Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC7F54FAFF1C11EF9132A4BD762E951A.roa
File: EC7F54FAFF1C11EF9132A4BD762E951A.roa (raw, json)
Hash identifier: 7qfq8XCKM+WVovkQVXZKX/zS1dIOqoCG1vFQUI0zQE8=
Subject key identifier: F4:BD:C3:19:50:A1:AE:3B:7E:B2:C2:13:6F:C4:74:BC:A3:55:4C:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014514
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC7F54FAFF1C11EF9132A4BD762E951A.roa
Signing time: Wed 12 Mar 2025 08:35:16 +0000
ROA not before: Wed 12 Mar 2025 08:35:10 +0000
ROA not after: Sun 20 Apr 2025 08:35:10 +0000
asID: 214413
IP address blocks: 45.194.87.0/24 maxlen: 24
45.194.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83220 (0x14514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 08:35:10 2025 GMT
Not After : Apr 20 08:35:10 2025 GMT
Subject: CN=67d14744-f6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:5b:53:8c:14:d8:4d:ab:c4:ae:9b:7a:42:
a4:0f:9d:ef:38:39:8c:93:14:a0:68:e8:a6:d8:c8:
20:e1:ec:79:0b:f0:96:ec:10:cc:95:02:7a:02:12:
5c:75:4a:16:30:50:04:b8:56:5f:cc:df:e5:fb:7d:
aa:99:f8:96:aa:c6:55:08:29:d7:59:db:81:c2:48:
cc:6c:8f:ea:fb:41:68:cf:9e:07:41:96:9c:b7:e1:
4f:da:18:73:99:c3:01:b0:39:51:0a:e6:a2:3c:d6:
90:63:2c:29:32:8f:2d:5b:a1:c6:1e:a2:c7:73:c1:
a8:fd:5a:b5:3b:97:21:38:33:fd:ae:1f:78:2c:e5:
83:fb:9f:82:0f:f4:94:48:47:8a:f3:ee:b3:e3:90:
92:79:68:db:c2:6f:97:26:de:f6:2c:56:1f:d4:47:
41:a9:82:4b:32:6c:fe:e5:a6:db:ba:19:93:fa:76:
52:d3:62:e4:1f:f5:9c:27:2b:97:2e:fe:84:60:47:
c7:7d:7c:f9:41:ad:9b:de:0f:2b:e7:b8:d4:9c:42:
19:43:1b:79:d6:0a:13:c8:f9:65:b8:d2:05:42:e5:
fc:79:5f:04:fe:c7:e8:4d:0f:d2:4f:80:c2:d7:9d:
58:5e:ea:ab:ac:35:96:54:f5:ae:e3:74:4c:26:19:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BD:C3:19:50:A1:AE:3B:7E:B2:C2:13:6F:C4:74:BC:A3:55:4C:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC7F54FAFF1C11EF9132A4BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.87.0/24
45.194.95.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ce:4c:d8:f9:58:38:b6:11:21:3f:e9:db:d4:e3:3b:72:aa:
57:e5:85:dd:74:f8:d0:ed:2a:5a:5d:f4:95:f3:66:f9:da:e0:
30:89:ca:9e:43:19:c1:89:1f:8d:bd:9d:35:80:5e:67:40:eb:
24:1e:47:ec:3b:4e:90:77:e9:83:af:32:79:ba:1f:7b:d2:cc:
ee:42:40:75:85:5a:ca:ee:8d:72:f5:d1:f5:67:8f:12:af:8c:
ee:cd:86:f3:27:e3:ae:7d:01:15:f2:2c:60:a0:a9:81:d9:7b:
9c:7d:a0:00:60:90:1b:9b:8b:39:f3:d5:fd:72:30:41:93:a0:
c3:55:16:d7:8e:b1:7f:74:07:2d:b2:9f:dc:58:65:32:96:b1:
12:51:f6:04:f7:a9:d9:32:aa:a0:44:7b:28:1d:a8:f9:54:34:
12:a0:38:c5:f1:9d:f5:32:d0:a4:55:89:d9:b3:18:ad:43:2c:
96:f7:3e:f3:05:f4:67:7a:3a:8a:52:4d:69:7a:f5:e3:a1:d5:
53:a4:d5:f4:c8:7c:23:65:0c:13:ec:f8:11:81:5b:5f:36:de:
77:e2:d6:12:aa:7d:c0:bc:b9:26:fe:90:eb:f3:4f:3b:21:a2:
c4:dd:44:04:54:78:98:9e:07:49:b9:17:e2:17:5a:43:4d:66:
7c:84:23:3c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAUUUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzEyMDgzNTEwWhcNMjUwNDIwMDgzNTEwWjAYMRYw
FAYDVQQDEw02N2QxNDc0NC1mNmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtiVbU4wU2E2rxK6bekKkD53vODmMkxSgaOim2Mgg4ex5C/CW7BDMlQJ6
AhJcdUoWMFAEuFZfzN/l+32qmfiWqsZVCCnXWduBwkjMbI/q+0Foz54HQZact+FP
2hhzmcMBsDlRCuaiPNaQYywpMo8tW6HGHqLHc8Go/Vq1O5chODP9rh94LOWD+5+C
D/SUSEeK8+6z45CSeWjbwm+XJt72LFYf1EdBqYJLMmz+5abbuhmT+nZS02LkH/Wc
JyuXLv6EYEfHfXz5Qa2b3g8r57jUnEIZQxt51goTyPlluNIFQuX8eV8E/sfoTQ/S
T4DC151YXuqrrDWWVPWu43RMJhmSOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPS9
wxlQoa47frLCE2/EdLyjVUxLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQzdGNTRGQUZGMUMxMUVGOTEzMkE0QkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcJXAwQALcJfMA0GCSqGSIb3
DQEBCwUAA4IBAQCEzkzY+Vg4thEhP+nb1OM7cqpX5YXddPjQ7SpaXfSV82b52uAw
icqeQxnBiR+NvZ01gF5nQOskHkfsO06Qd+mDrzJ5uh970szuQkB1hVrK7o1y9dH1
Z48Sr4zuzYbzJ+OufQEV8ixgoKmB2XucfaAAYJAbm4s589X9cjBBk6DDVRbXjrF/
dActsp/cWGUylrESUfYE96nZMqqgRHsoHaj5VDQSoDjF8Z31MtCkVYnZsxitQyyW
9z7zBfRnejqKUk1pevXjodVTpNX0yHwjZQwT7PgRgVtfNt534tYSqn3AvLkm/pDr
8087IaLE3UQEVHiYngdJuRfiF1pDTWZ8hCM8
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:20 2025 by rpki-client