Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7E3439AF50011EF9184BB81762E951A.roa
File: A7E3439AF50011EF9184BB81762E951A.roa (raw, json)
Hash identifier: Eewi1E1/WyliN40v3Qee5xp1uAK0QuiiqXN2lMQGuzg=
Subject key identifier: EE:14:B3:94:03:CE:E1:CB:06:6F:92:61:A5:A7:53:6A:F7:74:79:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013A2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7E3439AF50011EF9184BB81762E951A.roa
Signing time: Thu 27 Feb 2025 11:47:44 +0000
ROA not before: Thu 27 Feb 2025 11:47:39 +0000
ROA not after: Thu 19 Feb 2026 11:47:39 +0000
asID: 984
IP address blocks: 45.196.121.0/24 maxlen: 24
45.196.122.0/24 maxlen: 24
45.196.123.0/24 maxlen: 24
45.196.124.0/24 maxlen: 24
45.196.125.0/24 maxlen: 24
45.196.126.0/24 maxlen: 24
45.196.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80430 (0x13a2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 11:47:39 2025 GMT
Not After : Feb 19 11:47:39 2026 GMT
Subject: CN=67c050e0-ecd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:b7:de:30:4b:2d:15:c5:e2:2d:93:18:66:
46:dc:0d:96:91:bd:6b:63:8d:cd:c5:16:3a:81:4c:
f0:22:33:47:93:56:5c:6b:2d:92:65:e8:bb:a1:60:
63:2a:9f:52:b5:33:6e:60:a2:ca:81:ab:13:5f:16:
57:62:1d:13:ee:09:1d:49:51:b0:a7:3c:c9:5b:6d:
e3:dc:0d:db:61:91:c2:64:fa:2e:fa:e0:c5:f9:d8:
72:0f:0b:40:2d:59:c2:5c:79:da:97:fc:63:8a:c7:
86:91:00:e7:59:bb:aa:15:70:f0:a1:d1:01:a6:19:
ef:2f:44:f5:94:00:5d:eb:ed:36:35:fa:c4:47:8d:
f1:57:6b:fb:09:e0:4a:05:70:6f:68:f9:f1:66:31:
0c:1e:3d:6e:31:6b:7e:0a:cd:5a:e5:3d:12:17:e4:
f0:de:4f:08:fd:de:5f:f4:16:2a:2c:2c:06:aa:ee:
e9:4c:4c:09:9a:cc:80:b5:2a:23:ec:83:dc:67:fc:
84:8c:db:c3:8a:2e:a5:5d:03:52:60:b4:44:2a:40:
77:ca:d3:a2:56:ba:2a:19:5d:c5:d9:03:7b:12:a5:
1b:3f:5b:03:40:af:50:d3:d1:ff:be:cf:55:7e:69:
5d:d1:66:9a:54:87:2c:f6:dc:f7:f6:5a:65:46:89:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:14:B3:94:03:CE:E1:CB:06:6F:92:61:A5:A7:53:6A:F7:74:79:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7E3439AF50011EF9184BB81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.121.0-45.196.127.255
Signature Algorithm: sha256WithRSAEncryption
34:ad:ac:68:bc:f9:a1:41:46:e0:f8:61:5e:5f:42:ac:b4:08:
01:33:e5:02:1e:f4:83:ac:59:10:76:f3:ec:66:78:91:80:f1:
4b:e6:b5:0a:81:4a:0c:82:f2:a7:7b:9c:f0:d3:ed:2e:b7:78:
25:44:3a:2c:c2:5e:ec:fc:6e:c0:67:ce:74:03:02:fa:d7:88:
21:6f:49:58:b2:c5:34:13:07:3e:29:87:d1:d0:3b:0b:5a:89:
c3:57:73:85:b9:a7:0a:d0:14:75:e7:b7:22:21:26:bd:81:07:
a8:2f:1e:5a:9b:55:61:a2:66:02:b7:76:2d:69:f6:0d:3d:74:
9c:b0:0d:92:0b:78:d1:95:56:89:9a:26:34:75:38:4d:ee:25:
26:55:9f:fa:63:c9:19:ee:15:48:0b:81:69:4b:ac:ad:0c:f6:
b3:d0:72:31:d2:9d:bf:8d:ae:e1:18:fd:66:21:34:a2:b8:af:
66:1d:6b:1f:43:c5:9d:20:4b:64:d6:53:df:dd:0a:29:1f:fe:
d7:3e:c9:05:7a:7f:33:93:fe:9c:47:a8:d8:79:70:b4:c0:94:
f7:fb:46:17:27:df:57:55:28:2e:ed:13:7e:c3:89:cd:a0:2a:
4c:05:fa:55:bd:48:af:05:37:d5:bf:13:a1:4e:70:63:78:1b:
32:ec:d0:6b
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDATouMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI3MTE0NzM5WhcNMjYwMjE5MTE0NzM5WjAYMRYw
FAYDVQQDEw02N2MwNTBlMC1lY2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAywy33jBLLRXF4i2TGGZG3A2Wkb1rY43NxRY6gUzwIjNHk1Zcay2SZei7
oWBjKp9StTNuYKLKgasTXxZXYh0T7gkdSVGwpzzJW23j3A3bYZHCZPou+uDF+dhy
DwtALVnCXHnal/xjiseGkQDnWbuqFXDwodEBphnvL0T1lABd6+02NfrER43xV2v7
CeBKBXBvaPnxZjEMHj1uMWt+Cs1a5T0SF+Tw3k8I/d5f9BYqLCwGqu7pTEwJmsyA
tSoj7IPcZ/yEjNvDii6lXQNSYLREKkB3ytOiVroqGV3F2QN7EqUbP1sDQK9Q09H/
vs9Vfmld0WaaVIcs9tz39lplRonTxwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFO4U
s5QDzuHLBm+SYaWnU2r3dHn2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BN0UzNDM5QUY1MDAxMUVGOTE4NEJCODE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtxHkDBActxAAwDQYJKoZI
hvcNAQELBQADggEBADStrGi8+aFBRuD4YV5fQqy0CAEz5QIe9IOsWRB28+xmeJGA
8UvmtQqBSgyC8qd7nPDT7S63eCVEOizCXuz8bsBnznQDAvrXiCFvSViyxTQTBz4p
h9HQOwtaicNXc4W5pwrQFHXntyIhJr2BB6gvHlqbVWGiZgK3di1p9g09dJywDZIL
eNGVVomaJjR1OE3uJSZVn/pjyRnuFUgLgWlLrK0M9rPQcjHSnb+NruEY/WYhNKK4
r2Ydax9DxZ0gS2TWU9/dCikf/tc+yQV6fzOT/pxHqNh5cLTAlPf7Rhcn31dVKC7t
E37Dic2gKkwF+lW9SK8FN9W/E6FOcGN4GzLs0Gs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:28 2025 by rpki-client