Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B19BA218057E11F0A6F9FD50762E951A.roa
File: B19BA218057E11F0A6F9FD50762E951A.roa (raw, json)
Hash identifier: sWuF9b7es95dHoSoC8fZDTmRfxufKazCmCSPp7+VC7M=
Subject key identifier: CA:37:77:5E:DC:B0:2C:17:FB:74:2A:67:20:D7:2D:AE:E7:E5:FB:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01472E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B19BA218057E11F0A6F9FD50762E951A.roa
Signing time: Thu 20 Mar 2025 11:30:15 +0000
ROA not before: Thu 20 Mar 2025 11:30:11 +0000
ROA not after: Sat 26 Apr 2025 11:30:11 +0000
asID: 174
IP address blocks: 45.202.111.0/24 maxlen: 24
45.202.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83758 (0x1472e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 11:30:11 2025 GMT
Not After : Apr 26 11:30:11 2025 GMT
Subject: CN=67dbfc47-468f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:c7:31:1e:85:e4:93:93:43:d0:c0:f3:bc:
d6:70:0b:ef:10:6e:8a:04:ce:cc:e7:6b:74:39:ff:
d2:58:44:05:fd:f2:45:14:8d:bd:fd:60:85:04:12:
19:60:02:59:ce:02:08:d5:a6:52:30:df:4f:15:58:
bd:8f:00:3f:df:43:b1:39:20:62:4f:2e:5b:a3:2d:
42:56:2a:21:0b:f7:2e:79:59:9e:3d:6d:08:66:01:
8a:9e:79:0b:4b:a9:3a:66:a9:c9:d3:8f:31:6b:0c:
a5:f5:f8:cc:e6:e4:7f:27:9d:11:b4:b0:a5:53:12:
88:4d:39:4a:44:11:a0:ed:1a:b8:84:dc:e6:0c:c3:
d8:92:7e:94:4d:e5:48:de:78:b2:b3:38:ce:92:de:
ef:2e:de:fd:3c:38:06:ba:94:36:64:de:52:67:7b:
89:7d:d8:14:12:f6:37:d0:6c:86:cf:d9:5f:b3:c0:
cb:3c:dc:2a:31:e7:e9:8f:09:f8:8d:8d:a3:f4:ca:
1d:b1:a4:b4:fb:4a:b1:44:f0:6e:7b:aa:67:f9:fd:
12:8e:b4:39:ff:e8:74:23:53:b2:07:72:ef:2d:0e:
1b:22:5c:c4:12:0a:8d:ab:fb:51:c2:f4:8a:65:08:
6a:92:6d:15:7e:3d:59:a6:fb:69:d0:e7:ca:76:ed:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:37:77:5E:DC:B0:2C:17:FB:74:2A:67:20:D7:2D:AE:E7:E5:FB:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B19BA218057E11F0A6F9FD50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.111.0-45.202.112.255
Signature Algorithm: sha256WithRSAEncryption
62:5e:f4:c1:7b:31:a3:b1:62:7a:98:db:f2:23:03:9c:fa:ef:
8e:49:04:d2:da:20:50:29:ed:17:ff:43:53:dc:6c:41:77:3c:
98:4f:ae:59:3d:02:74:21:2b:99:cc:e9:66:e2:ef:24:77:36:
e2:42:c2:d8:bc:d7:45:33:d0:ab:85:46:d1:e3:dc:5b:41:48:
84:84:d8:f9:66:ed:e9:77:62:be:36:28:d4:c7:0a:ab:5d:24:
bc:b9:58:b6:64:ec:74:01:2a:4e:74:c0:c8:98:54:c1:5f:65:
ad:4e:80:cf:71:56:9b:bb:0b:18:b8:cc:3c:fb:6a:6d:ce:9b:
31:c4:c4:2d:37:76:74:f3:a2:19:92:bd:43:dd:7c:fb:b8:36:
62:81:5c:30:31:88:a7:73:70:57:8e:94:bd:ba:2d:7f:45:57:
f0:09:b5:aa:ce:36:04:38:3c:ca:ca:a7:e5:1f:7e:af:d4:d9:
c0:dd:8d:36:71:ce:34:94:79:68:7b:54:84:99:30:80:a7:d7:
04:e8:e4:bd:5c:dd:a1:cc:af:1d:60:3c:9f:f7:ef:df:71:ba:
da:ce:3e:da:49:bd:d7:80:22:0c:07:a4:1a:c8:c5:d8:90:d9:
c2:92:8f:d5:8b:57:67:42:38:d3:69:31:74:ed:ba:89:45:12:
9e:b8:f4:a0
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAUcuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzIwMTEzMDExWhcNMjUwNDI2MTEzMDExWjAYMRYw
FAYDVQQDEw02N2RiZmM0Ny00NjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvJHHMR6F5JOTQ9DA87zWcAvvEG6KBM7M52t0Of/SWEQF/fJFFI29/WCF
BBIZYAJZzgII1aZSMN9PFVi9jwA/30OxOSBiTy5boy1CViohC/cueVmePW0IZgGK
nnkLS6k6ZqnJ048xawyl9fjM5uR/J50RtLClUxKITTlKRBGg7Rq4hNzmDMPYkn6U
TeVI3niyszjOkt7vLt79PDgGupQ2ZN5SZ3uJfdgUEvY30GyGz9lfs8DLPNwqMefp
jwn4jY2j9ModsaS0+0qxRPBue6pn+f0SjrQ5/+h0I1OyB3LvLQ4bIlzEEgqNq/tR
wvSKZQhqkm0Vfj1Zpvtp0OfKdu3e8QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMo3
d17csCwX+3QqZyDXLa7n5fsGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMTlCQTIxODA1N0UxMUYwQTZGOUZENTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtym8DBAAtynAwDQYJKoZI
hvcNAQELBQADggEBAGJe9MF7MaOxYnqY2/IjA5z6745JBNLaIFAp7Rf/Q1PcbEF3
PJhPrlk9AnQhK5nM6Wbi7yR3NuJCwti810Uz0KuFRtHj3FtBSISE2Plm7el3Yr42
KNTHCqtdJLy5WLZk7HQBKk50wMiYVMFfZa1OgM9xVpu7Cxi4zDz7am3OmzHExC03
dnTzohmSvUPdfPu4NmKBXDAxiKdzcFeOlL26LX9FV/AJtarONgQ4PMrKp+Uffq/U
2cDdjTZxzjSUeWh7VISZMICn1wTo5L1c3aHMrx1gPJ/3799xutrOPtpJvdeAIgwH
pBrIxdiQ2cKSj9WLV2dCONNpMXTtuolFEp649KA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:56 2025 by rpki-client