Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/380EAD9AC39E11EFAD1CB584762E951A.roa
File: 380EAD9AC39E11EFAD1CB584762E951A.roa (raw, json)
Hash identifier: 4JmC3AdYN55+44FW5XaicqTu8nNGp85y/2TROahWiBE=
Subject key identifier: 3D:55:8F:B7:DB:00:FA:67:5F:21:6C:1A:71:7D:9F:DB:81:00:5E:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED79
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/380EAD9AC39E11EFAD1CB584762E951A.roa
Signing time: Thu 26 Dec 2024 15:29:38 +0000
ROA not before: Thu 26 Dec 2024 15:29:35 +0000
ROA not after: Fri 12 Dec 2025 15:29:35 +0000
asID: 984
IP address blocks: 45.199.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60793 (0xed79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 15:29:35 2024 GMT
Not After : Dec 12 15:29:35 2025 GMT
Subject: CN=676d7662-21e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:41:b4:56:c2:7a:c8:9a:36:fc:7e:c9:2e:
b8:cb:70:04:81:c5:30:2e:97:c4:e9:9f:34:5d:12:
94:d9:84:f4:fa:db:63:d2:c3:13:13:2e:d9:ba:9e:
1f:1f:c2:77:f6:25:dc:d3:c2:72:a6:c0:1e:6c:a4:
be:0c:fd:61:79:47:7d:1a:8f:a8:ca:32:d5:f7:90:
ba:49:6d:f0:a4:79:94:b5:4e:7e:2d:38:26:66:15:
e3:a5:d2:eb:18:90:cc:90:d9:06:2d:12:58:b6:e6:
cf:4f:71:30:a1:bf:88:7f:cc:77:a6:15:03:99:00:
05:fe:41:6d:64:ce:b3:c7:64:7a:4f:90:f9:f4:55:
2e:1e:69:a1:3e:1c:98:c1:ef:00:16:4d:18:0f:5d:
2f:9c:7c:30:eb:cb:f8:58:a8:7c:a5:f7:ad:0e:de:
d6:1c:f5:c8:c7:dc:d1:c6:55:ad:9f:78:be:7b:c4:
70:4a:55:e7:b1:be:80:0b:49:dc:cf:fb:e5:c3:86:
57:92:5b:14:de:8a:bd:f4:97:11:12:95:5f:66:30:
72:54:28:53:51:62:07:19:4a:df:af:a8:9a:dd:9d:
aa:a5:42:a4:94:ec:e1:11:52:1f:45:5e:52:2c:e7:
fe:65:c3:9e:78:43:11:23:d0:b5:d2:7d:7b:ed:84:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:55:8F:B7:DB:00:FA:67:5F:21:6C:1A:71:7D:9F:DB:81:00:5E:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/380EAD9AC39E11EFAD1CB584762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.151.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ed:c1:a4:79:c9:28:98:38:75:af:e9:0a:3e:0b:0d:08:97:
6c:49:5e:b1:9f:cb:36:ad:46:0c:3b:d1:b5:af:6b:32:69:19:
a6:26:a1:85:5e:21:1d:b6:df:dc:9c:e6:21:a0:13:61:fe:bd:
43:e3:f0:0a:3e:8a:40:9a:cd:70:82:61:e7:9b:84:ad:2d:6b:
ea:e9:fd:d3:bd:95:d9:9f:22:6b:88:79:40:ff:d1:21:10:88:
55:52:61:db:22:a7:88:b8:7b:65:98:3a:5d:9a:9b:fe:b7:87:
12:ab:3f:bf:b7:62:9e:c0:34:87:94:f3:01:4b:a2:a2:1e:3d:
b1:3f:51:5c:2f:d5:f0:38:79:d5:fc:bd:b3:3d:9f:ed:6b:51:
91:5c:23:dc:da:dc:e8:67:b7:70:19:7f:13:cf:cd:ff:9e:e3:
71:ec:4b:70:c2:cc:89:8b:1f:0e:16:f7:de:16:ef:82:f0:5b:
84:ee:03:90:41:01:c6:4b:d6:cc:8f:81:62:1b:55:c5:4e:5a:
f3:e5:07:8f:7c:91:fc:a8:85:d0:99:8d:78:f4:d6:98:4a:04:
8e:b2:91:0f:c7:55:8e:7e:9d:17:f5:79:b8:e2:6f:73:40:4b:
ff:89:d2:75:c0:33:d3:f3:e6:c6:5b:e2:b9:d9:27:2b:da:32:
66:17:0a:a0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO15MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MTUyOTM1WhcNMjUxMjEyMTUyOTM1WjAYMRYw
FAYDVQQDEw02NzZkNzY2Mi0yMWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyCdBtFbCesiaNvx+yS64y3AEgcUwLpfE6Z80XRKU2YT0+ttj0sMTEy7Z
up4fH8J39iXc08JypsAebKS+DP1heUd9Go+oyjLV95C6SW3wpHmUtU5+LTgmZhXj
pdLrGJDMkNkGLRJYtubPT3Ewob+If8x3phUDmQAF/kFtZM6zx2R6T5D59FUuHmmh
PhyYwe8AFk0YD10vnHww68v4WKh8pfetDt7WHPXIx9zRxlWtn3i+e8RwSlXnsb6A
C0ncz/vlw4ZXklsU3oq99JcREpVfZjByVChTUWIHGUrfr6ia3Z2qpUKklOzhEVIf
RV5SLOf+ZcOeeEMRI9C10n177YQnFwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD1V
j7fbAPpnXyFsGnF9n9uBAF6EMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zODBFQUQ5QUMzOUUxMUVGQUQxQ0I1ODQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALceXMA0GCSqGSIb3DQEBCwUA
A4IBAQA17cGkeckomDh1r+kKPgsNCJdsSV6xn8s2rUYMO9G1r2syaRmmJqGFXiEd
tt/cnOYhoBNh/r1D4/AKPopAms1wgmHnm4StLWvq6f3TvZXZnyJriHlA/9EhEIhV
UmHbIqeIuHtlmDpdmpv+t4cSqz+/t2KewDSHlPMBS6KiHj2xP1FcL9XwOHnV/L2z
PZ/ta1GRXCPc2tzoZ7dwGX8Tz83/nuNx7EtwwsyJix8OFvfeFu+C8FuE7gOQQQHG
S9bMj4FiG1XFTlrz5QePfJH8qIXQmY149NaYSgSOspEPx1WOfp0X9Xm44m9zQEv/
idJ1wDPT8+bGW+K52Scr2jJmFwqg
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:53:20 2025 by rpki-client