Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE6FCA86F43911EFA7601F99762E951A.roa
File: DE6FCA86F43911EFA7601F99762E951A.roa (raw, json)
Hash identifier: XMsq3erCHWkKGB9GinDO/cCwP1sxmeuPSxy7217AoZQ=
Subject key identifier: D7:1C:C7:A3:5F:67:7A:2A:35:FA:53:80:94:AA:F5:02:00:E2:42:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013225
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE6FCA86F43911EFA7601F99762E951A.roa
Signing time: Wed 26 Feb 2025 12:04:45 +0000
ROA not before: Wed 26 Feb 2025 12:04:42 +0000
ROA not after: Sat 19 Feb 2028 12:04:42 +0000
asID: 17561
IP address blocks: 45.199.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78373 (0x13225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:04:42 2025 GMT
Not After : Feb 19 12:04:42 2028 GMT
Subject: CN=67bf035d-7b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:af:08:05:dd:6c:7b:c4:5c:12:6b:ac:57:
92:a1:c7:6a:6b:b3:8d:35:ba:72:bb:4f:33:f0:01:
c8:a6:42:5f:19:3e:70:dd:54:ef:d0:11:5a:6d:76:
52:53:c6:81:53:8d:84:e2:b1:a4:16:3a:f6:70:bc:
54:02:7f:e8:f3:1b:01:4c:18:fe:79:00:5d:82:c4:
0a:6c:4d:80:fb:80:44:94:17:ea:da:6b:7f:45:9d:
4b:8c:eb:fd:e6:53:3e:66:5a:66:20:3e:5b:33:30:
cc:9e:b1:b8:01:e5:0e:12:21:ed:5d:06:e4:c2:3d:
6b:2b:4f:54:1c:d4:f7:84:b9:ad:1b:b1:5a:4d:f8:
c0:74:32:4a:60:b5:57:a4:36:97:23:06:d8:d0:0f:
6f:5e:79:78:e1:42:97:58:e4:8e:fc:00:b7:1f:f7:
56:a8:43:29:e5:59:5d:bc:78:19:23:a9:7a:77:59:
80:5a:f6:2b:94:46:91:8b:da:1d:e1:b1:5f:ea:1d:
45:33:7d:14:0c:5b:99:77:13:09:38:d9:38:b6:f5:
e1:3b:27:69:fd:d4:47:40:f4:37:2f:a6:26:a4:a5:
ea:78:13:c6:54:b9:6a:fd:ee:2a:8d:d1:c6:01:10:
d2:5c:5c:c0:5f:16:58:c5:fc:91:cb:9f:8d:77:f1:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1C:C7:A3:5F:67:7A:2A:35:FA:53:80:94:AA:F5:02:00:E2:42:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE6FCA86F43911EFA7601F99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.141.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ad:da:50:d6:4d:7c:5d:46:03:49:57:5f:5c:bb:7e:02:04:
8a:dc:d2:4a:b7:10:6c:3e:97:a4:e5:50:7d:8a:49:d2:02:12:
7e:06:0d:94:eb:27:49:b3:11:0e:ef:1d:68:c5:f8:40:2f:8c:
ad:67:dd:4d:bd:9f:06:75:2f:fc:21:4d:de:4d:2b:67:29:60:
bb:99:ad:cb:f6:00:bc:40:99:f9:65:e4:3c:36:a4:ea:ee:88:
81:26:27:31:16:fc:87:9d:98:9c:02:49:77:ae:e4:44:94:05:
92:2b:a4:f8:98:da:85:34:f0:e9:c5:ab:b2:9f:d0:a8:83:61:
c8:f0:0c:1c:48:13:ef:41:98:34:bd:9d:25:07:08:0d:21:10:
55:49:23:0c:80:dc:6f:5b:b5:d5:d3:3e:01:e0:b6:0e:bf:c1:
8d:a6:15:79:74:1b:a4:0b:f2:90:09:c6:aa:bc:c2:3d:ea:d1:
97:b9:90:3d:0a:70:1c:d7:ad:b5:f3:43:ef:b0:49:70:67:9d:
07:fa:f0:93:56:0b:34:31:57:78:a1:71:d1:91:e4:06:ba:04:
00:04:bd:46:28:48:d3:9f:d2:16:4f:25:1c:c3:24:45:b9:e7:
28:42:60:d6:93:31:58:ea:e7:4d:b8:98:8d:c4:bb:35:03:db:
c4:83:ca:c9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATIlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTIwNDQyWhcNMjgwMjE5MTIwNDQyWjAYMRYw
FAYDVQQDEw02N2JmMDM1ZC03YjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtr+vCAXdbHvEXBJrrFeSocdqa7ONNbpyu08z8AHIpkJfGT5w3VTv0BFa
bXZSU8aBU42E4rGkFjr2cLxUAn/o8xsBTBj+eQBdgsQKbE2A+4BElBfq2mt/RZ1L
jOv95lM+ZlpmID5bMzDMnrG4AeUOEiHtXQbkwj1rK09UHNT3hLmtG7FaTfjAdDJK
YLVXpDaXIwbY0A9vXnl44UKXWOSO/AC3H/dWqEMp5VldvHgZI6l6d1mAWvYrlEaR
i9od4bFf6h1FM30UDFuZdxMJONk4tvXhOydp/dRHQPQ3L6YmpKXqeBPGVLlq/e4q
jdHGARDSXFzAXxZYxfyRy5+Nd/GbzQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNcc
x6NfZ3oqNfpTgJSq9QIA4kLMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERTZGQ0E4NkY0MzkxMUVGQTc2MDFGOTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALceNMA0GCSqGSIb3DQEBCwUA
A4IBAQB2rdpQ1k18XUYDSVdfXLt+AgSK3NJKtxBsPpek5VB9iknSAhJ+Bg2U6ydJ
sxEO7x1oxfhAL4ytZ91NvZ8GdS/8IU3eTStnKWC7ma3L9gC8QJn5ZeQ8NqTq7oiB
JicxFvyHnZicAkl3ruRElAWSK6T4mNqFNPDpxauyn9Cog2HI8AwcSBPvQZg0vZ0l
BwgNIRBVSSMMgNxvW7XV0z4B4LYOv8GNphV5dBukC/KQCcaqvMI96tGXuZA9CnAc
162180PvsElwZ50H+vCTVgs0MVd4oXHRkeQGugQABL1GKEjTn9IWTyUcwyRFueco
QmDWkzFY6udNuJiNxLs1A9vEg8rJ
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:50 2025 by rpki-client