Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7146127EE55911EFAA35DB49762E951A.roa
File: 7146127EE55911EFAA35DB49762E951A.roa (raw, json)
Hash identifier: eJDs73BmBbeGaL+tndvTlKW0krc2YA8z+VFkmRptnlU=
Subject key identifier: 71:2D:27:9E:B7:70:07:5B:96:22:F8:D1:9A:B1:3B:11:23:CD:33:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DCE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7146127EE55911EFAA35DB49762E951A.roa
Signing time: Fri 07 Feb 2025 13:42:59 +0000
ROA not before: Fri 07 Feb 2025 13:42:55 +0000
ROA not after: Fri 21 Jan 2028 13:42:55 +0000
asID: 17561
IP address blocks: 45.196.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73166 (0x11dce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 13:42:55 2025 GMT
Not After : Jan 21 13:42:55 2028 GMT
Subject: CN=67a60de3-2099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b5:c8:37:1b:de:de:ba:2a:24:89:ba:53:69:
20:80:f2:a1:7b:b2:c0:13:2e:5f:08:ad:5d:b5:6b:
ae:56:db:e3:5c:a1:45:c5:f7:f8:05:e9:18:5d:d9:
79:ee:ec:56:56:9f:2b:cc:92:a2:15:87:9a:09:4e:
c2:9e:08:1d:08:4a:66:73:29:a8:1c:c1:55:de:5d:
c2:39:4c:f6:8c:41:b2:86:0c:d5:86:f4:2e:f1:67:
31:a7:06:03:ef:30:f1:90:cc:29:40:3d:0c:79:e9:
42:7f:58:6f:3d:fc:e4:af:83:a9:b7:2f:ba:00:04:
e9:76:27:79:35:40:02:9d:50:84:3a:a0:99:ee:1c:
4e:14:b4:27:b4:29:68:ee:b3:ce:48:f9:cc:e2:09:
15:b8:96:c4:51:fd:04:f6:cf:e8:06:92:08:f7:e5:
1d:fc:99:ab:48:e0:27:95:6a:ae:66:c4:eb:43:85:
af:64:22:d8:09:e0:28:6e:82:c3:4b:48:84:3a:e2:
90:e2:6d:f3:1c:5c:92:bb:bc:b7:3f:2e:91:02:b1:
3d:a6:0b:e8:47:0a:de:26:e0:1e:7d:f4:3f:d9:a9:
43:34:60:2f:3b:95:35:65:8e:20:40:1f:31:f9:46:
34:3e:c4:8c:69:41:e3:c8:4f:7d:13:be:ca:27:44:
34:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2D:27:9E:B7:70:07:5B:96:22:F8:D1:9A:B1:3B:11:23:CD:33:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7146127EE55911EFAA35DB49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.71.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f4:a7:04:95:75:e1:84:dc:a7:8d:0b:84:65:70:0c:3a:3d:
fc:b7:78:b8:8a:0d:15:45:7e:6b:57:3b:f0:23:52:ed:bf:5d:
71:d9:02:79:a3:71:45:d0:dd:af:00:65:01:54:37:0e:c1:59:
04:e5:17:89:4b:c4:14:70:f1:43:ea:5f:2c:dd:ac:29:6d:d8:
89:7b:d9:4f:ea:2d:3b:03:65:56:23:9d:82:a4:5a:4f:f4:8b:
34:de:3c:c8:29:6c:c0:3e:00:20:0e:d6:69:d0:13:9a:d6:d4:
d9:9e:b7:2f:cb:d1:b5:a6:f1:4f:1a:4d:39:c7:ca:f6:d8:bf:
fc:0e:0a:df:21:28:1b:d4:e1:38:e0:b3:63:b7:ed:ba:e9:ab:
5e:53:61:ca:82:5a:7b:25:4a:ca:9d:7b:cc:4e:6a:c6:6d:0d:
1a:b8:55:f5:24:f9:55:61:28:0b:d0:c3:fc:0a:33:e7:81:09:
89:ec:1c:31:c1:4e:b6:d3:29:9f:1a:5a:be:9d:ad:7e:32:5e:
4b:e3:c9:3a:94:79:97:ee:28:bc:22:5d:48:83:dc:13:79:30:
8e:e5:84:5e:04:55:f7:36:1e:0b:21:99:21:42:af:42:bf:21:
1f:12:86:0a:35:2b:2d:0b:1f:fe:14:05:b9:61:29:33:83:64:
61:a9:50:72
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAR3OMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjA3MTM0MjU1WhcNMjgwMTIxMTM0MjU1WjAYMRYw
FAYDVQQDEw02N2E2MGRlMy0yMDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAn7XINxve3roqJIm6U2kggPKhe7LAEy5fCK1dtWuuVtvjXKFFxff4BekY
Xdl57uxWVp8rzJKiFYeaCU7CnggdCEpmcymoHMFV3l3COUz2jEGyhgzVhvQu8Wcx
pwYD7zDxkMwpQD0MeelCf1hvPfzkr4Opty+6AATpdid5NUACnVCEOqCZ7hxOFLQn
tClo7rPOSPnM4gkVuJbEUf0E9s/oBpII9+Ud/JmrSOAnlWquZsTrQ4WvZCLYCeAo
boLDS0iEOuKQ4m3zHFySu7y3Py6RArE9pgvoRwreJuAeffQ/2alDNGAvO5U1ZY4g
QB8x+UY0PsSMaUHjyE99E77KJ0Q0+QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHEt
J563cAdbliL40ZqxOxEjzTPpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MTQ2MTI3RUU1NTkxMUVGQUEzNURCNDk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcRHMA0GCSqGSIb3DQEBCwUA
A4IBAQBF9KcElXXhhNynjQuEZXAMOj38t3i4ig0VRX5rVzvwI1Ltv11x2QJ5o3FF
0N2vAGUBVDcOwVkE5ReJS8QUcPFD6l8s3awpbdiJe9lP6i07A2VWI52CpFpP9Is0
3jzIKWzAPgAgDtZp0BOa1tTZnrcvy9G1pvFPGk05x8r22L/8DgrfISgb1OE44LNj
t+266ateU2HKglp7JUrKnXvMTmrGbQ0auFX1JPlVYSgL0MP8CjPngQmJ7BwxwU62
0ymfGlq+na1+Ml5L48k6lHmX7ii8Il1Ig9wTeTCO5YReBFX3Nh4LIZkhQq9CvyEf
EoYKNSstCx/+FAW5YSkzg2RhqVBy
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:21 2025 by rpki-client