Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8B51D30F47011EF86D2559B762E951A.roa
File: D8B51D30F47011EF86D2559B762E951A.roa (raw, json)
Hash identifier: OM7G0ea8P3sXQzvdLBFVJx6OLBcjIfYWELyLzwqyHeQ=
Subject key identifier: 4B:BC:A8:5E:8D:86:CA:9C:68:B4:25:D5:59:05:E4:30:D1:22:EB:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013681
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8B51D30F47011EF86D2559B762E951A.roa
Signing time: Wed 26 Feb 2025 18:38:18 +0000
ROA not before: Wed 26 Feb 2025 18:38:15 +0000
ROA not after: Thu 19 Feb 2026 18:38:15 +0000
asID: 984
IP address blocks: 45.201.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79489 (0x13681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:38:15 2025 GMT
Not After : Feb 19 18:38:15 2026 GMT
Subject: CN=67bf5f9a-839f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:84:b6:4b:19:2b:93:63:c5:6e:d1:df:b0:d5:
1b:d2:1d:63:74:89:ce:81:7a:fb:2f:49:39:37:a3:
11:86:81:e9:0e:15:c6:fb:c2:4e:95:af:82:73:52:
1c:d3:14:e6:a7:7b:cc:e9:48:aa:99:d1:87:07:d9:
21:a2:80:df:d9:da:07:a0:ea:01:c0:8e:ba:87:98:
80:63:7b:1f:12:4c:9f:fc:52:77:f4:38:c3:38:27:
b2:b7:17:35:bc:6b:50:4c:9a:d4:3f:3a:bb:82:89:
ad:c8:18:ef:9a:ed:6f:bf:83:23:c0:0b:db:bd:af:
bc:10:4f:ee:d8:22:11:37:8e:e9:3a:43:d5:f2:02:
e3:05:36:b0:67:74:74:42:bd:1c:85:64:3e:de:b5:
97:c7:ea:79:6f:f8:09:85:b3:18:37:cc:f5:1a:81:
c8:d6:51:e5:52:c8:05:ba:ad:dd:7c:08:b3:8b:95:
1c:8f:63:aa:6a:d4:1f:bf:e7:83:05:c5:88:71:5a:
f9:f2:a6:ab:b8:11:38:7c:3f:df:fe:28:c9:c8:fc:
9c:1b:d8:d9:57:bc:0e:9e:82:8e:8f:59:27:85:02:
72:7b:8e:b4:c8:85:13:51:58:0f:b9:2b:1e:63:3d:
7a:a3:11:d9:17:70:83:42:f9:83:c0:e5:f0:d1:69:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BC:A8:5E:8D:86:CA:9C:68:B4:25:D5:59:05:E4:30:D1:22:EB:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8B51D30F47011EF86D2559B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b7:7d:00:26:83:88:25:ea:34:60:ea:da:9c:df:52:de:79:
1c:a8:58:e6:00:2b:ff:0c:9b:13:a3:29:34:19:01:9e:bb:09:
25:80:18:a1:de:79:b2:6d:44:45:8c:4a:bf:f1:95:0f:b0:14:
19:ad:0d:1c:84:17:3b:be:ee:0c:e1:0b:13:bb:05:22:17:54:
24:3b:2e:2a:9a:a1:e3:db:0d:0c:8d:c7:e8:cd:51:6a:c2:99:
a3:ef:ef:1a:c6:ee:d6:a6:16:43:d6:d6:cc:97:1d:9d:18:67:
af:d9:d5:9a:3d:ee:32:3a:05:d9:43:da:37:c6:ef:c8:a9:e3:
b0:ed:03:a5:83:e6:0a:2c:b6:bf:ed:86:d4:3e:c9:bb:c1:73:
31:6d:d1:2b:42:05:8e:3a:3a:2f:1c:55:65:45:76:94:3e:c6:
bd:c2:a8:23:e6:b2:dd:e0:61:12:60:1d:cc:95:57:06:2e:b2:
ee:e6:8a:ad:d8:62:81:79:8b:52:eb:3f:b5:8e:76:d0:f2:fa:
1d:9d:ff:87:9b:6f:12:c3:eb:e4:b1:a3:1b:f7:7b:30:dc:a8:
97:cb:39:03:69:47:99:c2:02:de:61:c1:3b:68:7a:88:7f:31:
37:a7:95:89:84:8e:ba:3f:e0:e3:2a:ac:da:e6:3b:ae:84:17:
3c:f2:5c:5a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATaBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTgzODE1WhcNMjYwMjE5MTgzODE1WjAYMRYw
FAYDVQQDEw02N2JmNWY5YS04MzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5YS2Sxkrk2PFbtHfsNUb0h1jdInOgXr7L0k5N6MRhoHpDhXG+8JOla+C
c1Ic0xTmp3vM6UiqmdGHB9khooDf2doHoOoBwI66h5iAY3sfEkyf/FJ39DjDOCey
txc1vGtQTJrUPzq7gomtyBjvmu1vv4MjwAvbva+8EE/u2CIRN47pOkPV8gLjBTaw
Z3R0Qr0chWQ+3rWXx+p5b/gJhbMYN8z1GoHI1lHlUsgFuq3dfAizi5Ucj2OqatQf
v+eDBcWIcVr58qaruBE4fD/f/ijJyPycG9jZV7wOnoKOj1knhQJye460yIUTUVgP
uSseYz16oxHZF3CDQvmDwOXw0WkMgQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEu8
qF6NhsqcaLQl1VkF5DDRIusMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EOEI1MUQzMEY0NzAxMUVGODZEMjU1OUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALclLMA0GCSqGSIb3DQEBCwUA
A4IBAQAPt30AJoOIJeo0YOranN9S3nkcqFjmACv/DJsToyk0GQGeuwklgBih3nmy
bURFjEq/8ZUPsBQZrQ0chBc7vu4M4QsTuwUiF1QkOy4qmqHj2w0MjcfozVFqwpmj
7+8axu7WphZD1tbMlx2dGGev2dWaPe4yOgXZQ9o3xu/IqeOw7QOlg+YKLLa/7YbU
Psm7wXMxbdErQgWOOjovHFVlRXaUPsa9wqgj5rLd4GESYB3MlVcGLrLu5oqt2GKB
eYtS6z+1jnbQ8vodnf+Hm28Sw+vksaMb93sw3KiXyzkDaUeZwgLeYcE7aHqIfzE3
p5WJhI66P+DjKqza5juuhBc88lxa
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:49 2025 by rpki-client