Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEABA954E89D11EFA342B287762E951A.roa
File: DEABA954E89D11EFA342B287762E951A.roa (raw, json)
Hash identifier: in+jDT0FRneMU8ZiMa1unh8uOAlX0NqYKahbX7Qc+wY=
Subject key identifier: 7E:C0:41:19:13:DE:A6:24:06:6B:95:31:93:51:46:60:28:AC:3E:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012142
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEABA954E89D11EFA342B287762E951A.roa
Signing time: Tue 11 Feb 2025 17:30:22 +0000
ROA not before: Tue 11 Feb 2025 17:30:18 +0000
ROA not after: Fri 13 Feb 2026 17:30:18 +0000
asID: 28458
IP address blocks: 45.195.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74050 (0x12142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 11 17:30:18 2025 GMT
Not After : Feb 13 17:30:18 2026 GMT
Subject: CN=67ab892d-bf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:fd:ea:4f:49:d2:0e:a5:c5:5a:43:6e:6a:
43:ce:cb:37:e7:e0:38:d5:f1:0b:32:98:01:c2:04:
2d:d4:c0:2e:71:21:2b:cc:af:5f:f1:ba:08:1b:86:
2c:18:8c:b4:63:31:d2:e6:9e:e5:0c:54:0d:36:a4:
80:ee:d1:f4:a5:09:dc:f3:a1:31:3d:2c:a9:37:31:
24:ee:6f:6d:04:56:39:d1:3f:2c:43:b6:f7:e4:1b:
14:42:b7:b2:a6:c6:db:63:59:e2:6d:aa:22:51:37:
d6:30:c3:ee:cd:03:cd:ea:97:06:d0:4e:6c:e3:c8:
94:3b:5a:00:a8:0e:a2:29:70:f6:3d:a9:fb:84:d5:
90:2e:99:f7:58:bf:5d:4e:b3:da:db:bd:4b:b6:ad:
95:56:0d:72:1f:30:90:15:11:82:b6:65:a3:9a:39:
3a:07:dd:10:09:aa:32:20:71:98:b6:65:9a:40:eb:
db:7d:89:32:88:dd:83:e4:b1:c0:d0:d7:fc:88:ac:
49:20:1f:92:67:a6:03:14:13:05:37:42:3d:44:e0:
39:cb:55:a3:76:2e:59:77:53:ec:be:23:21:a1:ac:
f0:07:32:c2:7b:04:5e:ba:7e:57:e0:e6:88:9d:42:
e7:78:76:55:88:6e:19:c3:45:c7:87:30:0a:7d:9e:
d4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C0:41:19:13:DE:A6:24:06:6B:95:31:93:51:46:60:28:AC:3E:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEABA954E89D11EFA342B287762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:fe:50:a9:f6:71:cf:db:5a:05:ad:25:12:57:c3:ec:64:17:
6e:fd:b8:ad:b1:2c:ed:27:a0:b0:ac:2c:7e:28:38:93:52:9f:
76:21:c9:d9:47:c4:03:f4:d2:c6:53:73:bd:39:66:d7:bd:35:
20:92:2a:f3:ab:8e:cb:42:52:1d:50:3d:b0:72:d3:2d:37:5f:
1c:b7:50:42:f0:df:fc:98:81:cd:5a:a5:47:f3:5a:5c:4f:a0:
6d:e3:a7:0d:e6:c1:eb:99:83:4b:43:10:f7:04:32:88:98:5c:
34:f1:41:45:45:16:9e:4d:70:d2:b2:1c:ba:7f:14:52:da:e4:
f1:f6:3f:12:e4:0c:44:01:dd:5a:11:73:93:da:47:a7:82:75:
77:e0:e4:a2:e5:1e:8f:bc:c1:49:21:2e:7f:86:f8:fc:1a:f1:
a0:eb:18:b4:3f:01:70:b7:97:95:ab:9c:2c:b4:7b:91:dd:b1:
dd:e5:29:c1:ff:34:ad:f6:04:e5:27:cd:2a:67:48:d6:7c:40:
a1:3b:49:d5:d8:a7:ba:36:32:41:32:d8:3f:45:40:dd:8f:92:
e1:a9:85:95:b7:34:5e:1f:63:5e:67:e8:32:09:5f:ae:8d:8a:
e2:27:be:9d:4d:11:cf:16:bb:b1:00:fa:f0:80:28:66:ff:a3:
42:98:25:c0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASFCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjExMTczMDE4WhcNMjYwMjEzMTczMDE4WjAYMRYw
FAYDVQQDEw02N2FiODkyZC1iZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqCv96k9J0g6lxVpDbmpDzss35+A41fELMpgBwgQt1MAucSErzK9f8boI
G4YsGIy0YzHS5p7lDFQNNqSA7tH0pQnc86ExPSypNzEk7m9tBFY50T8sQ7b35BsU
QreypsbbY1nibaoiUTfWMMPuzQPN6pcG0E5s48iUO1oAqA6iKXD2Pan7hNWQLpn3
WL9dTrPa271Ltq2VVg1yHzCQFRGCtmWjmjk6B90QCaoyIHGYtmWaQOvbfYkyiN2D
5LHA0Nf8iKxJIB+SZ6YDFBMFN0I9ROA5y1Wjdi5Zd1PsviMhoazwBzLCewReun5X
4OaInULneHZViG4Zw0XHhzAKfZ7UYQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH7A
QRkT3qYkBmuVMZNRRmAorD65MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERUFCQTk1NEU4OUQxMUVGQTM0MkIyODc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcMBMA0GCSqGSIb3DQEBCwUA
A4IBAQCy/lCp9nHP21oFrSUSV8PsZBdu/bitsSztJ6CwrCx+KDiTUp92IcnZR8QD
9NLGU3O9OWbXvTUgkirzq47LQlIdUD2wctMtN18ct1BC8N/8mIHNWqVH81pcT6Bt
46cN5sHrmYNLQxD3BDKImFw08UFFRRaeTXDSshy6fxRS2uTx9j8S5AxEAd1aEXOT
2kengnV34OSi5R6PvMFJIS5/hvj8GvGg6xi0PwFwt5eVq5wstHuR3bHd5SnB/zSt
9gTlJ80qZ0jWfEChO0nV2Ke6NjJBMtg/RUDdj5LhqYWVtzReH2NeZ+gyCV+ujYri
J76dTRHPFruxAPrwgChm/6NCmCXA
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:55 2025 by rpki-client