2:bb:e9:f8:de:16:35:84:aa:ff:f6:bf:b2:
bb:18:1d:5e:1c:59:3b:c2:69:89:71:e1:5d:26:ed:62:f3:a2:
35:d0:46:a1:c0:fd:91:cf:4d:c3:5f:c9:aa:05:02:f1:1b:c9:
82:5b:22:d7:2b:06:b8:da:c3:9c:f2:3e:c8:1e:9b:21:6a:5e:
42:54:1c:56:79:bb:80:ed:9c:82:46:6c:9d:0f:e0:c6:53:a6:
a4:b0:0b:c8:f9:4a:ee:9f:e6:9f:bc:0f:93:aa:5f:77:07:68:
0d:92:d4:6f:b7:0f:36:8c:37:94:3f:ba:84:da:d0:96:9d:9c:
5d:9c:95:51:c0:86:cf:d1:18:09:3d:a8:b9:13:88:43:4e:07:
1d:d3:34:25:d2:31:43:87:b0:96:b9:3f:7a:34:c9:85:71:3f:
94:bc:d5:f5:6c:f7:fe:c6:5c:8e:2c:34:a9:46:50:ae:65:a7:
7c:e4:6d:4d:7c:ce:9e:a3:21:a1:bf:14:e6:e3:9d:e4:d9:d8:
bd:ec:d5:3b:1a:f0:0d:a8:bc:83:f7:0a:bb:fd:3c:6b:e8:0f:
10:f4:d7:e3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUDcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzAzMDg0OTI2WhcNMjUwNDIzMDg0OTI2WjAYMRYw
FAYDVQQDEw02N2M1NmQxYS00MmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0T6bwLKr1hnVHOS5eUp0VUSQOyBLt7ki8cQzXSAZZqB7OlS1i8O2Dfjk
5RefFDZnRcVmeo2UQ2ljGfPFmWxs5pYCyKTjZ3ViqtwGZT1ZfA7ERKSKVIvZJbH/
Xm0PY+XXJAiSvtt+G9HWlvhnvubIk8uS3+UZW0a/FiGInppuToKnI9hSthK3UD3l
iJsaokdyuHOSiyLW5iFPffYSldUJCexM6CNJy5GUFA7GlOXd/rGNbNqC/umijAPg
Po189kHEqYRENMlznyB6B4gq6XEzCpwHCfe31fXKFv+UpZ2taeZ3w6LtaDZ2bFiR
7I4zBextqCXt3QTQA8Jm8aqFVKsh5QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDrz
xbfPUeUnOcsvjmlzEpqkGY5OMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82Qjk0RjZBNEY4MEMxMUVGOTk0RkNCNDc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcbIMA0GCSqGSIb3DQEBCwUA
A4IBAQBRmQxF+9+8KmGT+g6S7yuc17nufNJEQOdXoK8J1+IcfLb5vjjGdH7VaKK7
6fjeFjWEqv/2v7K7GB1eHFk7wmmJceFdJu1i86I10EahwP2Rz03DX8mqBQLxG8mC
WyLXKwa42sOc8j7IHpshal5CVBxWebuA7ZyCRmydD+DGU6aksAvI+Urun+afvA+T
ql93B2gNktRvtw82jDeUP7qE2tCWnZxdnJVRwIbP0RgJPai5E4hDTgcd0zQl0jFD
h7CWuT96NMmFcT+UvNX1bPf+xlyOLDSpRlCuZad85G1NfM6eoyGhvxTm453k2di9
7NU7GvANqLyD9wq7/Txr6A8Q9Nfj
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:30 2025 by rpki-client