Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4E5F9B4FF3A11EFB59A3C7C762E951A.roa
File: A4E5F9B4FF3A11EFB59A3C7C762E951A.roa (raw, json)
Hash identifier: fzjCXpie2jtUJzJqPuJU3/lTPiJoQbJDxqUmb9JY+VM=
Subject key identifier: 4F:17:21:51:AA:7C:9C:C1:BA:C9:3C:38:53:75:78:A1:6B:ED:74:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01456B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4E5F9B4FF3A11EFB59A3C7C762E951A.roa
Signing time: Wed 12 Mar 2025 12:08:01 +0000
ROA not before: Wed 12 Mar 2025 12:07:58 +0000
ROA not after: Wed 30 Apr 2025 12:07:58 +0000
asID: 398443
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83307 (0x1456b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 12:07:58 2025 GMT
Not After : Apr 30 12:07:58 2025 GMT
Subject: CN=67d17921-6013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:ad:b5:8e:0c:da:ff:6c:91:95:e1:ca:ab:
eb:6c:54:74:29:85:f8:40:f7:64:0a:9e:be:c3:e3:
6b:eb:17:94:d7:5a:50:08:ae:02:d8:48:70:4a:3c:
65:01:e7:f9:04:53:db:e3:ea:21:7e:ca:8d:69:9a:
3d:62:56:3f:27:e8:ad:3c:6c:6d:ad:37:00:66:b6:
9f:45:85:31:f3:e5:1d:f0:7d:7c:2d:12:c3:91:d5:
bc:67:2e:02:8a:2a:6d:f1:d5:39:c0:fb:5c:9c:cb:
67:e0:ad:53:53:de:99:1b:f1:e8:2a:8f:3e:1e:8c:
04:bc:32:c5:82:92:9e:bb:9e:a0:78:41:22:c9:54:
67:a8:94:02:92:04:99:0e:2a:b0:98:6b:f9:4a:02:
84:01:5c:9f:af:80:45:ce:f0:32:ac:b7:8e:06:99:
38:ab:46:b2:da:8b:c8:ce:05:d1:79:e6:5b:d3:d5:
80:72:27:5c:e9:61:d0:3a:66:67:3b:55:ed:0d:1e:
a9:26:ee:39:0a:18:47:8f:09:4d:6c:98:9f:4b:76:
6b:db:08:88:3d:1d:22:a3:ee:34:86:de:14:44:59:
54:56:6d:4d:98:be:01:40:05:34:23:34:cc:c4:f5:
bd:1a:33:5a:f1:13:1f:fc:55:75:5b:78:94:cb:cd:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:17:21:51:AA:7C:9C:C1:BA:C9:3C:38:53:75:78:A1:6B:ED:74:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4E5F9B4FF3A11EFB59A3C7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
23:65:3f:5c:04:2f:94:85:98:a5:e7:87:29:83:3b:65:e6:5b:
a5:f5:5c:a5:4d:0b:d5:e7:d0:b9:6a:21:a1:98:e9:1c:3b:03:
2c:37:9c:73:4c:47:9a:5d:89:52:b1:9f:59:68:98:f9:c8:2c:
cc:5f:43:10:6d:b0:ba:43:bd:eb:12:70:5d:fb:b6:90:34:7c:
59:d3:c1:02:d6:5f:27:f4:6d:de:ae:8f:d7:46:ee:00:04:32:
f6:d3:57:88:b3:83:85:11:28:88:93:7a:b0:fa:2d:66:64:26:
6c:81:35:0d:cd:2c:84:15:29:b9:e8:84:e6:1c:1c:8f:8e:bd:
4b:dc:81:c2:b5:a4:21:48:07:e1:3a:7f:9d:8f:f5:2e:3a:6f:
3f:b0:f5:3c:91:55:3e:cd:6d:23:63:a6:ef:0e:1c:e9:2f:5f:
aa:06:ea:39:51:2f:8c:4d:33:90:3f:4c:0f:c3:6a:1d:b2:0e:
49:a2:5a:de:a2:2b:f5:13:0d:c4:e5:19:f6:e6:38:9d:3e:ce:
cb:af:53:5d:11:49:20:d8:ec:ed:b6:f0:10:07:5c:3c:f7:11:
90:59:8b:0d:08:6a:34:be:c5:58:44:e5:c9:1b:fc:40:a2:9d:
26:99:69:16:c5:e9:97:21:f6:c7:66:cf:3f:1f:d1:20:6f:9d:
9d:2e:a7:ca
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUVrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzEyMTIwNzU4WhcNMjUwNDMwMTIwNzU4WjAYMRYw
FAYDVQQDEw02N2QxNzkyMS02MDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAolOttY4M2v9skZXhyqvrbFR0KYX4QPdkCp6+w+Nr6xeU11pQCK4C2Ehw
SjxlAef5BFPb4+ohfsqNaZo9YlY/J+itPGxtrTcAZrafRYUx8+Ud8H18LRLDkdW8
Zy4Ciipt8dU5wPtcnMtn4K1TU96ZG/HoKo8+HowEvDLFgpKeu56geEEiyVRnqJQC
kgSZDiqwmGv5SgKEAVyfr4BFzvAyrLeOBpk4q0ay2ovIzgXReeZb09WAcidc6WHQ
OmZnO1XtDR6pJu45ChhHjwlNbJifS3Zr2wiIPR0io+40ht4URFlUVm1NmL4BQAU0
IzTMxPW9GjNa8RMf/FV1W3iUy80fwwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFE8X
IVGqfJzBusk8OFN1eKFr7XQTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNEU1RjlCNEZGM0ExMUVGQjU5QTNDN0M3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcDAMA0GCSqGSIb3DQEBCwUA
A4IBAQAjZT9cBC+UhZil54cpgztl5lul9VylTQvV59C5aiGhmOkcOwMsN5xzTEea
XYlSsZ9ZaJj5yCzMX0MQbbC6Q73rEnBd+7aQNHxZ08EC1l8n9G3ero/XRu4ABDL2
01eIs4OFESiIk3qw+i1mZCZsgTUNzSyEFSm56ITmHByPjr1L3IHCtaQhSAfhOn+d
j/UuOm8/sPU8kVU+zW0jY6bvDhzpL1+qBuo5US+MTTOQP0wPw2odsg5Jolreoiv1
Ew3E5Rn25jidPs7Lr1NdEUkg2OzttvAQB1w89xGQWYsNCGo0vsVYROXJG/xAop0m
mWkWxemXIfbHZs8/H9Egb52dLqfK
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:24 2025 by rpki-client