Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F0BD570DB0E11EFB8FDF45C762E951A.roa
File: 1F0BD570DB0E11EFB8FDF45C762E951A.roa (raw, json)
Hash identifier: 8RpWU3DK7m94oUDp5kRhzas1NHOtyDc6AjreTbfxn2k=
Subject key identifier: D3:58:3B:D2:46:66:43:9D:1C:64:26:19:D1:E0:C5:95:F1:E8:71:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011217
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F0BD570DB0E11EFB8FDF45C762E951A.roa
Signing time: Sat 25 Jan 2025 11:18:37 +0000
ROA not before: Sat 25 Jan 2025 11:18:33 +0000
ROA not after: Sun 23 Feb 2025 11:18:33 +0000
asID: 44559
IP address blocks: 45.199.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70167 (0x11217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 11:18:33 2025 GMT
Not After : Feb 23 11:18:33 2025 GMT
Subject: CN=6794c88d-8cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:1a:06:d0:f1:27:7d:96:44:c4:93:f8:4c:
b4:0b:0d:33:7f:a3:9f:40:5f:93:ea:dc:b8:48:61:
f4:9c:a6:f0:dc:59:9e:e6:5e:99:7c:42:91:a2:77:
98:38:e1:ff:1b:a1:2a:a9:82:64:3d:e8:52:c5:23:
de:08:b7:e7:4d:07:a1:87:92:98:e4:e4:00:ac:ed:
6e:04:2f:b6:86:21:09:e9:09:de:60:35:c3:13:0f:
2e:71:73:10:98:72:df:b1:cc:4a:24:8d:b9:2e:24:
19:23:b5:18:86:5f:b3:ae:76:4b:85:5b:9c:64:15:
05:e3:f7:36:fc:e9:ae:8a:a5:31:bd:db:0a:5a:71:
79:d8:de:80:c6:e8:d6:d7:2f:7f:14:37:ec:02:7f:
2e:f8:38:ee:8d:94:10:a3:50:f7:51:d2:ed:0d:38:
c2:3b:63:1f:10:b8:0f:42:aa:07:50:a2:3c:8f:bd:
d9:d0:db:7e:9d:e4:e3:62:7e:cf:32:6b:0d:ca:8e:
dc:43:3b:52:77:00:3e:84:99:2b:e2:7b:b0:d1:23:
bc:18:e0:48:e1:d8:79:9c:d6:90:e7:d9:72:01:f3:
4b:dc:0c:2f:7c:bc:bc:03:c6:6e:e9:d6:27:7f:59:
1a:87:ed:f3:53:a0:1c:98:77:bf:e8:d4:03:7d:b7:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:58:3B:D2:46:66:43:9D:1C:64:26:19:D1:E0:C5:95:F1:E8:71:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F0BD570DB0E11EFB8FDF45C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:2f:80:16:b6:98:85:0c:d1:be:14:63:7e:a6:6a:f7:01:85:
a5:2a:39:e4:82:7f:84:fd:e9:ff:33:37:51:3a:a7:db:70:3e:
6f:c8:ee:a1:93:84:e2:fa:29:00:32:46:6a:2c:0a:b4:95:ec:
55:7c:5a:ef:90:f5:44:98:db:5c:d8:2f:96:28:a6:50:ea:3a:
d1:98:3f:a0:64:e4:65:d5:34:fa:40:1d:49:20:f3:56:8b:0e:
20:86:96:7b:23:3b:71:fa:ed:41:ee:8c:ea:f4:e4:46:04:42:
57:89:27:76:2f:be:47:c9:e9:38:0f:4a:3e:37:26:c0:0a:9b:
c0:16:b0:de:b9:9d:8a:4a:6a:7b:fc:3d:0f:e4:87:d4:f5:b0:
d5:e5:90:41:e2:0d:71:b7:c2:63:c3:51:6d:48:99:1e:dd:a1:
e9:a1:0e:b6:0b:81:8c:8a:2a:71:ee:53:db:64:8a:c7:31:31:
ac:71:1d:7e:91:25:7d:f6:30:82:80:ab:42:78:4e:cf:98:2d:
95:40:d7:bd:3f:42:ee:c0:c6:71:79:e9:ba:4e:75:50:0a:7c:
a6:ae:38:1b:20:87:73:c6:b4:fe:e8:b3:9b:34:7a:4e:61:44:
41:03:a9:cb:e6:64:b4:1a:dd:1f:5c:03:3d:9f:b1:7c:17:1d:
03:b2:b0:e1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARIXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTExODMzWhcNMjUwMjIzMTExODMzWjAYMRYw
FAYDVQQDEw02Nzk0Yzg4ZC04Y2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoXIaBtDxJ32WRMST+Ey0Cw0zf6OfQF+T6ty4SGH0nKbw3Fme5l6ZfEKR
oneYOOH/G6EqqYJkPehSxSPeCLfnTQehh5KY5OQArO1uBC+2hiEJ6QneYDXDEw8u
cXMQmHLfscxKJI25LiQZI7UYhl+zrnZLhVucZBUF4/c2/OmuiqUxvdsKWnF52N6A
xujW1y9/FDfsAn8u+DjujZQQo1D3UdLtDTjCO2MfELgPQqoHUKI8j73Z0Nt+neTj
Yn7PMmsNyo7cQztSdwA+hJkr4nuw0SO8GOBI4dh5nNaQ59lyAfNL3AwvfLy8A8Zu
6dYnf1kah+3zU6AcmHe/6NQDfbdLIQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNNY
O9JGZkOdHGQmGdHgxZXx6HG0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRjBCRDU3MERCMEUxMUVGQjhGREY0NUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfVMA0GCSqGSIb3DQEBCwUA
A4IBAQAuL4AWtpiFDNG+FGN+pmr3AYWlKjnkgn+E/en/MzdROqfbcD5vyO6hk4Ti
+ikAMkZqLAq0lexVfFrvkPVEmNtc2C+WKKZQ6jrRmD+gZORl1TT6QB1JIPNWiw4g
hpZ7Iztx+u1B7ozq9ORGBEJXiSd2L75Hyek4D0o+NybACpvAFrDeuZ2KSmp7/D0P
5IfU9bDV5ZBB4g1xt8Jjw1FtSJke3aHpoQ62C4GMiipx7lPbZIrHMTGscR1+kSV9
9jCCgKtCeE7PmC2VQNe9P0LuwMZxeem6TnVQCnymrjgbIIdzxrT+6LObNHpOYURB
A6nL5mS0Gt0fXAM9n7F8Fx0DsrDh
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:25 2025 by rpki-client