Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC393C88F39411EF91C5B8A8762E951A.roa
File: EC393C88F39411EF91C5B8A8762E951A.roa (raw, json)
Hash identifier: QBH4IDDemuG0Hg8TtJ2GzJt15lUPGhrTtLQsRKE/0PU=
Subject key identifier: 88:96:C9:43:E9:B4:F8:65:DC:59:72:8D:D8:2F:73:99:E4:3E:7F:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC393C88F39411EF91C5B8A8762E951A.roa
Signing time: Tue 25 Feb 2025 16:24:01 +0000
ROA not before: Tue 25 Feb 2025 16:23:58 +0000
ROA not after: Wed 09 Apr 2025 16:23:58 +0000
asID: 63139
IP address blocks: 45.197.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77463 (0x12e97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 16:23:58 2025 GMT
Not After : Apr 9 16:23:58 2025 GMT
Subject: CN=67bdeea1-36b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:03:6a:e0:4f:99:16:c6:5b:3e:05:d0:0a:9a:
7c:d3:c2:06:92:fa:0b:37:27:38:75:36:eb:ad:8f:
0c:77:e8:f0:13:a1:f4:29:cb:77:9d:6e:4e:53:95:
c5:33:0e:90:fe:4d:86:41:3f:3e:e2:0f:49:59:bd:
81:b2:c2:9e:a7:fe:6a:fb:36:73:60:63:02:91:1d:
56:61:09:8c:1c:7e:a8:52:06:6c:7d:bd:ba:25:b5:
d3:a9:a6:25:6e:64:7a:21:06:e1:86:63:4f:5d:16:
a4:35:15:7a:32:d5:14:bc:fd:69:c1:b4:b6:53:23:
ef:ef:97:ec:ab:1e:ff:13:49:7e:6f:4a:74:57:43:
07:4b:d8:f8:83:c5:e5:32:82:53:45:6c:27:44:77:
28:56:f7:d6:af:d5:8e:44:c7:f2:9a:f1:68:ed:a0:
c9:ce:9d:df:c2:62:a6:eb:b7:17:25:63:71:5d:ea:
c0:42:2e:09:0c:6a:02:bc:72:51:2b:b7:ce:da:3f:
68:83:70:0c:02:b0:55:5e:9e:91:f8:b5:f7:1c:72:
4b:53:be:47:55:58:de:26:6f:e1:fd:b4:ec:41:35:
c6:35:d3:bb:bc:7f:54:2f:bf:4f:83:c4:3c:bd:fc:
d9:d0:47:a3:fb:8b:3a:1b:08:dc:7c:bb:7e:5e:17:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:96:C9:43:E9:B4:F8:65:DC:59:72:8D:D8:2F:73:99:E4:3E:7F:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC393C88F39411EF91C5B8A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.120.0/24
Signature Algorithm: sha256WithRSAEncryption
63:44:48:0b:7f:90:63:c3:b7:2d:00:62:3b:2b:c0:91:d9:a8:
d7:a8:58:23:bc:b7:4a:56:6e:50:ee:4a:d5:29:8d:30:8b:da:
20:be:39:f1:a4:4e:a3:76:fe:e0:bf:f6:22:1e:90:2b:d3:ab:
e0:03:bd:83:a0:db:1d:43:e2:bf:c2:e9:59:f9:8f:ea:83:18:
b7:bf:8b:78:65:d3:e1:99:4c:ea:fd:be:71:18:c4:50:ec:56:
9c:87:4c:72:a8:6e:78:b7:a4:89:08:d1:59:f9:bc:22:7b:ab:
fa:f6:fe:f0:f5:37:c9:91:59:40:5a:b3:71:bb:54:2e:50:fd:
c3:dd:b1:57:91:1c:ad:87:6a:98:da:7a:67:6e:d9:b1:72:f3:
fc:69:64:93:a3:5a:75:32:6d:05:d4:44:4b:0c:14:e8:f0:9b:
04:20:ff:a1:ac:fa:9e:eb:1d:91:51:c9:5f:50:39:3c:71:6b:
5f:b7:45:d7:ee:d5:d7:18:db:7b:38:47:4b:a9:57:97:54:61:
68:0b:41:e3:d9:a6:17:4e:b3:38:c8:b9:af:c4:b8:11:ce:e8:
99:38:26:66:66:0b:0c:21:93:fc:5e:9c:29:3f:03:59:98:a9:
ff:26:9c:c2:80:b2:03:28:31:8a:82:bb:89:3d:47:60:a2:5f:
9d:5c:bf:da
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS6XMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MTYyMzU4WhcNMjUwNDA5MTYyMzU4WjAYMRYw
FAYDVQQDEw02N2JkZWVhMS0zNmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7gNq4E+ZFsZbPgXQCpp808IGkvoLNyc4dTbrrY8Md+jwE6H0Kct3nW5O
U5XFMw6Q/k2GQT8+4g9JWb2BssKep/5q+zZzYGMCkR1WYQmMHH6oUgZsfb26JbXT
qaYlbmR6IQbhhmNPXRakNRV6MtUUvP1pwbS2UyPv75fsqx7/E0l+b0p0V0MHS9j4
g8XlMoJTRWwnRHcoVvfWr9WORMfymvFo7aDJzp3fwmKm67cXJWNxXerAQi4JDGoC
vHJRK7fO2j9og3AMArBVXp6R+LX3HHJLU75HVVjeJm/h/bTsQTXGNdO7vH9UL79P
g8Q8vfzZ0Eej+4s6GwjcfLt+XhciAQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIiW
yUPptPhl3Flyjdgvc5nkPn+kMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQzM5M0M4OEYzOTQxMUVGOTFDNUI4QTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcV4MA0GCSqGSIb3DQEBCwUA
A4IBAQBjREgLf5Bjw7ctAGI7K8CR2ajXqFgjvLdKVm5Q7krVKY0wi9ogvjnxpE6j
dv7gv/YiHpAr06vgA72DoNsdQ+K/wulZ+Y/qgxi3v4t4ZdPhmUzq/b5xGMRQ7Fac
h0xyqG54t6SJCNFZ+bwie6v69v7w9TfJkVlAWrNxu1QuUP3D3bFXkRyth2qY2npn
btmxcvP8aWSTo1p1Mm0F1ERLDBTo8JsEIP+hrPqe6x2RUclfUDk8cWtft0XX7tXX
GNt7OEdLqVeXVGFoC0Hj2aYXTrM4yLmvxLgRzuiZOCZmZgsMIZP8XpwpPwNZmKn/
JpzCgLIDKDGKgruJPUdgol+dXL/a
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:13 2025 by rpki-client