Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0678C2EDEE611EF9FC2F565762E951A.roa
File: E0678C2EDEE611EF9FC2F565762E951A.roa (raw, json)
Hash identifier: Amd7+Stbr+ET2VBIS5fMm7usB7ipu3kT5r5DrzlDGaE=
Subject key identifier: C8:3A:79:7D:6B:A9:1D:87:8F:FD:D6:02:73:0C:AD:27:A4:5A:58:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0678C2EDEE611EF9FC2F565762E951A.roa
Signing time: Thu 30 Jan 2025 08:47:46 +0000
ROA not before: Thu 30 Jan 2025 08:47:42 +0000
ROA not after: Fri 21 Nov 2025 08:47:42 +0000
asID: 152686
IP address blocks: 45.198.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71093 (0x115b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 30 08:47:42 2025 GMT
Not After : Nov 21 08:47:42 2025 GMT
Subject: CN=679b3cb2-7ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:9c:00:48:15:2e:be:f9:70:48:47:61:8b:
c4:16:fb:70:16:64:f0:38:38:9e:8b:68:46:7a:e0:
39:86:98:71:40:eb:b8:0b:39:52:00:bd:7f:17:02:
4a:18:6f:da:df:13:6f:e3:16:33:fc:83:4b:9a:95:
19:ff:8d:58:6f:bc:d1:b9:bf:f7:34:dd:b7:27:0a:
3c:05:94:47:19:82:4a:ef:de:22:88:57:e4:90:09:
f2:fe:d4:48:cd:2d:a5:07:01:1f:58:aa:29:85:ec:
c4:0b:cd:07:88:94:ad:88:f7:42:f9:79:3b:32:6f:
d7:42:49:0d:8e:b7:78:1f:01:af:37:b4:f5:3a:3c:
d8:42:c1:4b:fa:18:8a:99:7c:76:99:6e:10:10:01:
82:06:a9:2e:32:82:38:a5:37:ce:90:f9:c7:25:51:
2c:5e:14:8d:dd:61:36:a1:a3:51:60:f4:76:eb:e0:
59:e8:7b:c8:13:42:ae:73:db:ea:10:7d:a1:d5:27:
94:e0:a9:cb:7b:67:d5:10:e1:c3:6b:72:aa:f5:a5:
87:7d:0a:59:4e:76:1d:8a:7f:cc:e9:48:ad:eb:20:
5e:88:b7:63:e1:5c:cf:88:62:46:f9:d7:55:cf:b5:
f2:81:31:8a:b9:10:f7:3c:74:69:21:27:a9:aa:ec:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3A:79:7D:6B:A9:1D:87:8F:FD:D6:02:73:0C:AD:27:A4:5A:58:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0678C2EDEE611EF9FC2F565762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:de:2e:09:4f:c7:4f:de:28:a1:a5:6a:6c:27:ef:d3:5b:96:
e8:5b:84:b3:7b:68:45:47:48:76:a8:4a:9c:67:0e:8d:80:4d:
bf:f4:68:b5:f7:ce:cd:ac:01:50:96:d8:47:54:b6:96:f6:bd:
7b:96:45:00:a6:41:6a:a5:a6:0d:0a:a3:80:f6:60:f9:32:fa:
56:b5:ec:72:a2:25:53:c1:e3:71:68:f7:fd:06:9f:29:e3:60:
1b:0c:9e:75:84:52:35:39:62:e7:e4:c4:7d:6b:18:35:75:d1:
d7:5e:c8:77:66:fe:32:0e:9d:bd:75:86:1b:f6:ad:9f:64:d0:
85:5d:71:38:7a:1a:c2:55:c9:bd:30:9f:cc:12:d4:9a:42:a6:
fb:5f:fb:55:ba:2d:3e:0f:a4:e3:98:f5:0e:94:8c:fd:9c:1e:
c5:d4:7b:8e:53:d9:10:a8:3e:f2:f6:8a:56:ab:f5:ec:a8:6a:
78:45:53:46:af:36:ff:12:74:2f:c1:5b:d0:91:49:67:cd:9e:
36:0b:c5:75:61:a0:92:0d:07:28:40:cb:15:09:26:fb:2e:c1:
bc:95:7e:f5:eb:7f:ab:c8:dc:aa:70:33:08:88:9e:fc:50:ec:
55:d2:8f:ce:77:49:dd:58:48:f2:48:61:d6:68:15:c1:80:d9:
b5:94:c2:c9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARW1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTMwMDg0NzQyWhcNMjUxMTIxMDg0NzQyWjAYMRYw
FAYDVQQDEw02NzliM2NiMi03ZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApPicAEgVLr75cEhHYYvEFvtwFmTwODiei2hGeuA5hphxQOu4CzlSAL1/
FwJKGG/a3xNv4xYz/INLmpUZ/41Yb7zRub/3NN23Jwo8BZRHGYJK794iiFfkkAny
/tRIzS2lBwEfWKophezEC80HiJStiPdC+Xk7Mm/XQkkNjrd4HwGvN7T1OjzYQsFL
+hiKmXx2mW4QEAGCBqkuMoI4pTfOkPnHJVEsXhSN3WE2oaNRYPR26+BZ6HvIE0Ku
c9vqEH2h1SeU4KnLe2fVEOHDa3Kq9aWHfQpZTnYdin/M6Uit6yBeiLdj4VzPiGJG
+ddVz7XygTGKuRD3PHRpISepquwoPwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMg6
eX1rqR2Hj/3WAnMMrSekWlgAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMDY3OEMyRURFRTYxMUVGOUZDMkY1NjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcbhMA0GCSqGSIb3DQEBCwUA
A4IBAQAr3i4JT8dP3iihpWpsJ+/TW5boW4Sze2hFR0h2qEqcZw6NgE2/9Gi1987N
rAFQlthHVLaW9r17lkUApkFqpaYNCqOA9mD5MvpWtexyoiVTweNxaPf9Bp8p42Ab
DJ51hFI1OWLn5MR9axg1ddHXXsh3Zv4yDp29dYYb9q2fZNCFXXE4ehrCVcm9MJ/M
EtSaQqb7X/tVui0+D6TjmPUOlIz9nB7F1HuOU9kQqD7y9opWq/XsqGp4RVNGrzb/
EnQvwVvQkUlnzZ42C8V1YaCSDQcoQMsVCSb7LsG8lX7163+ryNyqcDMIiJ78UOxV
0o/Od0ndWEjySGHWaBXBgNm1lMLJ
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:08 2025 by rpki-client