Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B818B24DA7B11EF9F0CED78762E951A.roa
File: 4B818B24DA7B11EF9F0CED78762E951A.roa (raw, json)
Hash identifier: J29U8apSCHxS6L2y3WpW8GgrRTg/gHeDz4m7hePhgW0=
Subject key identifier: 38:67:4C:95:EA:9C:25:40:45:4B:EB:DD:47:E5:C4:62:88:2E:B5:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B818B24DA7B11EF9F0CED78762E951A.roa
Signing time: Fri 24 Jan 2025 17:47:35 +0000
ROA not before: Fri 24 Jan 2025 17:47:32 +0000
ROA not after: Tue 25 Feb 2025 17:47:32 +0000
asID: 44559
IP address blocks: 45.192.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69610 (0x10fea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 17:47:32 2025 GMT
Not After : Feb 25 17:47:32 2025 GMT
Subject: CN=6793d237-9c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:0c:9c:ce:b9:20:75:56:52:d2:c4:b5:a0:
a1:0c:fb:e8:2e:ff:cb:ce:8f:74:de:1e:04:ee:24:
2f:d2:0c:b9:ec:ec:33:fd:f1:ef:ce:60:ef:3b:ee:
be:45:23:29:15:c7:87:6b:0c:60:bd:2e:96:01:cf:
23:5e:21:eb:34:a2:c6:d1:4d:5a:77:9f:2e:9b:6e:
83:0b:9e:bf:3f:20:98:ef:f3:d5:3a:45:07:da:a4:
1a:b5:08:17:14:20:38:c9:26:9f:1b:3e:1f:b6:8e:
f9:2c:4b:8b:bd:f3:4d:ec:27:a7:84:bf:18:6f:fc:
4b:ac:d2:2f:bb:92:c0:73:4a:50:54:71:19:4a:35:
e9:09:1b:bc:3c:ea:f5:8e:1f:54:4b:35:63:28:8c:
1b:d1:79:4c:54:dc:80:e6:dd:66:e6:a1:10:ad:06:
65:86:1b:08:9b:9b:2a:db:85:18:33:3e:96:95:ee:
39:e0:11:c0:71:22:0e:b8:c8:47:9f:42:fe:08:aa:
ed:60:d7:43:b7:a3:b2:f2:23:d1:39:aa:b2:c2:06:
fb:25:e4:d8:21:bf:d9:91:6f:dd:f5:2b:51:92:93:
5b:84:f0:a2:2a:a7:8e:5b:2f:90:9c:2d:f2:0a:5a:
c5:8b:d9:66:a4:4a:55:2c:16:80:c3:fd:22:0e:83:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:67:4C:95:EA:9C:25:40:45:4B:EB:DD:47:E5:C4:62:88:2E:B5:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B818B24DA7B11EF9F0CED78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f2:85:1a:b7:18:42:ad:22:47:52:82:7c:07:87:81:b2:f0:
7a:62:40:8b:71:c8:28:c1:07:ce:54:2b:0d:d8:84:ef:f9:a3:
86:2f:3b:de:87:f4:4a:2a:08:2f:0b:0d:60:9c:2c:79:a2:32:
77:20:db:cf:60:63:95:2f:93:f5:b3:18:c0:87:82:24:72:b9:
06:55:b4:ce:d0:0f:17:39:5d:da:d8:1a:e6:f7:00:5c:d8:73:
a1:a2:88:23:4c:27:09:ab:be:3d:7c:b2:4e:fa:7a:8e:06:ad:
54:98:e4:a7:ac:46:0a:11:19:c5:d1:81:80:6c:56:9a:bf:52:
63:7b:4a:da:7b:db:49:2a:a3:d2:b2:81:a2:a8:24:d6:f8:09:
23:45:26:95:17:8d:71:68:7f:ff:e4:5a:47:37:d5:00:e9:3f:
84:72:7d:ad:d2:ed:dd:bd:90:56:dd:4e:e5:e9:97:e2:79:df:
95:e6:9a:76:0f:cc:14:08:38:32:0c:89:a4:62:d0:e0:41:ec:
cf:f6:39:a3:87:04:0c:ab:a3:03:ec:84:ca:a2:c3:96:68:fd:
a9:72:7b:c7:3f:50:b2:95:79:95:3c:c5:1f:99:5b:db:63:4e:
b0:ec:2b:c4:f3:e9:42:e3:30:66:fc:9f:e6:62:42:d5:38:73:
2c:ef:e7:73
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ/qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MTc0NzMyWhcNMjUwMjI1MTc0NzMyWjAYMRYw
FAYDVQQDEw02NzkzZDIzNy05YzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs6cMnM65IHVWUtLEtaChDPvoLv/Lzo903h4E7iQv0gy57Owz/fHvzmDv
O+6+RSMpFceHawxgvS6WAc8jXiHrNKLG0U1ad58um26DC56/PyCY7/PVOkUH2qQa
tQgXFCA4ySafGz4fto75LEuLvfNN7CenhL8Yb/xLrNIvu5LAc0pQVHEZSjXpCRu8
POr1jh9USzVjKIwb0XlMVNyA5t1m5qEQrQZlhhsIm5sq24UYMz6Wle454BHAcSIO
uMhHn0L+CKrtYNdDt6Oy8iPROaqywgb7JeTYIb/ZkW/d9StRkpNbhPCiKqeOWy+Q
nC3yClrFi9lmpEpVLBaAw/0iDoMouQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDhn
TJXqnCVARUvr3UflxGKILrU7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80QjgxOEIyNERBN0IxMUVGOUYwQ0VENzg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcA0MA0GCSqGSIb3DQEBCwUA
A4IBAQBf8oUatxhCrSJHUoJ8B4eBsvB6YkCLccgowQfOVCsN2ITv+aOGLzveh/RK
KggvCw1gnCx5ojJ3INvPYGOVL5P1sxjAh4IkcrkGVbTO0A8XOV3a2Brm9wBc2HOh
oogjTCcJq749fLJO+nqOBq1UmOSnrEYKERnF0YGAbFaav1Jje0rae9tJKqPSsoGi
qCTW+AkjRSaVF41xaH//5FpHN9UA6T+Ecn2t0u3dvZBW3U7l6Zfied+V5pp2D8wU
CDgyDImkYtDgQezP9jmjhwQMq6MD7ITKosOWaP2pcnvHP1CylXmVPMUfmVvbY06w
7CvE8+lC4zBm/J/mYkLVOHMs7+dz
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:41 2025 by rpki-client