Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3500CAD4D7D011EFB6502AA3762E951A.roa
File: 3500CAD4D7D011EFB6502AA3762E951A.roa (raw, json)
Hash identifier: XbLnilYNpB+2UOxZAbgg0mr1PhBfrzdn2pvb0XIwNnE=
Subject key identifier: 45:F1:21:2B:4A:CF:09:1C:7E:86:7B:19:2E:AA:BB:40:49:F7:A8:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CF4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3500CAD4D7D011EFB6502AA3762E951A.roa
Signing time: Tue 21 Jan 2025 08:17:51 +0000
ROA not before: Tue 21 Jan 2025 08:17:47 +0000
ROA not after: Sat 01 Feb 2025 08:17:47 +0000
asID: 44559
IP address blocks: 45.200.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68852 (0x10cf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 08:17:47 2025 GMT
Not After : Feb 1 08:17:47 2025 GMT
Subject: CN=678f582f-c36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:84:31:2c:45:d3:f3:9a:87:ac:88:50:9e:
b8:73:32:e1:55:45:39:0f:11:4f:07:a1:db:e8:4b:
cc:12:2c:ab:ef:38:91:2f:17:73:e6:ba:62:43:95:
3b:38:d5:94:0f:e2:9d:9d:29:da:93:ef:6f:f9:4d:
16:cc:ab:f8:62:d3:56:ad:20:f8:54:78:61:19:46:
46:c1:09:1b:2c:66:47:f0:a5:12:f3:44:58:23:56:
6b:b1:41:a1:28:04:42:5d:87:45:69:70:23:93:1d:
40:1b:aa:4e:04:a0:0f:49:9c:36:2d:8d:0e:ea:49:
b5:36:4f:75:53:15:b5:de:d4:0f:21:14:7f:4f:63:
fc:ad:f1:e5:bc:e6:9c:61:22:f3:f2:ca:e8:37:42:
2a:3d:07:19:76:f7:e0:f4:ef:8b:bd:07:96:1c:e8:
3b:a4:f7:8a:ec:5c:23:ec:45:3e:65:5d:7f:0f:c3:
56:2b:8f:f5:88:e1:32:a4:82:d0:81:8d:3a:f9:f2:
2d:01:49:81:52:d5:a4:7d:69:a0:ca:1a:7c:f9:e0:
81:05:37:ae:e9:a1:be:fb:29:97:5f:c0:0e:41:73:
42:59:7e:c4:f3:8b:43:1b:2c:d1:35:35:6c:82:0a:
70:6d:37:b0:a0:bf:a4:dd:73:76:86:8e:cb:59:88:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F1:21:2B:4A:CF:09:1C:7E:86:7B:19:2E:AA:BB:40:49:F7:A8:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3500CAD4D7D011EFB6502AA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.180.0/24
Signature Algorithm: sha256WithRSAEncryption
84:98:b1:88:39:7a:3f:40:ac:01:22:53:d2:f9:c6:fb:e8:e2:
93:c9:b0:0b:94:20:9d:c0:5a:c4:52:ce:4f:4d:93:df:9c:1e:
ce:f2:9c:36:b3:23:e2:9b:92:72:1b:3b:99:a5:33:b5:06:af:
81:bb:e7:c5:84:1e:62:05:8a:00:66:97:24:00:2f:f4:fa:8f:
61:ec:94:43:13:59:c6:7c:ea:4d:5d:64:93:28:6c:20:ea:80:
88:d3:d6:c7:fc:df:2a:2d:55:66:58:5b:6f:ab:24:12:de:78:
48:a4:ac:2d:ad:b0:9b:85:52:58:f1:d3:0a:61:28:a5:51:a8:
de:df:c5:1d:34:ef:e6:d7:1f:10:6a:fe:8b:8c:e9:11:03:2a:
e0:ba:22:51:ae:18:ad:a3:20:10:99:9f:2e:7b:3f:80:09:c1:
da:9b:ff:db:75:73:e4:e5:9f:f5:61:78:ae:a7:4d:12:b4:7d:
33:17:e1:f8:95:81:df:6b:69:b1:0e:2e:8f:ae:53:cc:f6:45:
a6:eb:f8:95:00:b2:91:da:8e:e4:e6:6c:4e:1d:1c:75:72:6c:
65:c9:ed:41:b1:d5:ea:0d:06:39:2f:73:95:0a:11:0c:46:18:
85:a8:c0:1a:b5:7a:62:75:2a:f8:e5:01:d4:18:64:b5:40:36:
78:78:01:22
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQz0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMDgxNzQ3WhcNMjUwMjAxMDgxNzQ3WjAYMRYw
FAYDVQQDEw02NzhmNTgyZi1jMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyjWEMSxF0/Oah6yIUJ64czLhVUU5DxFPB6Hb6EvMEiyr7ziRLxdz5rpi
Q5U7ONWUD+KdnSnak+9v+U0WzKv4YtNWrSD4VHhhGUZGwQkbLGZH8KUS80RYI1Zr
sUGhKARCXYdFaXAjkx1AG6pOBKAPSZw2LY0O6km1Nk91UxW13tQPIRR/T2P8rfHl
vOacYSLz8sroN0IqPQcZdvfg9O+LvQeWHOg7pPeK7Fwj7EU+ZV1/D8NWK4/1iOEy
pILQgY06+fItAUmBUtWkfWmgyhp8+eCBBTeu6aG++ymXX8AOQXNCWX7E84tDGyzR
NTVsggpwbTewoL+k3XN2ho7LWYiz2QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEXx
IStKzwkcfoZ7GS6qu0BJ96gJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNTAwQ0FENEQ3RDAxMUVGQjY1MDJBQTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALci0MA0GCSqGSIb3DQEBCwUA
A4IBAQCEmLGIOXo/QKwBIlPS+cb76OKTybALlCCdwFrEUs5PTZPfnB7O8pw2syPi
m5JyGzuZpTO1Bq+Bu+fFhB5iBYoAZpckAC/0+o9h7JRDE1nGfOpNXWSTKGwg6oCI
09bH/N8qLVVmWFtvqyQS3nhIpKwtrbCbhVJY8dMKYSilUaje38UdNO/m1x8Qav6L
jOkRAyrguiJRrhitoyAQmZ8uez+ACcHam//bdXPk5Z/1YXiup00StH0zF+H4lYHf
a2mxDi6PrlPM9kWm6/iVALKR2o7k5mxOHRx1cmxlye1BsdXqDQY5L3OVChEMRhiF
qMAatXpidSr45QHUGGS1QDZ4eAEi
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:40 2025 by rpki-client