Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C71ECF54D4A311EF95F20E55762E951A.roa
File: C71ECF54D4A311EF95F20E55762E951A.roa (raw, json)
Hash identifier: 0pMO+scKHrG3IcHVmG9iw459FAb72vWllaeZe26aBCw=
Subject key identifier: BC:74:A1:B7:F9:DC:8B:06:7B:0E:72:BE:2F:76:C6:FC:C9:43:11:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01090F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C71ECF54D4A311EF95F20E55762E951A.roa
Signing time: Fri 17 Jan 2025 07:22:16 +0000
ROA not before: Fri 17 Jan 2025 07:22:12 +0000
ROA not after: Thu 08 Jan 2026 07:22:12 +0000
asID: 136744
IP address blocks: 45.196.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67855 (0x1090f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 17 07:22:12 2025 GMT
Not After : Jan 8 07:22:12 2026 GMT
Subject: CN=678a0528-f76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:4f:c0:d9:d0:43:72:7e:76:cc:ab:b2:c9:
e8:24:51:a7:90:50:61:ec:35:9e:c6:a1:d8:09:9a:
84:6d:61:11:34:7d:67:bd:82:5e:96:63:81:24:b5:
02:20:40:a5:97:18:1b:22:3c:d6:4b:4c:c7:b3:d1:
84:24:08:e5:93:6c:26:f9:b2:ca:83:a0:a5:eb:4f:
6a:42:25:66:9f:f2:e4:b8:35:91:d9:e4:7b:b6:8e:
75:a0:0f:0f:2e:30:7a:04:dd:9a:dc:a5:ca:5a:ec:
ab:a1:75:21:a7:3b:0c:be:9c:c2:8f:fa:ba:a4:83:
fc:80:e8:35:2a:09:00:0a:cc:19:ad:0c:a3:42:b0:
19:85:ca:b5:14:6b:fa:ce:b5:79:37:8f:81:ca:21:
6e:93:8a:0f:33:2e:d2:07:f1:ca:c9:13:81:1c:91:
e0:8f:ad:7a:40:61:fd:36:42:12:f7:52:7f:dc:4f:
a5:6e:42:8f:a0:bf:67:7e:a3:f7:fb:4b:f9:2f:2f:
fa:bb:fc:8d:e2:45:7f:2e:48:40:de:1f:45:58:fe:
b5:1f:a0:b8:84:3a:88:fa:e5:f7:39:0b:1a:0b:4f:
92:96:ef:72:6f:92:ec:35:3b:98:2d:33:d8:da:e4:
ce:33:91:5d:25:06:3b:b8:ab:cd:7e:ca:29:c2:5f:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:74:A1:B7:F9:DC:8B:06:7B:0E:72:BE:2F:76:C6:FC:C9:43:11:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C71ECF54D4A311EF95F20E55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.196.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ff:29:dc:d4:00:89:90:6b:cf:4c:48:49:8a:33:39:12:19:
b1:c8:4c:e6:e4:e4:d8:d0:5c:a2:6e:c7:6f:d0:c8:42:c3:a6:
90:1d:43:e3:d8:e4:ab:43:c3:ad:66:fc:e2:fe:9e:85:ce:22:
47:1f:81:65:f8:f5:a2:0c:cc:3c:bf:d1:5f:34:f9:ca:ec:71:
79:01:ee:a6:80:79:6d:22:4a:21:67:84:87:92:d3:1d:f4:38:
dc:28:81:a6:12:d5:75:4c:ce:51:97:f0:ef:a2:48:1d:b0:47:
50:76:6d:ca:9c:69:9b:3c:b2:f0:2e:99:4d:c9:64:75:be:a4:
2f:bf:8d:08:39:ae:02:6e:b1:cf:e7:1c:1d:ed:f0:3d:c6:99:
cf:35:7d:86:6b:f3:b2:8b:4c:65:2f:c4:4a:42:57:67:c2:82:
f2:bb:97:dc:52:66:a1:e5:17:d2:83:5b:65:19:0d:9d:b0:74:
cc:ed:42:97:47:49:2b:4c:c6:f2:43:a1:88:1a:69:a2:bf:1e:
cf:43:07:4e:47:58:3b:47:a7:fa:96:3d:07:be:bb:7d:f8:db:
ee:da:e1:0c:2a:ea:25:ef:58:be:5e:cf:52:ba:26:67:ac:66:
30:d0:5f:a8:49:62:d5:04:3d:08:cb:fd:19:6b:9d:d7:41:24:
25:56:44:4a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQkPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MDcyMjEyWhcNMjYwMTA4MDcyMjEyWjAYMRYw
FAYDVQQDEw02NzhhMDUyOC1mNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxXdPwNnQQ3J+dsyrssnoJFGnkFBh7DWexqHYCZqEbWERNH1nvYJelmOB
JLUCIECllxgbIjzWS0zHs9GEJAjlk2wm+bLKg6Cl609qQiVmn/LkuDWR2eR7to51
oA8PLjB6BN2a3KXKWuyroXUhpzsMvpzCj/q6pIP8gOg1KgkACswZrQyjQrAZhcq1
FGv6zrV5N4+ByiFuk4oPMy7SB/HKyROBHJHgj616QGH9NkIS91J/3E+lbkKPoL9n
fqP3+0v5Ly/6u/yN4kV/LkhA3h9FWP61H6C4hDqI+uX3OQsaC0+Slu9yb5LsNTuY
LTPY2uTOM5FdJQY7uKvNfsopwl8i6QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLx0
obf53IsGew5yvi92xvzJQxGLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNzFFQ0Y1NEQ0QTMxMUVGOTVGMjBFNTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTEMA0GCSqGSIb3DQEBCwUA
A4IBAQBE/ync1ACJkGvPTEhJijM5EhmxyEzm5OTY0Fyibsdv0MhCw6aQHUPj2OSr
Q8OtZvzi/p6FziJHH4Fl+PWiDMw8v9FfNPnK7HF5Ae6mgHltIkohZ4SHktMd9Djc
KIGmEtV1TM5Rl/DvokgdsEdQdm3KnGmbPLLwLplNyWR1vqQvv40IOa4CbrHP5xwd
7fA9xpnPNX2Ga/Oyi0xlL8RKQldnwoLyu5fcUmah5RfSg1tlGQ2dsHTM7UKXR0kr
TMbyQ6GIGmmivx7PQwdOR1g7R6f6lj0Hvrt9+Nvu2uEMKuol71i+Xs9SuiZnrGYw
0F+oSWLVBD0Iy/0Za53XQSQlVkRK
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:24 2025 by rpki-client