Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A8EEFBCF49F11EF9393F258762E951A.roa
File: 8A8EEFBCF49F11EF9393F258762E951A.roa (raw, json)
Hash identifier: Q3SOvtHfLgPrQqEV6bYEz8ACDbwrr+o6EI+PjRiG6Wo=
Subject key identifier: 7B:FE:A3:4F:8E:5C:A4:DC:41:B2:CD:04:4E:A3:DC:3E:8B:DB:45:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01385C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A8EEFBCF49F11EF9393F258762E951A.roa
Signing time: Thu 27 Feb 2025 00:12:33 +0000
ROA not before: Thu 27 Feb 2025 00:00:29 +0000
ROA not after: Thu 19 Feb 2026 00:00:29 +0000
asID: 984
IP address blocks: 45.201.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79964 (0x1385c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:29 2025 GMT
Not After : Feb 19 00:00:29 2026 GMT
Subject: CN=67bfadf1-cce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:c2:cb:d8:44:d7:e3:ba:56:1d:87:41:5c:
bc:36:d9:42:d0:16:f4:19:84:af:b8:5a:97:03:fc:
ce:22:52:60:64:44:41:5e:b3:f4:a7:cb:1a:ee:26:
29:05:69:ad:51:75:5b:d3:c9:67:a6:49:da:ac:1d:
bc:fe:6b:b9:20:c5:5f:60:33:af:7f:0e:59:49:fc:
46:a0:27:bf:3e:f0:06:90:cf:39:4b:ea:52:23:60:
a7:e6:08:d6:a6:44:23:5a:d6:18:9e:fa:37:72:87:
00:84:1c:de:0d:7f:31:17:77:9d:dd:9d:90:a3:be:
d1:95:7a:26:d9:71:e8:d5:ca:e9:21:25:61:1f:cc:
27:c3:80:dc:fa:6f:f0:e0:d7:45:ca:c0:55:d2:47:
7e:f3:38:15:46:1a:ef:83:a1:d8:3e:6b:7b:4f:d6:
8d:e0:77:f7:b7:03:83:ab:f8:d5:9e:86:a3:df:38:
18:aa:ef:86:d1:b9:a8:cb:2f:48:8a:3c:94:39:f9:
dc:3c:53:10:17:00:c3:81:f4:e4:e6:f3:fa:db:17:
4b:21:2f:f6:a5:55:2d:3e:29:48:58:ae:e3:c1:a9:
23:df:3f:1d:51:07:80:f3:fa:1e:ba:27:a0:57:79:
b4:9d:38:ec:d4:4f:35:0c:ca:bb:3b:38:3b:1b:33:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FE:A3:4F:8E:5C:A4:DC:41:B2:CD:04:4E:A3:DC:3E:8B:DB:45:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A8EEFBCF49F11EF9393F258762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.122.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ba:b6:fb:23:3c:c0:86:b3:1c:12:20:6e:ef:be:7a:47:94:
5d:b7:6d:0c:28:97:78:b7:ae:af:97:f2:9f:70:3e:09:34:fc:
ea:a0:6d:ef:e6:53:2f:7f:bc:cc:6c:4b:20:8a:a4:90:5b:59:
e8:8b:7f:fc:2b:d5:cb:57:56:72:68:8e:de:ff:9e:a7:84:2f:
e0:7f:f7:70:2b:05:2f:7a:c4:8a:c3:54:02:73:2d:c2:14:fb:
99:8a:e9:ba:c2:3c:54:e5:8c:06:29:57:b2:18:89:e3:5b:db:
ef:dd:ff:89:4e:47:06:1e:3d:af:26:49:ee:da:40:a2:40:29:
45:19:af:de:33:39:ac:4b:97:11:1f:67:39:c4:06:cd:36:91:
90:7a:50:70:51:28:ce:b9:77:eb:ad:9b:56:5b:03:0a:64:f6:
07:ab:cf:9e:02:12:82:b8:d3:d9:c2:20:71:26:2d:a7:bf:45:
09:ce:9e:3a:f4:d5:01:f7:3c:b5:8e:cc:f9:3a:19:e6:ec:40:
f6:90:dd:cc:c2:ed:94:f7:08:27:bc:8b:88:7f:54:10:e9:6c:
ad:54:25:d6:e5:af:f7:cd:0f:bc:99:5f:a7:0e:6f:df:b4:d7:
33:d6:02:2a:68:77:f1:81:b1:27:31:b1:c1:f6:4c:f1:8b:8e:
51:3c:4b:e1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAThcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI3MDAwMDI5WhcNMjYwMjE5MDAwMDI5WjAYMRYw
FAYDVQQDEw02N2JmYWRmMS1jY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArlrCy9hE1+O6Vh2HQVy8NtlC0Bb0GYSvuFqXA/zOIlJgZERBXrP0p8sa
7iYpBWmtUXVb08lnpknarB28/mu5IMVfYDOvfw5ZSfxGoCe/PvAGkM85S+pSI2Cn
5gjWpkQjWtYYnvo3cocAhBzeDX8xF3ed3Z2Qo77RlXom2XHo1crpISVhH8wnw4Dc
+m/w4NdFysBV0kd+8zgVRhrvg6HYPmt7T9aN4Hf3twODq/jVnoaj3zgYqu+G0bmo
yy9IijyUOfncPFMQFwDDgfTk5vP62xdLIS/2pVUtPilIWK7jwakj3z8dUQeA8/oe
uiegV3m0nTjs1E81DMq7Ozg7GzMd6wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHv+
o0+OXKTcQbLNBE6j3D6L20VYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QThFRUZCQ0Y0OUYxMUVGOTM5M0YyNTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcl6MA0GCSqGSIb3DQEBCwUA
A4IBAQBJurb7IzzAhrMcEiBu7756R5Rdt20MKJd4t66vl/KfcD4JNPzqoG3v5lMv
f7zMbEsgiqSQW1noi3/8K9XLV1ZyaI7e/56nhC/gf/dwKwUvesSKw1QCcy3CFPuZ
ium6wjxU5YwGKVeyGInjW9vv3f+JTkcGHj2vJknu2kCiQClFGa/eMzmsS5cRH2c5
xAbNNpGQelBwUSjOuXfrrZtWWwMKZPYHq8+eAhKCuNPZwiBxJi2nv0UJzp469NUB
9zy1jsz5Ohnm7ED2kN3Mwu2U9wgnvIuIf1QQ6WytVCXW5a/3zQ+8mV+nDm/ftNcz
1gIqaHfxgbEnMbHB9kzxi45RPEvh
-----END CERTIFICATE-----
Generated at Fri Apr 11 03:13:06 2025 by rpki-client