Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAA1685AF46C11EFBEA5067F762E951A.roa
File: DAA1685AF46C11EFBEA5067F762E951A.roa (raw, json)
Hash identifier: uCGX1kr1F4/O8kmU0MkIOmI9KBxDBt6e9jk7+l0NO6I=
Subject key identifier: FB:59:0F:40:E1:D0:9C:9C:5C:60:35:08:93:D2:D0:EB:82:B0:A0:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013628
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAA1685AF46C11EFBEA5067F762E951A.roa
Signing time: Wed 26 Feb 2025 18:09:43 +0000
ROA not before: Wed 26 Feb 2025 18:09:39 +0000
ROA not after: Thu 19 Feb 2026 18:09:39 +0000
asID: 984
IP address blocks: 45.201.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79400 (0x13628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:09:39 2025 GMT
Not After : Feb 19 18:09:39 2026 GMT
Subject: CN=67bf58e7-cfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:d5:30:91:b7:0e:20:83:69:be:4c:b0:d5:
10:16:e7:4b:8e:26:2d:9c:f2:12:00:a8:9e:80:33:
0f:38:d9:9d:b0:c8:12:7e:dd:e8:70:37:55:a4:59:
62:b1:51:94:e0:00:b4:c7:0c:a8:16:8c:9f:aa:36:
5e:a1:6a:37:a2:32:a3:7c:69:b1:22:6b:2e:01:01:
ab:47:d7:41:92:86:f1:98:ad:d7:fe:0d:95:d5:f3:
4e:8e:b1:4d:d5:d1:da:d3:be:1b:2f:9c:b6:40:9e:
30:f7:39:38:4c:8a:39:5f:f8:70:cd:c9:04:36:09:
bf:e1:00:5f:2b:b1:67:ca:6d:74:02:55:cd:cb:7b:
47:f2:8c:41:70:d8:69:10:50:55:09:f9:cc:21:f4:
35:a7:27:75:a9:42:0e:4d:87:d9:c8:00:9b:aa:60:
c7:fc:96:04:97:e9:b3:41:40:a3:23:cb:b2:c4:3a:
81:74:75:ca:1e:e5:3e:de:aa:c0:fc:f0:05:cb:27:
9f:ec:2e:88:10:11:b4:12:6c:ab:49:78:42:50:60:
e3:0f:c4:46:8b:52:06:6f:a8:1e:1d:38:02:2f:e8:
ca:84:24:ec:0d:8e:bf:f5:3c:d7:a2:36:1b:66:d1:
0e:c1:a6:55:4f:fb:71:5d:ea:8a:e9:c9:7e:bf:ca:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:59:0F:40:E1:D0:9C:9C:5C:60:35:08:93:D2:D0:EB:82:B0:A0:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAA1685AF46C11EFBEA5067F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.62.0/24
Signature Algorithm: sha256WithRSAEncryption
72:84:82:7e:45:f9:a3:f7:2c:c7:d2:56:62:d6:11:b1:a5:ee:
34:0d:2d:fb:35:f9:dd:59:a3:53:12:51:46:e2:57:79:71:d8:
ef:2f:89:bc:e4:16:6b:f1:78:fa:d9:71:99:2c:8a:b3:35:c0:
d3:83:ea:99:9f:2e:17:0b:54:3d:e0:8f:78:56:8c:24:e6:51:
05:eb:3a:ca:6c:42:31:42:52:ca:2d:b7:bc:81:8f:e8:f2:52:
22:e1:be:aa:c3:4d:18:34:39:f1:91:33:61:85:a7:3e:aa:b1:
ee:b9:aa:64:7e:d9:2a:7b:6e:3c:97:a2:93:f6:10:29:69:cc:
63:3e:96:38:89:f9:16:26:0a:3e:71:a2:44:74:63:f1:cd:13:
19:e9:95:80:73:e4:ac:09:20:bf:a5:8b:0c:b9:48:af:8a:7b:
1a:5c:bd:e6:a4:06:a3:aa:42:43:41:95:83:80:17:82:fc:9e:
db:02:65:7b:37:25:5d:b3:c0:cd:69:e1:9a:ac:70:f0:0e:8e:
99:26:22:6f:06:b1:30:74:c2:be:4a:35:35:e8:5b:1e:f3:da:
be:03:22:7c:0a:02:77:1b:2d:3e:07:c8:87:89:ee:5a:d4:6f:
e9:f1:2b:35:32:1a:02:ff:e1:ae:53:0f:5e:22:b6:af:6b:f5:
3d:f7:29:9d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATYoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTgwOTM5WhcNMjYwMjE5MTgwOTM5WjAYMRYw
FAYDVQQDEw02N2JmNThlNy1jZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAncjVMJG3DiCDab5MsNUQFudLjiYtnPISAKiegDMPONmdsMgSft3ocDdV
pFlisVGU4AC0xwyoFoyfqjZeoWo3ojKjfGmxImsuAQGrR9dBkobxmK3X/g2V1fNO
jrFN1dHa074bL5y2QJ4w9zk4TIo5X/hwzckENgm/4QBfK7Fnym10AlXNy3tH8oxB
cNhpEFBVCfnMIfQ1pyd1qUIOTYfZyACbqmDH/JYEl+mzQUCjI8uyxDqBdHXKHuU+
3qrA/PAFyyef7C6IEBG0EmyrSXhCUGDjD8RGi1IGb6geHTgCL+jKhCTsDY6/9TzX
ojYbZtEOwaZVT/txXeqK6cl+v8oXSQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPtZ
D0Dh0JycXGA1CJPS0OuCsKBbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQUExNjg1QUY0NkMxMUVGQkVBNTA2N0Y3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALck+MA0GCSqGSIb3DQEBCwUA
A4IBAQByhIJ+Rfmj9yzH0lZi1hGxpe40DS37NfndWaNTElFG4ld5cdjvL4m85BZr
8Xj62XGZLIqzNcDTg+qZny4XC1Q94I94Vowk5lEF6zrKbEIxQlLKLbe8gY/o8lIi
4b6qw00YNDnxkTNhhac+qrHuuapkftkqe248l6KT9hApacxjPpY4ifkWJgo+caJE
dGPxzRMZ6ZWAc+SsCSC/pYsMuUivinsaXL3mpAajqkJDQZWDgBeC/J7bAmV7NyVd
s8DNaeGarHDwDo6ZJiJvBrEwdMK+SjU16Fse89q+AyJ8CgJ3Gy0+B8iHie5a1G/p
8Ss1MhoC/+GuUw9eIrava/U99ymd
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:02 2025 by rpki-client