Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73C65B76EC8E11EF8C7F23AA762E951A.roa
File: 73C65B76EC8E11EF8C7F23AA762E951A.roa (raw, json)
Hash identifier: mFA17SmrjJZNx1FzUKDAGUL90xhe0EnSyu5YdDfOOkI=
Subject key identifier: 0E:F8:F7:9E:77:10:5E:8E:F1:09:24:D2:40:B5:38:5F:79:B5:A8:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01245C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73C65B76EC8E11EF8C7F23AA762E951A.roa
Signing time: Sun 16 Feb 2025 17:50:05 +0000
ROA not before: Sun 16 Feb 2025 17:50:00 +0000
ROA not after: Wed 21 Jan 2026 17:50:00 +0000
asID: 984
IP address blocks: 45.195.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74844 (0x1245c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 16 17:50:00 2025 GMT
Not After : Jan 21 17:50:00 2026 GMT
Subject: CN=67b2254c-6c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:89:4f:15:f6:69:e2:25:31:a0:9f:32:8e:
65:3a:85:64:3e:f3:ee:64:1c:57:65:52:3d:8c:6f:
5f:d8:85:50:b6:e2:20:71:47:7d:aa:5a:b5:8c:9a:
aa:10:15:75:a8:67:af:7a:52:3f:94:d4:41:4e:3d:
3e:b1:60:a6:98:56:6b:ba:e9:65:60:df:89:a2:7a:
e5:cf:60:da:e3:b7:6c:e7:37:cb:c5:c0:aa:8b:8c:
e4:c2:f2:d1:c8:36:2e:90:a5:0d:55:e7:d5:19:fa:
f4:69:96:28:47:33:80:bd:cc:73:ce:8e:ae:4b:ad:
74:0b:79:14:b9:d7:25:31:ce:60:56:2e:fe:87:54:
8b:43:a5:b6:79:0a:59:44:e8:3c:27:d6:62:a4:8b:
49:ef:f7:b1:2f:7d:34:d1:9f:bb:b2:f0:72:fb:b2:
98:75:fd:ad:16:d8:63:87:68:1e:9a:cb:f9:09:2c:
84:cd:2d:a6:b4:d0:ba:19:9a:d1:d6:90:98:35:12:
93:f3:86:38:98:c1:88:81:5c:13:08:ae:c9:15:bd:
f3:13:94:7a:a6:eb:51:7a:69:f4:7d:60:08:fc:13:
ff:30:a9:81:7d:54:e0:c1:d6:fd:7d:9d:02:fd:2e:
a1:ac:dc:3d:07:ae:12:d8:07:0d:5c:3a:c5:f5:0d:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F8:F7:9E:77:10:5E:8E:F1:09:24:D2:40:B5:38:5F:79:B5:A8:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73C65B76EC8E11EF8C7F23AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.202.0/24
Signature Algorithm: sha256WithRSAEncryption
57:17:5b:19:ce:ef:08:da:03:97:65:aa:0e:6e:02:11:cd:3b:
cd:c6:e2:25:c6:16:14:40:66:28:70:b3:a7:d3:1f:ef:73:60:
65:87:7e:96:ec:73:4a:d8:c8:27:ae:ee:ae:01:ea:3a:17:4c:
38:95:42:0b:53:43:f9:97:a5:02:78:12:75:7a:0c:c0:52:3e:
3b:5f:32:38:cd:11:ec:9b:0e:0f:9b:17:53:f0:2b:7d:ba:9c:
4d:8e:11:17:d5:d0:62:c7:f2:1b:cf:2e:7e:da:a2:cb:37:24:
b3:04:5f:fb:c4:2a:1e:99:bf:29:c0:0d:e2:47:99:91:ea:b7:
05:21:d1:7d:f8:00:dd:70:a5:60:68:33:12:d1:d9:ee:3a:4e:
af:06:59:da:c7:d6:f0:3d:be:8d:9d:8e:c4:68:24:6f:c8:2f:
41:42:31:74:94:ab:46:26:f2:c9:c8:7e:e1:30:e4:d0:1e:f7:
e8:e2:12:09:e0:3c:59:87:ab:ab:d9:07:75:c4:f9:23:e1:bc:
e2:98:92:1c:82:f5:ae:8b:da:c2:58:1e:74:22:20:3a:e4:66:
1c:5e:54:41:20:22:64:70:09:60:f7:34:64:e5:5b:c5:da:03:
fd:5d:2c:e9:89:a6:46:90:44:47:23:0d:51:3f:4d:cf:1a:41:
21:97:15:47
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASRcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjE2MTc1MDAwWhcNMjYwMTIxMTc1MDAwWjAYMRYw
FAYDVQQDEw02N2IyMjU0Yy02YzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuISJTxX2aeIlMaCfMo5lOoVkPvPuZBxXZVI9jG9f2IVQtuIgcUd9qlq1
jJqqEBV1qGevelI/lNRBTj0+sWCmmFZruullYN+Jonrlz2Da47ds5zfLxcCqi4zk
wvLRyDYukKUNVefVGfr0aZYoRzOAvcxzzo6uS610C3kUudclMc5gVi7+h1SLQ6W2
eQpZROg8J9ZipItJ7/exL3000Z+7svBy+7KYdf2tFthjh2gemsv5CSyEzS2mtNC6
GZrR1pCYNRKT84Y4mMGIgVwTCK7JFb3zE5R6putRemn0fWAI/BP/MKmBfVTgwdb9
fZ0C/S6hrNw9B64S2AcNXDrF9Q3IhwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA74
9553EF6O8Qkk0kC1OF95tahEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83M0M2NUI3NkVDOEUxMUVGOEM3RjIzQUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcPKMA0GCSqGSIb3DQEBCwUA
A4IBAQBXF1sZzu8I2gOXZaoObgIRzTvNxuIlxhYUQGYocLOn0x/vc2Blh36W7HNK
2Mgnru6uAeo6F0w4lUILU0P5l6UCeBJ1egzAUj47XzI4zRHsmw4PmxdT8Ct9upxN
jhEX1dBix/Ibzy5+2qLLNySzBF/7xCoemb8pwA3iR5mR6rcFIdF9+ADdcKVgaDMS
0dnuOk6vBlnax9bwPb6NnY7EaCRvyC9BQjF0lKtGJvLJyH7hMOTQHvfo4hIJ4DxZ
h6ur2Qd1xPkj4bzimJIcgvWui9rCWB50IiA65GYcXlRBICJkcAlg9zRk5VvF2gP9
XSzpiaZGkERHIw1RP03PGkEhlxVH
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:00 2025 by rpki-client