Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8472A6EAFFE011EFBF8DB3A9762E951A.roa
File: 8472A6EAFFE011EFBF8DB3A9762E951A.roa (raw, json)
Hash identifier: dHig++9G0XE3F83PL1oO0BuUbAEzzdhPjVC4uDeYe2s=
Subject key identifier: B8:30:94:95:64:69:6C:50:12:DF:BC:4F:F9:6E:54:F2:05:7F:DA:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014585
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8472A6EAFFE011EFBF8DB3A9762E951A.roa
Signing time: Thu 13 Mar 2025 07:55:23 +0000
ROA not before: Thu 13 Mar 2025 07:55:19 +0000
ROA not after: Sat 19 Apr 2025 07:55:19 +0000
asID: 216183
IP address blocks: 45.204.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83333 (0x14585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 13 07:55:19 2025 GMT
Not After : Apr 19 07:55:19 2025 GMT
Subject: CN=67d28f6b-443f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:2b:ff:cd:f3:29:5d:55:f2:ad:43:a8:bf:
a3:8b:fc:ab:44:85:62:8c:14:cf:e2:91:2e:ad:96:
16:d4:66:8d:e2:df:49:65:f5:c8:c5:d6:3f:91:52:
83:ba:b5:d7:d1:7a:94:c7:a2:9a:64:62:ac:e4:ee:
63:1a:1e:0b:9e:75:21:90:99:f6:24:5c:36:8c:cc:
34:22:cd:b1:97:eb:c7:c9:03:ac:e0:46:d5:1c:00:
01:9e:67:8e:58:42:52:58:80:82:2c:2f:1e:06:0a:
06:39:85:f1:1c:c6:e6:c4:a7:28:a1:63:4a:e1:9a:
b3:f9:3e:74:d4:bd:58:34:b6:ed:27:ff:f1:80:b4:
d1:eb:42:f9:85:a2:e3:d8:1d:26:50:e8:81:5a:9a:
ab:8f:73:e0:1f:bf:2c:4f:54:81:b4:dc:94:c5:f1:
c0:69:76:d1:9d:83:4b:5a:db:e7:90:df:52:73:a2:
17:55:05:a5:e4:e3:62:ff:a7:3e:76:44:ee:ee:f1:
d6:1d:2b:c2:19:61:d6:51:eb:8d:89:5d:aa:dd:08:
93:b3:20:c0:6e:89:73:b3:9f:d6:55:39:1b:0f:65:
5b:50:c2:6d:2e:d4:be:f9:90:90:2a:72:e6:88:51:
c8:31:cb:95:b6:5b:b5:85:15:d9:5f:1e:60:8a:fc:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:30:94:95:64:69:6C:50:12:DF:BC:4F:F9:6E:54:F2:05:7F:DA:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8472A6EAFFE011EFBF8DB3A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.138.0/23
Signature Algorithm: sha256WithRSAEncryption
22:43:6e:ef:7c:6b:09:a8:49:7c:6e:60:ec:08:6b:66:5b:de:
26:38:dc:c3:f9:10:84:ac:cc:ef:46:ae:41:48:5d:b5:33:ba:
66:36:a4:f0:69:4d:00:2b:36:88:7f:34:04:1b:32:8f:77:4a:
5a:89:ae:a4:93:46:95:a3:6d:e0:7e:1f:42:a7:33:56:86:01:
db:e4:e2:32:0c:8e:c4:18:ba:22:69:4d:b4:17:4a:03:3f:49:
94:61:4a:fd:dc:90:76:96:07:7a:d7:d3:a4:2f:9c:32:45:cc:
e1:a8:d9:12:31:91:9b:c6:7f:cc:51:a6:fd:b9:5d:9c:73:57:
89:be:b8:c5:f6:76:1b:7a:c3:4d:67:36:47:22:84:fc:07:80:
b3:a7:ad:b2:2e:0b:45:60:76:59:17:58:9b:88:6b:8f:5e:cf:
cf:27:3e:97:a1:9b:70:87:b8:3e:a0:d2:77:35:9c:86:9a:a1:
6f:68:76:7e:1c:73:aa:41:d7:22:03:be:7f:90:19:df:8e:1c:
69:85:58:3d:c6:dc:83:bf:f6:e0:52:75:3e:22:d7:ac:1a:5b:
2f:62:0f:05:37:d8:be:43:25:f0:87:e8:ff:39:a7:ec:65:99:
26:e5:e0:48:20:d9:d2:d8:47:61:8e:8c:7a:ea:4a:1e:98:06:
23:5a:4d:78
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUWFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzEzMDc1NTE5WhcNMjUwNDE5MDc1NTE5WjAYMRYw
FAYDVQQDEw02N2QyOGY2Yi00NDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxt4r/83zKV1V8q1DqL+ji/yrRIVijBTP4pEurZYW1GaN4t9JZfXIxdY/
kVKDurXX0XqUx6KaZGKs5O5jGh4LnnUhkJn2JFw2jMw0Is2xl+vHyQOs4EbVHAAB
nmeOWEJSWICCLC8eBgoGOYXxHMbmxKcooWNK4Zqz+T501L1YNLbtJ//xgLTR60L5
haLj2B0mUOiBWpqrj3PgH78sT1SBtNyUxfHAaXbRnYNLWtvnkN9Sc6IXVQWl5ONi
/6c+dkTu7vHWHSvCGWHWUeuNiV2q3QiTsyDAbolzs5/WVTkbD2VbUMJtLtS++ZCQ
KnLmiFHIMcuVtlu1hRXZXx5givzSaQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLgw
lJVkaWxQEt+8T/luVPIFf9rgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NDcyQTZFQUZGRTAxMUVGQkY4REIzQTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcyKMA0GCSqGSIb3DQEBCwUA
A4IBAQAiQ27vfGsJqEl8bmDsCGtmW94mONzD+RCErMzvRq5BSF21M7pmNqTwaU0A
KzaIfzQEGzKPd0paia6kk0aVo23gfh9CpzNWhgHb5OIyDI7EGLoiaU20F0oDP0mU
YUr93JB2lgd619OkL5wyRczhqNkSMZGbxn/MUab9uV2cc1eJvrjF9nYbesNNZzZH
IoT8B4Czp62yLgtFYHZZF1ibiGuPXs/PJz6XoZtwh7g+oNJ3NZyGmqFvaHZ+HHOq
QdciA75/kBnfjhxphVg9xtyDv/bgUnU+ItesGlsvYg8FN9i+QyXwh+j/OafsZZkm
5eBIINnS2Edhjox66koemAYjWk14
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:32 2025 by rpki-client