Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33DE7C86DB0A11EFBC83C741762E951A.roa
File: 33DE7C86DB0A11EFBC83C741762E951A.roa (raw, json)
Hash identifier: nR9S9wM3UNgqSbwXOs2Cgk7CUpYN2W3SLqFHrPjCE0c=
Subject key identifier: EA:E3:33:09:88:E2:EF:4C:01:89:CC:84:5D:60:BF:25:A7:F5:10:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33DE7C86DB0A11EFBC83C741762E951A.roa
Signing time: Sat 25 Jan 2025 10:50:34 +0000
ROA not before: Sat 25 Jan 2025 10:50:30 +0000
ROA not after: Sun 23 Feb 2025 10:50:30 +0000
asID: 44559
IP address blocks: 45.199.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70141 (0x111fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 10:50:30 2025 GMT
Not After : Feb 23 10:50:30 2025 GMT
Subject: CN=6794c1fa-ee57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:c3:33:bf:2a:3a:f3:cc:6e:74:26:c7:2f:
67:2a:4c:c0:ca:19:0d:0c:04:ea:8a:aa:9a:5c:97:
71:7b:68:fd:b9:ed:31:04:26:75:15:7e:1b:2d:91:
47:ee:af:0c:a8:b9:e7:87:12:de:ad:1a:56:0c:f8:
12:21:99:62:46:00:a8:a0:58:f8:99:c1:53:d8:73:
24:0d:f2:23:37:e9:fc:e9:ab:7a:5c:9a:11:1d:d0:
7c:02:f5:2e:a9:ef:5b:44:9d:d3:3d:b4:70:f8:e6:
3f:20:6a:f9:09:d9:c5:2b:80:bb:dd:86:1f:a8:f8:
66:e4:df:5b:ee:8a:7f:db:8a:a6:4a:e3:3d:72:77:
a4:a4:f4:cb:61:2d:7b:f2:ac:f2:9c:d4:86:a5:f8:
da:e5:f6:14:e4:69:f9:dc:44:67:bf:b7:57:14:fe:
d6:13:d7:9c:61:4a:b6:52:1a:a3:1e:c5:40:0d:16:
e3:80:6a:9d:de:26:12:0d:fb:15:fa:d0:3a:f5:a4:
11:ed:c4:22:be:41:a3:e3:fe:35:71:3e:cb:b0:7f:
37:a0:cc:a3:73:ab:a1:79:8e:c1:dd:c9:7b:cb:39:
29:17:db:13:5e:9e:4d:a6:4f:eb:bb:ec:e7:40:a0:
1e:bd:1e:6e:de:b9:2d:39:ba:ac:89:46:42:22:69:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E3:33:09:88:E2:EF:4C:01:89:CC:84:5D:60:BF:25:A7:F5:10:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33DE7C86DB0A11EFBC83C741762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.234.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:07:e6:c2:80:39:f8:94:cb:75:ff:bb:dc:61:2d:2f:e3:4e:
84:92:0f:b5:74:19:ba:3c:5f:7f:e4:01:5d:69:c4:2b:31:12:
16:d7:7b:9b:28:c2:5f:66:ea:67:b7:ba:42:b8:c7:b1:97:2a:
3d:f7:c2:1e:00:c9:27:1a:82:02:6e:ba:c3:e9:00:0f:74:a7:
82:eb:d9:e9:a5:f3:21:53:2c:c9:fa:ef:3d:9c:82:82:1b:6e:
2c:16:85:9d:0d:96:19:c3:ef:4a:d1:62:29:9d:1f:d7:a9:8b:
a5:40:e4:55:38:25:8d:4b:65:a9:2d:cd:70:77:b3:a0:fd:1e:
d8:2c:e9:3d:22:79:68:b5:68:b8:cc:2d:04:51:71:fb:0e:44:
b7:f3:60:fa:f7:04:72:3e:9d:f9:e6:aa:44:81:bf:aa:de:a2:
a5:1f:27:92:4c:80:bd:e8:f4:21:2f:57:f3:2e:d4:a0:26:c1:
92:16:44:d7:f2:7d:14:3f:61:3a:b4:89:77:9f:e9:6e:b6:e3:
73:e3:8a:33:e3:73:80:57:86:a1:29:e9:37:38:b4:77:37:2f:
76:7e:03:b1:93:f1:e3:36:bf:df:7c:fe:e5:ba:ce:36:38:ff:
31:5f:2c:53:9f:c5:9c:e6:ab:93:21:3f:28:cc:4a:9a:dd:58:
1b:2b:b8:8e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARH9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTA1MDMwWhcNMjUwMjIzMTA1MDMwWjAYMRYw
FAYDVQQDEw02Nzk0YzFmYS1lZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArxvDM78qOvPMbnQmxy9nKkzAyhkNDATqiqqaXJdxe2j9ue0xBCZ1FX4b
LZFH7q8MqLnnhxLerRpWDPgSIZliRgCooFj4mcFT2HMkDfIjN+n86at6XJoRHdB8
AvUuqe9bRJ3TPbRw+OY/IGr5CdnFK4C73YYfqPhm5N9b7op/24qmSuM9cnekpPTL
YS178qzynNSGpfja5fYU5Gn53ERnv7dXFP7WE9ecYUq2UhqjHsVADRbjgGqd3iYS
DfsV+tA69aQR7cQivkGj4/41cT7LsH83oMyjc6uheY7B3cl7yzkpF9sTXp5Npk/r
u+znQKAevR5u3rktObqsiUZCImmOSwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOrj
MwmI4u9MAYnMhF1gvyWn9RBYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zM0RFN0M4NkRCMEExMUVGQkM4M0M3NDE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfqMA0GCSqGSIb3DQEBCwUA
A4IBAQCjB+bCgDn4lMt1/7vcYS0v406Ekg+1dBm6PF9/5AFdacQrMRIW13ubKMJf
Zupnt7pCuMexlyo998IeAMknGoICbrrD6QAPdKeC69nppfMhUyzJ+u89nIKCG24s
FoWdDZYZw+9K0WIpnR/XqYulQORVOCWNS2WpLc1wd7Og/R7YLOk9InlotWi4zC0E
UXH7DkS382D69wRyPp355qpEgb+q3qKlHyeSTIC96PQhL1fzLtSgJsGSFkTX8n0U
P2E6tIl3n+lutuNz44oz43OAV4ahKek3OLR3Ny92fgOxk/HjNr/ffP7lus42OP8x
XyxTn8Wc5quTIT8ozEqa3VgbK7iO
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:21:34 2025 by rpki-client