Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6CECF9AF43511EF864A4E80762E951A.roa
File: F6CECF9AF43511EF864A4E80762E951A.roa (raw, json)
Hash identifier: LAdKOc9MSa1KSuEDIiYkmTzZCc95fD9Pit3OgbSl84w=
Subject key identifier: A2:93:6E:54:0F:11:D6:10:4C:3E:51:5E:58:E5:93:E0:4F:FD:21:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6CECF9AF43511EF864A4E80762E951A.roa
Signing time: Wed 26 Feb 2025 11:36:48 +0000
ROA not before: Wed 26 Feb 2025 11:36:45 +0000
ROA not after: Sat 19 Feb 2028 11:36:45 +0000
asID: 17561
IP address blocks: 45.196.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78296 (0x131d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:36:45 2025 GMT
Not After : Feb 19 11:36:45 2028 GMT
Subject: CN=67befcd0-b126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:c4:c9:cd:7d:df:5c:3b:d9:81:90:f8:41:
5c:2d:ae:af:15:53:69:1e:59:f4:aa:35:39:71:1c:
18:cc:33:08:64:e4:4d:bc:95:c9:c9:87:77:99:f2:
0b:02:bb:b5:7a:e0:f8:af:b2:be:8b:d5:66:29:0f:
c0:f1:d9:f8:31:d5:f3:bd:00:b6:6b:f4:b5:02:c8:
90:37:65:c1:d6:4b:84:d2:cf:02:1a:63:54:87:31:
79:43:f7:69:c0:6c:3a:1d:03:8d:81:c5:9a:f7:45:
0a:62:fa:b1:79:a6:a4:71:63:dd:66:b0:eb:8f:00:
20:19:7a:2c:38:dd:0b:fa:ed:67:91:73:3a:fd:8f:
02:bf:ab:04:12:38:7b:ea:5d:cb:a6:4e:a8:59:24:
15:41:ad:cd:60:00:08:94:cc:a4:31:78:37:a1:46:
09:13:6d:dc:25:15:c2:23:17:8f:8e:9c:f8:97:82:
9c:56:a2:f0:84:29:bf:67:4a:4a:60:41:54:0a:7a:
54:35:1c:bf:ea:a1:40:c2:3f:84:6e:82:18:b4:dd:
1e:fc:c5:e3:d4:7a:f9:dc:23:34:0a:27:7c:1a:cd:
12:95:d3:57:ca:86:13:d0:11:8e:e0:38:19:5f:8f:
c0:55:6c:73:cd:f8:ba:29:ae:8b:87:61:37:a8:0f:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:93:6E:54:0F:11:D6:10:4C:3E:51:5E:58:E5:93:E0:4F:FD:21:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6CECF9AF43511EF864A4E80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.7.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:97:45:67:76:7f:9c:11:2c:07:9b:3c:9c:3b:54:e2:5b:68:
ae:7f:29:40:73:73:35:db:d2:45:f2:7c:2f:55:bc:a5:06:d0:
3b:ee:f3:84:0b:3f:15:77:7d:92:16:bc:e7:91:eb:78:6d:e8:
3a:a4:cd:e4:f4:97:75:87:39:b7:fb:21:63:0a:c0:86:9a:1e:
ff:ef:ef:51:c6:b4:cf:83:8a:80:ca:0b:24:52:d2:78:99:03:
67:51:b4:21:8b:61:cf:0c:22:f3:f8:36:90:45:3d:08:1b:6e:
bc:0e:0f:2d:93:d8:e4:15:cd:6a:53:1e:0d:52:6c:49:71:0d:
17:6c:21:89:89:b9:a7:3a:0a:45:1b:2a:12:c6:cd:01:99:46:
b5:40:98:07:e2:8f:89:7b:1f:d1:00:92:e8:1b:c2:31:73:8c:
9c:ad:d5:7d:ef:28:35:8b:40:18:89:2c:eb:82:fd:e0:b2:7e:
73:f2:12:9c:7d:67:36:0c:85:84:57:89:ce:21:8b:5b:32:7c:
19:8d:71:3a:c4:75:92:3e:b0:a0:25:8e:12:ef:96:06:f5:f5:
da:a7:66:e9:e5:b5:4d:e7:c4:97:36:35:52:6b:4b:7c:ed:82:
e1:6b:13:d9:b5:bd:67:b4:27:88:e9:cd:50:8c:37:70:50:56:
a4:7b:eb:e1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATHYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTEzNjQ1WhcNMjgwMjE5MTEzNjQ1WjAYMRYw
FAYDVQQDEw02N2JlZmNkMC1iMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAziXEyc1931w72YGQ+EFcLa6vFVNpHln0qjU5cRwYzDMIZORNvJXJyYd3
mfILAru1euD4r7K+i9VmKQ/A8dn4MdXzvQC2a/S1AsiQN2XB1kuE0s8CGmNUhzF5
Q/dpwGw6HQONgcWa90UKYvqxeaakcWPdZrDrjwAgGXosON0L+u1nkXM6/Y8Cv6sE
Ejh76l3Lpk6oWSQVQa3NYAAIlMykMXg3oUYJE23cJRXCIxePjpz4l4KcVqLwhCm/
Z0pKYEFUCnpUNRy/6qFAwj+EboIYtN0e/MXj1Hr53CM0Cid8Gs0SldNXyoYT0BGO
4DgZX4/AVWxzzfi6Ka6Lh2E3qA8MMQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKKT
blQPEdYQTD5RXljlk+BP/SFOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNkNFQ0Y5QUY0MzUxMUVGODY0QTRFODA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcQHMA0GCSqGSIb3DQEBCwUA
A4IBAQB8l0Vndn+cESwHmzycO1TiW2iufylAc3M129JF8nwvVbylBtA77vOECz8V
d32SFrznket4beg6pM3k9Jd1hzm3+yFjCsCGmh7/7+9RxrTPg4qAygskUtJ4mQNn
UbQhi2HPDCLz+DaQRT0IG268Dg8tk9jkFc1qUx4NUmxJcQ0XbCGJibmnOgpFGyoS
xs0BmUa1QJgH4o+Jex/RAJLoG8Ixc4ycrdV97yg1i0AYiSzrgv3gsn5z8hKcfWc2
DIWEV4nOIYtbMnwZjXE6xHWSPrCgJY4S75YG9fXap2bp5bVN58SXNjVSa0t87YLh
axPZtb1ntCeI6c1QjDdwUFake+vh
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:22 2025 by rpki-client