Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3DEEAC6E55C11EFA435335E762E951A.roa
File: C3DEEAC6E55C11EFA435335E762E951A.roa (raw, json)
Hash identifier: FI+NxzbyfmcubmSNvG2jpJY6LamFsHa3cHxHK6eKGgk=
Subject key identifier: 22:DB:11:2E:8C:61:2B:55:23:12:48:82:7D:1E:00:3A:E9:8F:A8:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3DEEAC6E55C11EFA435335E762E951A.roa
Signing time: Fri 07 Feb 2025 14:06:46 +0000
ROA not before: Fri 07 Feb 2025 14:06:42 +0000
ROA not after: Fri 21 Jan 2028 14:06:42 +0000
asID: 17561
IP address blocks: 45.196.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73184 (0x11de0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 14:06:42 2025 GMT
Not After : Jan 21 14:06:42 2028 GMT
Subject: CN=67a61376-57bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:60:99:c1:85:e6:3a:55:2d:44:b2:11:44:
48:34:3a:24:ac:b2:a6:0a:82:36:5c:7b:0b:50:e3:
55:5a:5c:c9:77:b6:17:f5:20:d0:97:52:80:6f:58:
bc:2b:dc:ed:ca:96:d0:13:73:f3:d4:33:fe:a9:9c:
fc:c5:ec:96:1f:35:1d:3c:19:1e:81:9b:e6:7f:76:
13:63:80:75:c3:68:b0:0e:ed:50:64:77:63:0a:47:
da:30:96:a9:80:03:b8:99:f7:35:0c:08:3c:bf:74:
4f:79:ea:ee:4f:f7:e7:b4:25:7e:b9:55:d3:e3:bf:
2c:70:53:ba:04:6b:a3:1a:f6:03:e8:f0:db:83:ca:
f8:48:f0:7f:93:dc:aa:2a:1f:6b:75:de:7a:b2:01:
22:4c:f4:12:86:52:66:d4:d8:a0:eb:fd:82:23:7a:
cb:67:9d:69:10:70:a4:69:65:b8:8f:81:12:cf:e2:
97:3b:24:04:fb:89:05:24:93:c4:e1:25:de:aa:09:
f8:a8:d2:2b:91:57:c6:75:c8:f6:76:0f:1b:d1:1d:
19:cc:9d:c2:fa:91:c7:fc:60:70:a5:8a:6e:90:a9:
c8:25:97:9d:e1:a5:06:c7:2e:bf:70:12:e5:57:9b:
50:6c:42:ce:ba:cf:fd:49:0a:b2:dc:d8:19:a1:b2:
cd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DB:11:2E:8C:61:2B:55:23:12:48:82:7D:1E:00:3A:E9:8F:A8:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3DEEAC6E55C11EFA435335E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.80.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:aa:df:6b:f4:90:83:b9:7f:d1:d6:47:24:08:b2:7a:ab:88:
27:66:03:d6:c5:ec:7d:7e:c6:d6:f2:32:c4:ff:6a:5d:d1:6a:
90:3c:4d:dd:d5:ce:c9:19:e2:80:f8:f1:32:e8:e2:ff:fc:e1:
81:9b:1b:40:5c:d5:ca:ef:ed:43:c5:d2:32:aa:99:af:9d:b4:
00:3d:06:cd:4f:67:06:06:ac:63:dd:16:d2:53:0b:3a:23:19:
87:d8:cb:5b:3a:70:90:1d:c0:ca:36:63:77:bd:e3:bb:95:44:
a8:86:96:2a:30:01:37:b6:10:da:49:b5:e3:10:f1:4b:b1:85:
e4:1d:4c:31:ba:8e:6f:1d:6e:2a:63:8f:9a:72:20:07:e2:5e:
55:47:97:08:48:9c:b0:d5:8a:cb:21:25:6b:ec:c2:8d:1f:06:
b5:ba:ff:28:f8:58:38:ac:3b:61:0f:9d:d5:c1:52:32:67:70:
19:1e:72:b7:8e:c2:59:17:3c:05:54:8e:1d:b4:44:7c:47:01:
59:ac:0b:af:f5:c4:87:1d:fd:bb:f4:59:5a:c8:b1:c1:07:1c:
ac:5b:e9:37:2d:10:d4:0c:55:0a:6b:64:25:99:0e:79:83:b2:
6d:bf:3f:56:8d:fc:db:ee:93:30:62:d0:94:41:34:b8:12:13:
0b:2e:f5:21
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAR3gMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjA3MTQwNjQyWhcNMjgwMTIxMTQwNjQyWjAYMRYw
FAYDVQQDEw02N2E2MTM3Ni01N2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqVhgmcGF5jpVLUSyEURINDokrLKmCoI2XHsLUONVWlzJd7YX9SDQl1KA
b1i8K9ztypbQE3Pz1DP+qZz8xeyWHzUdPBkegZvmf3YTY4B1w2iwDu1QZHdjCkfa
MJapgAO4mfc1DAg8v3RPeeruT/fntCV+uVXT478scFO6BGujGvYD6PDbg8r4SPB/
k9yqKh9rdd56sgEiTPQShlJm1Nig6/2CI3rLZ51pEHCkaWW4j4ESz+KXOyQE+4kF
JJPE4SXeqgn4qNIrkVfGdcj2dg8b0R0ZzJ3C+pHH/GBwpYpukKnIJZed4aUGxy6/
cBLlV5tQbELOus/9SQqy3NgZobLNZQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCLb
ES6MYStVIxJIgn0eADrpj6hnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DM0RFRUFDNkU1NUMxMUVGQTQzNTMzNUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcRQMA0GCSqGSIb3DQEBCwUA
A4IBAQBKqt9r9JCDuX/R1kckCLJ6q4gnZgPWxex9fsbW8jLE/2pd0WqQPE3d1c7J
GeKA+PEy6OL//OGBmxtAXNXK7+1DxdIyqpmvnbQAPQbNT2cGBqxj3RbSUws6IxmH
2MtbOnCQHcDKNmN3veO7lUSohpYqMAE3thDaSbXjEPFLsYXkHUwxuo5vHW4qY4+a
ciAH4l5VR5cISJyw1YrLISVr7MKNHwa1uv8o+Fg4rDthD53VwVIyZ3AZHnK3jsJZ
FzwFVI4dtER8RwFZrAuv9cSHHf279FlayLHBBxysW+k3LRDUDFUKa2QlmQ55g7Jt
vz9Wjfzb7pMwYtCUQTS4EhMLLvUh
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:12 2025 by rpki-client