Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FDC7F26DB1411EFB896A084762E951A.roa
File: 1FDC7F26DB1411EFB896A084762E951A.roa (raw, json)
Hash identifier: DBEliBetJm7TJY9KztN1ESf1H4jtcDkg08EN6FAZQUM=
Subject key identifier: 09:C6:C5:C8:6D:01:B6:4A:42:6D:F7:73:C5:A5:D3:01:18:2E:08:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011233
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FDC7F26DB1411EFB896A084762E951A.roa
Signing time: Sat 25 Jan 2025 12:01:35 +0000
ROA not before: Sat 25 Jan 2025 12:01:32 +0000
ROA not after: Sun 23 Feb 2025 12:01:32 +0000
asID: 202656
IP address blocks: 45.200.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70195 (0x11233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 12:01:32 2025 GMT
Not After : Feb 23 12:01:32 2025 GMT
Subject: CN=6794d29f-b3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:16:5c:23:ed:e4:02:84:bf:70:48:1e:d1:
77:a3:96:d1:cf:39:e6:fa:96:c1:c4:5b:61:b7:03:
79:9d:92:eb:7b:d8:74:7a:70:a0:83:b2:c4:15:98:
6d:a8:e3:d1:cb:63:6b:77:d4:10:87:50:3d:80:a0:
d0:5e:f2:93:db:37:8c:f8:6f:73:da:77:d8:30:fd:
d5:fb:54:eb:97:11:68:11:3e:30:e8:90:38:43:99:
26:8e:ba:3e:05:28:df:c5:38:43:02:a6:41:e8:7f:
99:fe:bc:c0:e7:dd:65:e9:53:8e:f1:1c:21:f6:d0:
83:f7:57:65:9e:cc:c2:00:d7:28:4e:20:10:06:ee:
b6:1d:86:f4:8f:f3:9e:b9:61:f6:0c:9b:af:cf:79:
52:a5:37:48:08:9a:f0:fe:e7:bf:69:f6:9f:bb:31:
4c:43:01:09:b8:2b:4b:1f:09:ad:d6:bc:b0:ca:ba:
1f:07:90:1f:38:64:6d:fa:b8:83:1a:0e:2b:7f:53:
92:00:2c:3c:52:df:85:7a:e4:75:80:35:30:9d:77:
15:a8:58:e2:20:79:8d:07:fa:d4:a5:23:17:4b:b8:
5e:5a:18:bc:4f:04:95:43:98:be:54:9a:0d:b1:4a:
ae:37:d0:81:1d:55:fe:27:ba:db:48:1c:d2:51:d6:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C6:C5:C8:6D:01:B6:4A:42:6D:F7:73:C5:A5:D3:01:18:2E:08:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FDC7F26DB1411EFB896A084762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.163.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d4:5a:60:fe:e1:3f:41:06:84:66:90:83:e0:48:8d:63:58:
f2:50:3e:52:d1:3a:d0:04:38:3c:0f:c2:56:95:1e:a2:5f:1d:
96:9a:e5:09:ce:7a:67:9e:2a:60:7c:91:eb:b1:eb:bc:93:1c:
a5:2a:b8:48:ae:54:69:6e:8d:46:2a:ef:20:e6:17:ed:d1:87:
0a:95:87:51:e8:14:fd:c8:2f:f4:b0:9b:cf:e3:19:89:1e:f8:
28:c1:a8:8b:ac:fa:ac:55:c6:36:0b:6f:55:ba:11:b0:ce:d0:
2d:b4:54:e9:2f:7f:e8:f3:d3:aa:e0:99:e2:a8:98:e8:8d:5e:
3b:8b:39:b6:37:28:d4:10:95:cf:e4:7d:41:5f:0a:db:fd:a6:
db:3c:7c:80:fd:31:39:99:07:cb:23:fc:9a:81:ae:b9:27:2b:
6f:bc:64:39:db:4e:ef:ba:2a:84:85:62:f1:07:48:0c:42:85:
ae:5e:bf:0e:fe:69:24:00:4b:91:b6:46:7d:09:f5:18:4f:c3:
75:11:92:c6:91:09:ba:df:11:68:55:fd:42:28:8b:90:35:2c:
a6:da:b9:b2:e6:2f:92:88:a4:96:70:7d:88:37:11:72:e5:be:
43:09:13:47:95:e0:f9:6a:bb:43:8e:48:ad:d4:9f:62:74:03:
be:74:e2:70
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARIzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTIwMTMyWhcNMjUwMjIzMTIwMTMyWjAYMRYw
FAYDVQQDEw02Nzk0ZDI5Zi1iM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3IEWXCPt5AKEv3BIHtF3o5bRzznm+pbBxFthtwN5nZLre9h0enCgg7LE
FZhtqOPRy2Nrd9QQh1A9gKDQXvKT2zeM+G9z2nfYMP3V+1TrlxFoET4w6JA4Q5km
jro+BSjfxThDAqZB6H+Z/rzA591l6VOO8Rwh9tCD91dlnszCANcoTiAQBu62HYb0
j/OeuWH2DJuvz3lSpTdICJrw/ue/afafuzFMQwEJuCtLHwmt1rywyrofB5AfOGRt
+riDGg4rf1OSACw8Ut+FeuR1gDUwnXcVqFjiIHmNB/rUpSMXS7heWhi8TwSVQ5i+
VJoNsUquN9CBHVX+J7rbSBzSUdadxQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAnG
xchtAbZKQm33c8Wl0wEYLghyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRkRDN0YyNkRCMTQxMUVGQjg5NkEwODQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcijMA0GCSqGSIb3DQEBCwUA
A4IBAQAh1Fpg/uE/QQaEZpCD4EiNY1jyUD5S0TrQBDg8D8JWlR6iXx2WmuUJznpn
nipgfJHrseu8kxylKrhIrlRpbo1GKu8g5hft0YcKlYdR6BT9yC/0sJvP4xmJHvgo
waiLrPqsVcY2C29VuhGwztAttFTpL3/o89Oq4JniqJjojV47izm2NyjUEJXP5H1B
Xwrb/abbPHyA/TE5mQfLI/yaga65JytvvGQ5207vuiqEhWLxB0gMQoWuXr8O/mkk
AEuRtkZ9CfUYT8N1EZLGkQm63xFoVf1CKIuQNSym2rmy5i+SiKSWcH2INxFy5b5D
CRNHleD5artDjkit1J9idAO+dOJw
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:56 2025 by rpki-client