Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E52266AF38611EFB369FF46762E951A.roa
File: 8E52266AF38611EFB369FF46762E951A.roa (raw, json)
Hash identifier: 3qToHyrMDPtQz2VEbXNICBUUVwT8Pug2BBnD1QiUTUo=
Subject key identifier: 48:95:21:32:53:17:6F:31:F8:D1:8A:3A:7A:C0:59:3C:77:22:BE:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E34
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E52266AF38611EFB369FF46762E951A.roa
Signing time: Tue 25 Feb 2025 14:41:11 +0000
ROA not before: Tue 25 Feb 2025 14:41:07 +0000
ROA not after: Wed 09 Apr 2025 14:41:07 +0000
asID: 63139
IP address blocks: 45.197.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77364 (0x12e34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 14:41:07 2025 GMT
Not After : Apr 9 14:41:07 2025 GMT
Subject: CN=67bdd687-a02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c5:36:12:7a:8e:0b:e6:12:e6:8c:4f:1b:68:
47:e8:62:27:f8:3a:21:41:09:f3:09:9b:2c:de:c0:
72:31:57:d7:58:96:61:21:4d:1f:d8:36:de:b1:97:
0b:f8:df:ec:c6:01:7c:69:8d:ce:51:62:39:24:5c:
9c:69:54:ca:44:9f:2d:c3:65:0f:d2:e0:a0:64:88:
45:ab:94:18:d3:98:77:b5:1a:18:23:f6:b7:1c:65:
d1:c9:84:57:ad:f0:26:82:f2:f0:0c:20:14:17:89:
96:88:e5:cf:28:00:b8:39:57:00:98:54:1f:80:b2:
b7:0c:19:90:ba:d3:81:92:01:38:e0:bb:1e:ff:8b:
79:14:1e:95:a3:cb:60:06:55:89:12:c7:9d:c4:8b:
7c:fb:4d:4d:23:1d:df:3e:df:39:e8:2b:af:28:2f:
a7:49:cc:a2:8f:a0:17:11:ca:4b:d4:74:e7:e2:77:
a6:11:f7:4d:6d:1b:e6:e1:05:7a:bb:b7:1d:8d:2e:
9d:99:e6:16:f2:59:a9:43:ad:cc:ce:24:48:26:1a:
4a:fa:91:e0:08:77:68:c2:93:04:7a:b6:ba:4f:67:
45:f0:cd:01:3e:b6:18:f8:1c:00:68:df:a2:2b:1b:
3a:dc:7c:d6:9e:b7:44:c7:2d:24:ac:2b:cf:0d:1d:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:95:21:32:53:17:6F:31:F8:D1:8A:3A:7A:C0:59:3C:77:22:BE:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E52266AF38611EFB369FF46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.87.0/24
Signature Algorithm: sha256WithRSAEncryption
82:75:c3:0a:ef:76:93:c0:8d:60:a9:a4:d3:a3:1c:f3:9f:61:
ac:33:be:57:be:8b:36:c5:08:dd:15:33:a7:bc:a1:00:b9:da:
67:b1:cf:db:e1:a3:d8:dc:f0:82:c9:9b:09:9a:59:4c:b6:dd:
8c:a7:c9:51:5b:2a:eb:b0:e2:84:b8:95:9a:4a:c6:2b:1c:fd:
e5:37:8a:29:58:63:90:f4:26:c1:02:d3:05:4b:97:37:cc:30:
68:f6:48:37:28:83:4b:d1:d6:4b:2f:9a:23:00:45:1d:79:8d:
83:43:cd:23:76:12:52:bd:1c:73:0c:6c:62:62:21:7f:00:e0:
cc:9d:82:43:ea:70:75:54:9c:8b:9d:f5:59:99:f9:68:73:28:
f3:b5:e1:64:3c:d4:c2:63:40:0e:59:0d:97:a9:2d:12:56:1c:
3c:70:da:3d:c7:cf:cb:3c:09:dc:6a:36:50:1b:ab:cd:17:d9:
37:6b:d2:20:a2:70:8b:fd:cd:f0:60:85:97:a4:45:d3:a7:aa:
bc:11:8b:2e:c5:43:74:7e:43:43:40:72:0f:93:6f:fe:23:b1:
6d:b4:00:44:78:43:f9:89:bd:b9:0c:9f:f5:68:ae:5f:44:5d:
7a:d7:36:3e:36:b2:0d:93:10:7f:2f:2a:a3:cc:40:7c:58:f7:
7f:dd:9f:09
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS40MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MTQ0MTA3WhcNMjUwNDA5MTQ0MTA3WjAYMRYw
FAYDVQQDEw02N2JkZDY4Ny1hMDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA78U2EnqOC+YS5oxPG2hH6GIn+DohQQnzCZss3sByMVfXWJZhIU0f2Dbe
sZcL+N/sxgF8aY3OUWI5JFycaVTKRJ8tw2UP0uCgZIhFq5QY05h3tRoYI/a3HGXR
yYRXrfAmgvLwDCAUF4mWiOXPKAC4OVcAmFQfgLK3DBmQutOBkgE44Lse/4t5FB6V
o8tgBlWJEsedxIt8+01NIx3fPt856CuvKC+nScyij6AXEcpL1HTn4nemEfdNbRvm
4QV6u7cdjS6dmeYW8lmpQ63MziRIJhpK+pHgCHdowpMEera6T2dF8M0BPrYY+BwA
aN+iKxs63HzWnrdExy0krCvPDR0N/wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEiV
ITJTF28x+NGKOnrAWTx3Ir4yMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RTUyMjY2QUYzODYxMUVGQjM2OUZGNDY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcVXMA0GCSqGSIb3DQEBCwUA
A4IBAQCCdcMK73aTwI1gqaTToxzzn2GsM75Xvos2xQjdFTOnvKEAudpnsc/b4aPY
3PCCyZsJmllMtt2Mp8lRWyrrsOKEuJWaSsYrHP3lN4opWGOQ9CbBAtMFS5c3zDBo
9kg3KINL0dZLL5ojAEUdeY2DQ80jdhJSvRxzDGxiYiF/AODMnYJD6nB1VJyLnfVZ
mflocyjzteFkPNTCY0AOWQ2XqS0SVhw8cNo9x8/LPAncajZQG6vNF9k3a9IgonCL
/c3wYIWXpEXTp6q8EYsuxUN0fkNDQHIPk2/+I7FttABEeEP5ib25DJ/1aK5fRF16
1zY+NrINkxB/LyqjzEB8WPd/3Z8J
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:33 2025 by rpki-client