Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0DBEB0EF43D11EFBF59A8B5762E951A.roa
File: C0DBEB0EF43D11EFBF59A8B5762E951A.roa (raw, json)
Hash identifier: pp4C+xdB7opRNekj9WhCP35KhB9//QiHuU9txk8RK2w=
Subject key identifier: 77:AE:59:BC:98:33:B8:DD:BA:3A:2B:53:52:A4:19:EF:B5:95:46:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013284
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0DBEB0EF43D11EFBF59A8B5762E951A.roa
Signing time: Wed 26 Feb 2025 12:32:34 +0000
ROA not before: Wed 26 Feb 2025 12:32:30 +0000
ROA not after: Thu 19 Feb 2026 12:32:30 +0000
asID: 984
IP address blocks: 45.206.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78468 (0x13284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:32:30 2025 GMT
Not After : Feb 19 12:32:30 2026 GMT
Subject: CN=67bf09e2-03bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:94:02:e8:93:93:78:23:30:6c:23:c6:94:
c0:37:b4:e0:83:60:08:a7:41:a6:bc:7b:57:a9:31:
6d:d7:75:c5:81:f3:34:ac:86:e4:a5:e7:ab:e2:ae:
c1:7d:47:8b:26:40:e1:54:b3:d8:3b:0c:6f:91:a4:
a3:8d:c5:44:56:cf:6b:bb:b9:32:b7:37:37:37:49:
ca:d0:61:b8:02:cd:e2:17:27:84:9c:8d:25:44:de:
64:97:e6:9e:fa:fc:19:85:85:17:c7:ef:82:f1:99:
56:c9:94:28:97:37:04:4c:23:fc:2f:3f:a2:76:17:
be:9b:c3:a4:85:ec:c3:67:95:b5:f3:85:39:2a:91:
ad:a3:ba:a6:b0:f9:54:6d:04:f3:f4:f2:dc:8d:13:
50:56:d7:15:4c:45:d9:56:10:09:4c:9f:87:87:13:
34:22:3a:ed:cf:20:fb:a3:e0:d0:80:09:50:35:25:
13:79:19:db:91:c5:66:18:1d:70:90:dd:1e:b6:2d:
71:8c:fe:07:4e:fe:e1:0e:c5:f0:ef:60:7a:c5:69:
c9:7c:14:3c:33:2b:bc:9a:a8:33:3c:28:67:2a:c1:
53:64:4a:83:31:57:bd:e6:d4:fb:29:db:48:1c:d5:
d0:59:0c:75:8b:b9:0d:0d:07:2d:0b:47:45:82:04:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AE:59:BC:98:33:B8:DD:BA:3A:2B:53:52:A4:19:EF:B5:95:46:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0DBEB0EF43D11EFBF59A8B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c3:fc:ec:10:0c:d0:51:36:98:28:9b:fe:d3:c2:26:af:bd:
16:77:2d:39:1e:f7:cb:5a:cb:d7:b0:4c:e3:70:ba:d4:53:77:
40:48:68:67:75:fb:4e:90:97:d7:3a:12:61:67:c0:cf:23:a9:
78:50:b2:12:e8:fb:a1:1d:dd:b5:6e:f0:b9:83:5d:08:13:ad:
e3:10:04:41:98:af:eb:ee:e5:7b:33:00:4d:d6:8a:6d:c4:fd:
91:5e:51:57:35:13:bd:86:12:4b:52:aa:8c:b5:c2:00:6d:6a:
34:66:ae:18:50:72:c6:4a:f1:59:9f:ef:37:a3:1f:85:14:70:
ad:b6:28:83:36:fb:03:50:25:ee:86:6a:1d:80:44:73:16:c2:
ee:da:e9:a5:ee:28:3a:e3:06:9a:03:6d:fa:e6:2a:24:ec:e1:
82:e9:46:8f:f8:01:4f:59:f1:63:9b:5a:b0:77:52:c1:d2:02:
8e:e2:e4:9c:c0:87:75:b0:f4:9b:59:a6:b3:07:13:55:74:9c:
19:4a:d4:be:ca:05:ea:8f:0c:6d:68:ff:f9:61:03:04:3e:db:
29:c2:55:79:ec:6d:af:57:7f:a9:ad:11:9c:2c:71:f4:87:7c:
5d:23:ed:3b:8f:88:c7:95:e2:c0:76:72:2e:c6:d3:09:28:25:
b6:06:14:03
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATKEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTIzMjMwWhcNMjYwMjE5MTIzMjMwWjAYMRYw
FAYDVQQDEw02N2JmMDllMi0wM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp5KUAuiTk3gjMGwjxpTAN7Tgg2AIp0GmvHtXqTFt13XFgfM0rIbkpeer
4q7BfUeLJkDhVLPYOwxvkaSjjcVEVs9ru7kytzc3N0nK0GG4As3iFyeEnI0lRN5k
l+ae+vwZhYUXx++C8ZlWyZQolzcETCP8Lz+idhe+m8OkhezDZ5W184U5KpGto7qm
sPlUbQTz9PLcjRNQVtcVTEXZVhAJTJ+HhxM0IjrtzyD7o+DQgAlQNSUTeRnbkcVm
GB1wkN0eti1xjP4HTv7hDsXw72B6xWnJfBQ8Myu8mqgzPChnKsFTZEqDMVe95tT7
KdtIHNXQWQx1i7kNDQctC0dFggSc8wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHeu
WbyYM7jdujorU1KkGe+1lUYcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMERCRUIwRUY0M0QxMUVGQkY1OUE4QjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc4PMA0GCSqGSIb3DQEBCwUA
A4IBAQCcw/zsEAzQUTaYKJv+08Imr70Wdy05HvfLWsvXsEzjcLrUU3dASGhndftO
kJfXOhJhZ8DPI6l4ULIS6PuhHd21bvC5g10IE63jEARBmK/r7uV7MwBN1optxP2R
XlFXNRO9hhJLUqqMtcIAbWo0Zq4YUHLGSvFZn+83ox+FFHCttiiDNvsDUCXuhmod
gERzFsLu2uml7ig64waaA2365iok7OGC6UaP+AFPWfFjm1qwd1LB0gKO4uScwId1
sPSbWaazBxNVdJwZStS+ygXqjwxtaP/5YQMEPtspwlV57G2vV3+prRGcLHH0h3xd
I+07j4jHleLAdnIuxtMJKCW2BhQD
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:40 2025 by rpki-client