Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C393C60CF46D11EFBD765784762E951A.roa
File: C393C60CF46D11EFBD765784762E951A.roa (raw, json)
Hash identifier: DNFHJFoVRW/HaaZx71vOqWi9oJAqz24WwzHxEuJqe7Q=
Subject key identifier: A3:D6:9A:10:C7:52:33:9D:24:52:45:1D:0D:0E:66:6F:CD:EB:2A:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01363D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C393C60CF46D11EFBD765784762E951A.roa
Signing time: Wed 26 Feb 2025 18:16:14 +0000
ROA not before: Wed 26 Feb 2025 18:16:11 +0000
ROA not after: Thu 19 Feb 2026 18:16:11 +0000
asID: 984
IP address blocks: 45.201.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79421 (0x1363d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:16:11 2025 GMT
Not After : Feb 19 18:16:11 2026 GMT
Subject: CN=67bf5a6e-4040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:f2:06:22:fa:a7:d9:1e:a3:a2:b4:7c:43:
e3:33:7c:5d:ac:7c:60:fe:18:7f:6b:95:12:2b:cb:
a0:d3:55:4f:1b:a1:1f:14:ca:de:b0:22:7d:21:2c:
cf:4a:20:f7:20:1e:d3:02:e5:50:1a:f6:7b:a6:fd:
9a:37:21:46:d0:d9:2e:07:a4:bc:24:f4:6b:8d:0a:
20:15:d4:43:b6:a5:85:d2:29:4d:06:0c:bb:9a:5d:
2e:f5:39:80:4a:49:f7:b3:6d:d0:47:f0:61:d5:0e:
c0:92:8a:d2:2f:4a:0b:da:5d:a0:1a:16:ab:ad:6a:
89:fb:b9:a9:5d:e9:93:67:f1:f5:2d:e9:27:56:de:
ce:69:a8:e2:6a:56:4c:0d:ce:6c:bd:62:61:05:2b:
97:07:3f:0f:3e:c9:41:88:1f:03:ac:1f:10:e8:2b:
dc:87:dd:22:ef:d3:36:b9:53:ba:53:0c:2c:cc:18:
62:55:76:dd:d6:19:6e:1a:eb:a8:25:71:e8:64:d2:
f1:ac:60:1c:4a:d7:16:29:20:9f:f6:6a:a1:42:68:
5d:53:d5:b4:57:26:6c:ca:8e:4a:dc:1b:2b:e4:5b:
bd:a8:bc:be:a1:2a:ad:36:e5:aa:da:dc:f1:38:51:
16:a0:1b:88:49:2b:dd:e8:2b:3c:e7:af:96:49:cf:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D6:9A:10:C7:52:33:9D:24:52:45:1D:0D:0E:66:6F:CD:EB:2A:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C393C60CF46D11EFBD765784762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.66.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:9c:b8:42:dc:8e:71:41:08:2d:aa:c3:37:02:4e:f3:34:d9:
7b:a7:98:84:73:c9:24:b3:d1:16:fb:e9:71:55:0b:8c:4c:e0:
78:20:c4:1d:bb:37:83:0f:fa:4c:3a:c6:b9:50:9e:b0:ea:9b:
b1:43:52:44:68:11:ef:07:34:39:d7:5d:b7:e9:46:26:c5:9c:
e6:ff:9e:81:00:63:c7:3a:ca:26:51:12:5d:d9:9b:67:8e:db:
92:bc:4c:83:33:cb:02:77:39:5c:2b:98:58:d7:fb:81:f7:c8:
86:bc:c1:74:23:07:91:db:ef:12:61:be:7e:fb:0a:71:95:6d:
a6:11:b8:ce:5b:70:3b:16:c6:82:0a:3f:8f:0c:10:3d:5e:9e:
4e:7e:0e:ec:6d:bd:18:bd:93:57:57:6f:e2:26:cd:fc:a6:aa:
4d:4b:af:ca:75:76:0e:37:24:69:24:c6:a1:64:be:9c:b7:1c:
74:83:ca:06:a3:2f:81:d4:df:5e:01:1e:8d:46:06:98:0e:b6:
92:93:4f:fb:8a:dc:5a:f8:ff:25:34:01:41:7d:0e:d2:d0:e3:
c5:c1:1f:1e:ce:80:07:f4:7d:44:8e:19:89:f7:22:a7:67:81:
3c:ba:27:3b:c5:59:47:c3:81:aa:5d:d2:1d:11:da:18:56:cf:
18:6c:2d:cf
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATY9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTgxNjExWhcNMjYwMjE5MTgxNjExWjAYMRYw
FAYDVQQDEw02N2JmNWE2ZS00MDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAn37yBiL6p9keo6K0fEPjM3xdrHxg/hh/a5USK8ug01VPG6EfFMresCJ9
ISzPSiD3IB7TAuVQGvZ7pv2aNyFG0NkuB6S8JPRrjQogFdRDtqWF0ilNBgy7ml0u
9TmASkn3s23QR/Bh1Q7AkorSL0oL2l2gGharrWqJ+7mpXemTZ/H1LeknVt7Oaaji
alZMDc5svWJhBSuXBz8PPslBiB8DrB8Q6Cvch90i79M2uVO6UwwszBhiVXbd1hlu
GuuoJXHoZNLxrGAcStcWKSCf9mqhQmhdU9W0VyZsyo5K3Bsr5Fu9qLy+oSqtNuWq
2tzxOFEWoBuISSvd6Cs856+WSc9RywIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKPW
mhDHUjOdJFJFHQ0OZm/N6yo5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMzkzQzYwQ0Y0NkQxMUVGQkQ3NjU3ODQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALclCMA0GCSqGSIb3DQEBCwUA
A4IBAQBvnLhC3I5xQQgtqsM3Ak7zNNl7p5iEc8kks9EW++lxVQuMTOB4IMQduzeD
D/pMOsa5UJ6w6puxQ1JEaBHvBzQ511236UYmxZzm/56BAGPHOsomURJd2ZtnjtuS
vEyDM8sCdzlcK5hY1/uB98iGvMF0IweR2+8SYb5++wpxlW2mEbjOW3A7FsaCCj+P
DBA9Xp5Ofg7sbb0YvZNXV2/iJs38pqpNS6/KdXYONyRpJMahZL6ctxx0g8oGoy+B
1N9eAR6NRgaYDraSk0/7itxa+P8lNAFBfQ7S0OPFwR8ezoAH9H1EjhmJ9yKnZ4E8
uic7xVlHw4GqXdIdEdoYVs8YbC3P
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:03 2025 by rpki-client