Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CF97CECDA9511EFA91593A3762E951A.roa
File: 2CF97CECDA9511EFA91593A3762E951A.roa (raw, json)
Hash identifier: Ecd+4diwLjZCT8t8mUvzIhMhppey9eSS6FPqDgke010=
Subject key identifier: D4:3E:BE:19:3B:28:22:11:48:D9:CC:02:5C:D8:31:47:FD:C2:57:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011092
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CF97CECDA9511EFA91593A3762E951A.roa
Signing time: Fri 24 Jan 2025 20:52:51 +0000
ROA not before: Fri 24 Jan 2025 20:52:48 +0000
ROA not after: Tue 25 Feb 2025 20:52:48 +0000
asID: 202656
IP address blocks: 45.199.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69778 (0x11092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:52:48 2025 GMT
Not After : Feb 25 20:52:48 2025 GMT
Subject: CN=6793fda3-a4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:f3:a8:0b:af:2f:a5:72:e6:f7:8a:25:99:
59:cb:88:e8:01:01:1d:1f:26:2e:9b:c1:72:8c:fb:
b2:94:6a:15:46:5e:dd:d7:e8:1c:d9:7d:3f:df:98:
fc:14:a4:23:e2:3d:78:64:6f:72:4f:67:94:57:36:
0a:41:12:d1:ee:d6:cb:8a:4b:6a:c7:5d:8e:72:1c:
d9:7f:19:a1:e7:cf:6c:a7:d3:b0:07:51:01:84:57:
08:a0:07:74:19:30:36:d5:35:e6:ac:20:6d:c8:87:
56:3a:73:70:fd:d4:51:5b:b2:92:06:5c:da:e0:e3:
7c:47:34:29:73:0e:33:75:3a:53:fa:a6:9e:5e:ad:
4a:6a:d3:ee:19:3d:44:0b:24:fc:06:25:95:c9:ef:
28:ec:3f:f6:c8:91:94:01:b3:61:46:ce:54:14:37:
6d:c1:39:4e:17:5b:9c:ef:59:9a:cc:cf:b0:3d:91:
e5:33:b7:48:1b:66:46:58:f4:d1:05:eb:2e:95:40:
8e:07:02:f3:f5:e1:b2:61:0b:f4:98:45:a3:39:04:
6b:b6:00:2a:35:4f:61:0e:b1:cc:fd:86:7a:2f:c3:
e7:42:0f:4d:c8:dc:e8:bd:9f:39:fd:94:a5:93:e3:
df:be:47:33:3b:38:53:95:c3:9e:26:a1:a7:17:29:
19:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3E:BE:19:3B:28:22:11:48:D9:CC:02:5C:D8:31:47:FD:C2:57:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CF97CECDA9511EFA91593A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.197.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:46:b8:74:55:fa:ee:32:5b:c6:a0:5d:00:d4:35:e8:da:57:
71:63:85:2d:ab:99:b9:17:e2:f3:42:f5:f7:83:be:f3:3c:ba:
71:ee:b2:9c:68:6d:b0:b0:bd:8e:45:31:e9:5d:cb:9d:f8:5b:
dd:e4:89:6e:c1:f6:4a:65:60:20:70:e3:a0:01:17:51:cd:9b:
5f:5c:de:49:b6:8c:af:87:65:2b:33:58:c8:ad:24:d7:b9:3e:
e2:65:12:ec:c6:f8:e7:64:c2:c7:82:fb:1f:68:3b:b4:a0:ce:
ee:44:3e:80:ce:3e:e3:23:1b:c4:25:4f:d0:9c:b4:d4:74:07:
9c:3a:39:5f:05:e6:3e:a6:34:01:72:5d:82:ae:84:ba:69:79:
bc:ef:ab:1a:a5:f5:86:93:9d:08:b2:a8:12:71:e3:e3:0f:e2:
cf:06:cf:90:5a:24:b9:0b:64:f3:81:c0:5e:d1:20:3f:d0:87:
13:76:62:60:81:da:7f:60:04:b7:2a:b6:13:c3:21:36:b9:55:
1b:0c:9c:78:f0:9a:10:34:d1:7d:fc:94:1b:27:51:b7:e7:03:
13:b1:70:81:cf:bf:5e:5e:7d:ee:56:31:56:72:42:7d:5b:32:
12:f8:13:68:87:4e:93:46:26:a0:d2:e3:98:28:e0:2c:e2:0e:
ab:2c:cc:c7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARCSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MjA1MjQ4WhcNMjUwMjI1MjA1MjQ4WjAYMRYw
FAYDVQQDEw02NzkzZmRhMy1hNGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzX3zqAuvL6Vy5veKJZlZy4joAQEdHyYum8FyjPuylGoVRl7d1+gc2X0/
35j8FKQj4j14ZG9yT2eUVzYKQRLR7tbLiktqx12OchzZfxmh589sp9OwB1EBhFcI
oAd0GTA21TXmrCBtyIdWOnNw/dRRW7KSBlza4ON8RzQpcw4zdTpT+qaeXq1KatPu
GT1ECyT8BiWVye8o7D/2yJGUAbNhRs5UFDdtwTlOF1uc71mazM+wPZHlM7dIG2ZG
WPTRBesulUCOBwLz9eGyYQv0mEWjOQRrtgAqNU9hDrHM/YZ6L8PnQg9NyNzovZ85
/ZSlk+PfvkczOzhTlcOeJqGnFykZZwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNQ+
vhk7KCIRSNnMAlzYMUf9wlfIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQ0Y5N0NFQ0RBOTUxMUVGQTkxNTkzQTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfFMA0GCSqGSIb3DQEBCwUA
A4IBAQC0Rrh0VfruMlvGoF0A1DXo2ldxY4Utq5m5F+LzQvX3g77zPLpx7rKcaG2w
sL2ORTHpXcud+Fvd5IluwfZKZWAgcOOgARdRzZtfXN5Jtoyvh2UrM1jIrSTXuT7i
ZRLsxvjnZMLHgvsfaDu0oM7uRD6Azj7jIxvEJU/QnLTUdAecOjlfBeY+pjQBcl2C
roS6aXm876sapfWGk50IsqgScePjD+LPBs+QWiS5C2TzgcBe0SA/0IcTdmJggdp/
YAS3KrYTwyE2uVUbDJx48JoQNNF9/JQbJ1G35wMTsXCBz79eXn3uVjFWckJ9WzIS
+BNoh06TRiag0uOYKOAs4g6rLMzH
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:50 2025 by rpki-client