Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A2594E0DB5511EFB8D3D3B4762E951A.roa
File: 2A2594E0DB5511EFB8D3D3B4762E951A.roa (raw, json)
Hash identifier: BuZ6o39aV8KEO3BKGvvxHPWkAN9sBLh8FXnfmIJ6fl8=
Subject key identifier: BF:39:31:2E:B6:B2:F9:79:D9:3B:AD:AB:A6:D7:ED:EE:5D:42:A0:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0112E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A2594E0DB5511EFB8D3D3B4762E951A.roa
Signing time: Sat 25 Jan 2025 19:47:10 +0000
ROA not before: Sat 25 Jan 2025 19:47:06 +0000
ROA not after: Sun 09 Mar 2025 19:47:06 +0000
asID: 63139
IP address blocks: 45.197.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70373 (0x112e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 19:47:06 2025 GMT
Not After : Mar 9 19:47:06 2025 GMT
Subject: CN=67953fbe-ec23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:54:7c:c0:03:1b:c6:d5:ec:fc:70:d4:78:cb:
c1:64:a9:5d:83:76:d5:31:0b:20:7e:21:ab:48:b1:
f0:03:62:db:96:3f:2e:fa:de:55:e9:cd:9e:c4:1d:
c4:a4:74:4a:79:e4:f9:d3:33:24:d4:ac:22:28:7f:
1d:cb:04:81:5c:91:a7:75:0d:59:32:ff:44:5c:15:
ca:73:f4:23:14:88:40:57:5d:f6:c5:55:cd:3a:cc:
64:d8:77:eb:37:70:62:e0:e2:13:2d:e2:ef:60:60:
bd:4f:e7:b9:28:83:17:4d:df:ee:4d:4a:68:22:40:
cc:01:af:cf:d7:88:a2:4c:ca:f2:40:bf:17:e2:d9:
33:7e:b4:cc:e3:a7:6b:9f:c5:bd:90:e0:6c:0d:d1:
42:2c:ab:38:b1:5c:d6:6f:69:67:1f:ea:dc:db:06:
a7:f1:8a:14:84:99:00:1c:98:8b:8e:4f:62:fa:b3:
2e:dd:bd:d6:d4:92:e1:31:fe:50:39:54:ff:ab:21:
3b:38:fe:be:93:a0:b3:e6:f3:8f:35:a0:7f:3a:7f:
bc:0d:f4:a5:a4:40:e7:cc:f6:d0:94:c5:e1:4c:10:
2b:84:52:52:ee:ec:b9:e1:e6:8d:3e:cf:63:82:03:
43:ef:3e:a7:6f:89:47:ce:63:19:82:40:ac:f0:7c:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:39:31:2E:B6:B2:F9:79:D9:3B:AD:AB:A6:D7:ED:EE:5D:42:A0:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A2594E0DB5511EFB8D3D3B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:13:64:e9:4b:4f:e7:01:2c:76:bc:87:9b:fc:75:2a:5b:dd:
c3:b1:85:01:1b:29:31:cb:c3:ee:93:9e:38:8b:4d:5c:d0:13:
62:22:61:8c:73:78:a6:86:ce:9f:8b:fb:e4:4e:82:fd:f6:4e:
5c:54:90:de:35:78:a2:08:ef:28:2b:28:84:c3:3f:3f:58:51:
e1:b9:c4:ec:3f:6e:7e:fd:00:5e:f8:50:4d:ba:50:30:0c:cd:
96:5b:0a:8d:f6:71:05:b5:13:a5:92:1a:c7:89:54:76:43:d8:
83:41:b2:b1:a2:92:5d:9e:59:0e:71:ad:0a:b1:3e:7f:cb:82:
ee:3b:ab:e5:cc:9b:ed:c7:c2:0b:b4:51:bd:3b:ea:3d:f5:4a:
15:e8:e6:d7:b9:51:b4:20:99:fa:93:56:68:46:47:99:16:e1:
e6:52:35:3f:1b:4f:f8:4a:04:5a:34:84:46:83:a0:bb:3e:43:
1b:ec:d7:e8:15:f6:41:01:f0:b2:69:2f:0e:f1:0d:50:39:6b:
e3:d5:97:8f:7a:23:e9:f0:69:0a:4f:b7:d9:42:54:83:3b:5b:
61:41:62:f3:2b:ec:17:2a:c1:52:87:45:65:47:64:b8:45:9e:
f3:e1:19:b2:b6:a4:d8:a6:87:14:7b:fd:1a:dc:be:6b:f2:51:
f5:98:13:dd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARLlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTk0NzA2WhcNMjUwMzA5MTk0NzA2WjAYMRYw
FAYDVQQDEw02Nzk1M2ZiZS1lYzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmVR8wAMbxtXs/HDUeMvBZKldg3bVMQsgfiGrSLHwA2Lblj8u+t5V6c2e
xB3EpHRKeeT50zMk1KwiKH8dywSBXJGndQ1ZMv9EXBXKc/QjFIhAV132xVXNOsxk
2HfrN3Bi4OITLeLvYGC9T+e5KIMXTd/uTUpoIkDMAa/P14iiTMryQL8X4tkzfrTM
46drn8W9kOBsDdFCLKs4sVzWb2lnH+rc2wan8YoUhJkAHJiLjk9i+rMu3b3W1JLh
Mf5QOVT/qyE7OP6+k6Cz5vOPNaB/On+8DfSlpEDnzPbQlMXhTBArhFJS7uy54eaN
Ps9jggND7z6nb4lHzmMZgkCs8HwjqQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL85
MS62svl52Tutq6bX7e5dQqAlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQTI1OTRFMERCNTUxMUVGQjhEM0QzQjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcVqMA0GCSqGSIb3DQEBCwUA
A4IBAQAuE2TpS0/nASx2vIeb/HUqW93DsYUBGykxy8Puk544i01c0BNiImGMc3im
hs6fi/vkToL99k5cVJDeNXiiCO8oKyiEwz8/WFHhucTsP25+/QBe+FBNulAwDM2W
WwqN9nEFtROlkhrHiVR2Q9iDQbKxopJdnlkOca0KsT5/y4LuO6vlzJvtx8ILtFG9
O+o99UoV6ObXuVG0IJn6k1ZoRkeZFuHmUjU/G0/4SgRaNIRGg6C7PkMb7NfoFfZB
AfCyaS8O8Q1QOWvj1ZePeiPp8GkKT7fZQlSDO1thQWLzK+wXKsFSh0VlR2S4RZ7z
4RmytqTYpocUe/0a3L5r8lH1mBPd
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:57:54 2025 by rpki-client