Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/188DC772DFF411EF9EF1AA60762E951A.roa
File: 188DC772DFF411EF9EF1AA60762E951A.roa (raw, json)
Hash identifier: h6TOWW6kX3SZftn0zv8GlG5lCtjPEvo6gEpwReuUzOc=
Subject key identifier: DD:04:C1:25:C2:94:42:06:E4:94:FF:F0:24:F6:91:2C:59:DD:3B:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01168F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/188DC772DFF411EF9EF1AA60762E951A.roa
Signing time: Fri 31 Jan 2025 16:54:55 +0000
ROA not before: Fri 31 Jan 2025 16:54:51 +0000
ROA not after: Tue 11 Feb 2025 16:54:51 +0000
asID: 138985
IP address blocks: 45.199.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71311 (0x1168f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 16:54:51 2025 GMT
Not After : Feb 11 16:54:51 2025 GMT
Subject: CN=679d005f-c587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:18:f6:ae:59:bb:ba:20:0a:a8:b1:10:fd:ad:
ab:1d:fb:95:15:81:d8:c9:8a:34:8d:9c:cb:23:89:
18:60:db:1d:1e:4b:a5:6f:eb:09:f7:ae:80:9e:cc:
8e:3e:47:03:3a:9c:04:67:8c:1d:c8:73:1b:5e:cf:
65:ac:27:91:46:f6:ba:44:65:64:75:93:b6:ce:aa:
4b:7f:28:1b:68:a3:f8:b9:0a:87:bd:9c:b0:b1:4f:
b3:65:51:d8:93:48:09:29:cd:d5:c2:11:22:23:f3:
48:a4:b3:43:cb:03:72:b2:ef:67:17:91:af:53:53:
bd:ef:db:66:80:f2:c5:dc:ec:70:d2:b3:9c:77:d2:
b6:cf:71:be:59:9d:22:75:f0:2e:e8:9b:48:12:c5:
73:97:69:94:d2:b8:06:71:59:8b:15:92:95:65:7c:
90:6e:77:10:08:0d:ab:df:39:10:5f:ff:2a:b2:d1:
66:4b:9a:37:1b:0e:51:05:19:fb:0b:e7:e3:c0:08:
9f:d6:20:36:ed:87:0e:48:97:59:69:84:b3:3c:0c:
75:12:94:0c:00:f9:5f:ed:5a:05:4c:98:c2:08:eb:
09:f6:1a:eb:cf:12:db:e5:8a:bc:c4:59:2a:bd:7d:
ec:44:38:92:0b:32:fe:4c:fa:27:03:a3:52:fe:46:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:04:C1:25:C2:94:42:06:E4:94:FF:F0:24:F6:91:2C:59:DD:3B:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/188DC772DFF411EF9EF1AA60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.187.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:63:e2:81:bc:ba:72:09:ad:58:98:f7:df:6a:8f:77:8b:aa:
7a:b0:31:b5:16:5b:97:72:b4:34:0b:4e:be:d5:b3:b7:05:e4:
f6:cd:e3:7f:ee:cf:22:96:7c:73:55:32:b2:5c:ec:4c:2e:82:
a9:e2:ee:db:94:a1:2a:26:d9:77:44:90:91:88:47:53:97:c3:
5b:d0:1d:54:65:9a:ed:6b:d9:3e:b1:a9:5c:ed:6d:f9:1e:da:
ef:da:78:81:22:3b:5c:c0:ce:72:3b:e2:bd:ed:d3:7b:90:fc:
6d:4b:37:48:cc:4b:80:e9:1f:60:02:a4:97:db:14:f9:63:c0:
6e:01:97:5c:c8:03:0c:d3:aa:ef:fd:37:92:6d:55:f4:3f:87:
ca:68:b3:17:71:2c:aa:a3:cc:15:c7:ee:69:fb:45:6d:54:f6:
07:20:65:c9:48:a5:3a:00:0c:cd:66:8e:f3:b8:9f:4d:32:85:
de:f1:68:6c:54:38:a4:88:fc:3d:f0:83:0d:af:ca:09:8b:92:
1d:70:c8:c7:4d:30:15:85:be:8f:56:24:66:9a:6b:0a:ff:21:
42:a3:ad:32:df:25:1b:74:cd:4c:fd:6a:81:9a:0a:ba:e6:16:
15:70:d2:fe:11:9a:ee:19:0b:47:ef:c7:ae:e1:4d:f1:70:29:
08:c3:fc:d7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARaPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTMxMTY1NDUxWhcNMjUwMjExMTY1NDUxWjAYMRYw
FAYDVQQDEw02NzlkMDA1Zi1jNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2xj2rlm7uiAKqLEQ/a2rHfuVFYHYyYo0jZzLI4kYYNsdHkulb+sJ966A
nsyOPkcDOpwEZ4wdyHMbXs9lrCeRRva6RGVkdZO2zqpLfygbaKP4uQqHvZywsU+z
ZVHYk0gJKc3VwhEiI/NIpLNDywNysu9nF5GvU1O979tmgPLF3Oxw0rOcd9K2z3G+
WZ0idfAu6JtIEsVzl2mU0rgGcVmLFZKVZXyQbncQCA2r3zkQX/8qstFmS5o3Gw5R
BRn7C+fjwAif1iA27YcOSJdZaYSzPAx1EpQMAPlf7VoFTJjCCOsJ9hrrzxLb5Yq8
xFkqvX3sRDiSCzL+TPonA6NS/kbfZQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN0E
wSXClEIG5JT/8CT2kSxZ3TsHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xODhEQzc3MkRGRjQxMUVGOUVGMUFBNjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALce7MA0GCSqGSIb3DQEBCwUA
A4IBAQB+Y+KBvLpyCa1YmPffao93i6p6sDG1FluXcrQ0C06+1bO3BeT2zeN/7s8i
lnxzVTKyXOxMLoKp4u7blKEqJtl3RJCRiEdTl8Nb0B1UZZrta9k+salc7W35Htrv
2niBIjtcwM5yO+K97dN7kPxtSzdIzEuA6R9gAqSX2xT5Y8BuAZdcyAMM06rv/TeS
bVX0P4fKaLMXcSyqo8wVx+5p+0VtVPYHIGXJSKU6AAzNZo7zuJ9NMoXe8WhsVDik
iPw98IMNr8oJi5IdcMjHTTAVhb6PViRmmmsK/yFCo60y3yUbdM1M/WqBmgq65hYV
cNL+EZruGQtH78eu4U3xcCkIw/zX
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:26:30 2025 by rpki-client