Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9424FC8EFFE311EF8E05FBBC762E951A.roa
File: 9424FC8EFFE311EF8E05FBBC762E951A.roa (raw, json)
Hash identifier: adz3qg8rCGNxHwccsuZ19f4WwHrBoV8+M3da+nP5UDQ=
Subject key identifier: BB:CF:C0:8E:FE:8C:6F:50:75:43:99:70:41:B5:03:AC:7C:96:A8:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014598
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9424FC8EFFE311EF8E05FBBC762E951A.roa
Signing time: Thu 13 Mar 2025 08:17:18 +0000
ROA not before: Thu 13 Mar 2025 08:17:14 +0000
ROA not after: Sat 19 Apr 2025 08:17:14 +0000
asID: 202736
IP address blocks: 45.207.21.0/24 maxlen: 24
45.207.42.0/24 maxlen: 24
45.207.46.0/24 maxlen: 24
45.207.57.0/24 maxlen: 24
45.207.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83352 (0x14598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 13 08:17:14 2025 GMT
Not After : Apr 19 08:17:14 2025 GMT
Subject: CN=67d2948e-1069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4d:aa:35:7e:38:5e:64:ab:b8:2c:78:99:44:
1b:05:98:54:68:66:a8:17:ff:55:d7:8f:23:ba:05:
4c:2b:16:7d:78:47:e6:b6:db:36:a9:14:06:da:2a:
21:6c:58:7b:e4:86:03:36:8a:91:2f:61:1a:5b:3d:
7d:34:86:9a:f8:66:ed:c4:d4:5f:f7:a7:b6:e2:83:
71:1f:57:f9:49:f4:e1:9c:83:1c:0d:c1:a9:08:d4:
92:28:66:cd:d6:49:f0:86:fd:b6:03:1d:4d:fd:1b:
75:bf:13:a5:54:5e:81:92:78:3f:bb:24:3a:e8:8f:
ea:d1:23:ba:21:30:58:31:b9:c3:0d:ba:19:f0:28:
ed:a1:43:9d:5b:7e:e6:81:e2:d5:14:95:73:2f:1f:
c2:da:3c:ea:08:b3:85:70:44:8b:2b:a7:0e:2f:d3:
0f:8b:6c:07:79:86:25:1d:8d:6f:ee:c4:60:70:54:
f5:08:d4:48:fc:6d:5d:f6:4f:a9:7e:4f:51:0f:27:
a1:0b:c9:5c:5c:86:32:25:96:09:9d:02:10:7d:d4:
74:86:cd:a2:4c:b3:f6:52:0d:d5:12:b9:2e:cf:f0:
24:cc:15:f5:48:bd:96:65:14:2b:99:0c:8e:47:50:
4b:30:91:db:da:18:d1:e0:ee:17:03:38:6b:be:88:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CF:C0:8E:FE:8C:6F:50:75:43:99:70:41:B5:03:AC:7C:96:A8:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9424FC8EFFE311EF8E05FBBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.21.0/24
45.207.42.0/24
45.207.46.0/24
45.207.57.0/24
45.207.171.0/24
Signature Algorithm: sha256WithRSAEncryption
94:84:b2:28:79:30:ba:92:2e:db:88:fa:8b:a9:38:7a:53:58:
a5:9f:85:4b:55:b4:cb:92:c4:13:f6:31:ae:07:47:1e:16:ae:
3b:6b:3e:8e:07:13:f3:ec:64:ea:0e:d6:b1:ba:44:56:b6:f0:
94:a5:54:e1:e8:09:88:e5:e0:90:66:58:91:68:59:65:3c:44:
61:24:32:bd:22:f6:b7:32:d9:5f:e6:82:22:80:dc:97:87:ca:
4a:a1:41:75:3b:02:f8:5d:50:2c:7b:0f:d8:3d:48:bd:cf:89:
03:5b:05:cc:3a:69:de:b8:56:a4:57:f4:42:73:dc:d2:2c:08:
6c:99:2f:8c:12:d9:bf:67:64:0c:36:3d:4c:4a:95:27:01:a7:
60:d4:1d:cc:13:fc:78:8b:9e:21:a8:ea:f4:3d:a9:1c:3f:fe:
dc:73:ba:5a:99:55:c9:d7:6d:52:35:35:84:a1:46:04:50:aa:
6f:3c:b8:5f:90:a5:93:75:e0:c5:03:2e:63:7a:e8:72:85:38:
6c:95:7b:d9:70:c2:5b:f7:c5:81:40:0b:2b:54:77:4a:f8:de:
3a:d9:a6:19:24:ae:d5:f1:ab:c2:d5:ca:98:63:67:10:77:f3:
2c:12:c7:bc:c3:4d:06:0f:03:c6:3d:9c:3b:15:e7:cf:56:12:
e3:25:37:14
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIDAUWYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzEzMDgxNzE0WhcNMjUwNDE5MDgxNzE0WjAYMRYw
FAYDVQQDEw02N2QyOTQ4ZS0xMDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA202qNX44XmSruCx4mUQbBZhUaGaoF/9V148jugVMKxZ9eEfmtts2qRQG
2iohbFh75IYDNoqRL2EaWz19NIaa+GbtxNRf96e24oNxH1f5SfThnIMcDcGpCNSS
KGbN1knwhv22Ax1N/Rt1vxOlVF6Bkng/uyQ66I/q0SO6ITBYMbnDDboZ8CjtoUOd
W37mgeLVFJVzLx/C2jzqCLOFcESLK6cOL9MPi2wHeYYlHY1v7sRgcFT1CNRI/G1d
9k+pfk9RDyehC8lcXIYyJZYJnQIQfdR0hs2iTLP2Ug3VErkuz/AkzBX1SL2WZRQr
mQyOR1BLMJHb2hjR4O4XAzhrvogb8wIDAQABo4ICujCCArYwHQYDVR0OBBYEFLvP
wI7+jG9QdUOZcEG1A6x8lqikMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NDI0RkM4RUZGRTMxMUVGOEUwNUZCQkM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALc8VAwQALc8qAwQALc8uAwQA
Lc85AwQALc+rMA0GCSqGSIb3DQEBCwUAA4IBAQCUhLIoeTC6ki7biPqLqTh6U1il
n4VLVbTLksQT9jGuB0ceFq47az6OBxPz7GTqDtaxukRWtvCUpVTh6AmI5eCQZliR
aFllPERhJDK9Iva3Mtlf5oIigNyXh8pKoUF1OwL4XVAsew/YPUi9z4kDWwXMOmne
uFakV/RCc9zSLAhsmS+MEtm/Z2QMNj1MSpUnAadg1B3ME/x4i54hqOr0PakcP/7c
c7pamVXJ121SNTWEoUYEUKpvPLhfkKWTdeDFAy5jeuhyhThslXvZcMJb98WBQAsr
VHdK+N462aYZJK7V8avC1cqYY2cQd/MsEse8w00GDwPGPZw7FefPVhLjJTcU
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:38 2025 by rpki-client