Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DB9B7F4D80511EF8A91817C762E951A.roa
File: 4DB9B7F4D80511EF8A91817C762E951A.roa (raw, json)
Hash identifier: GjG+xs5v+pxy9bfOhpFoQLzYogHK5wV2qD+gKSojVGs=
Subject key identifier: 01:E3:C8:55:EE:FD:BF:30:F2:FC:13:9B:32:3A:0E:4B:8F:36:F1:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E16
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DB9B7F4D80511EF8A91817C762E951A.roa
Signing time: Tue 21 Jan 2025 14:37:56 +0000
ROA not before: Tue 21 Jan 2025 14:37:53 +0000
ROA not after: Sat 01 Feb 2025 14:37:53 +0000
asID: 62240
IP address blocks: 45.192.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69142 (0x10e16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 14:37:53 2025 GMT
Not After : Feb 1 14:37:53 2025 GMT
Subject: CN=678fb144-c277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:00:3a:d5:2a:77:83:e3:10:0a:82:be:0b:
1d:0b:69:df:80:28:c8:35:5c:ee:45:3b:92:77:20:
33:ec:a8:8f:14:63:2b:0d:4e:2f:d7:c5:42:83:3f:
1a:96:3f:23:5c:35:6d:0a:9e:f1:30:67:bb:ea:8e:
41:a6:51:a8:03:f3:c5:a4:2f:31:74:18:e5:d8:b4:
f5:13:66:5f:95:59:ef:45:85:98:a2:fb:03:eb:a5:
f2:bd:7d:fd:a3:8d:06:15:ce:36:bc:e7:11:83:71:
22:13:44:3d:ab:7c:d9:42:8a:53:53:90:83:4b:1c:
2f:0a:93:cf:85:74:11:cd:c0:a6:7a:2a:5e:e9:8e:
b1:ca:b8:8b:84:3c:84:bd:e4:96:a5:a1:9a:50:b2:
e7:a8:be:43:58:fd:0e:a7:2d:ae:e7:de:64:bf:a3:
1c:98:d3:f8:cf:eb:39:6d:f3:8b:76:31:11:d5:2a:
87:bd:4c:07:16:68:0c:80:7d:c6:ba:b2:fe:35:d8:
c3:c1:61:a0:91:ef:b3:3f:96:24:28:66:98:3a:b5:
9d:a6:4a:0d:c9:7c:c0:a3:18:6a:6d:ab:2e:d2:f3:
5c:19:e7:a5:e7:be:01:d3:8f:39:a2:33:90:34:78:
48:ea:ac:92:70:5a:66:2b:cb:f5:81:27:8f:38:e9:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E3:C8:55:EE:FD:BF:30:F2:FC:13:9B:32:3A:0E:4B:8F:36:F1:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DB9B7F4D80511EF8A91817C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.46.0/24
Signature Algorithm: sha256WithRSAEncryption
96:18:25:7c:9b:69:88:78:79:e0:20:49:ab:e4:2c:f2:ac:6c:
3c:10:df:7c:db:9d:80:6f:cf:51:de:9f:69:1b:51:f9:a4:93:
1b:a1:c5:7e:53:c9:b3:2a:c3:02:a1:0a:c7:fb:f3:79:d3:ed:
d8:38:cf:bd:df:21:8e:06:a9:3e:26:52:38:31:3b:ce:d4:3c:
19:31:1a:c7:35:29:bc:ca:cc:9a:d7:12:40:9c:f0:a8:82:38:
b6:03:92:fb:3b:dd:a6:50:f1:51:86:b4:06:6c:93:31:78:27:
7d:c3:af:5c:cc:ac:e4:13:10:36:1e:ea:ec:23:3f:0c:99:58:
6a:3f:ef:46:b3:8b:04:e2:88:eb:90:a9:23:a3:7e:10:80:e7:
ae:db:d4:bc:40:c6:59:0d:ce:76:00:cf:a9:b5:ae:80:78:15:
09:3f:69:13:ce:67:ea:ed:5b:9c:62:32:b9:b4:1c:ed:ec:4c:
2a:d6:93:05:7d:3a:22:ea:34:f2:cf:9e:a1:eb:d8:36:a6:cb:
b7:4a:20:bb:6b:41:b1:5b:6b:dc:da:3b:f9:cf:b4:dc:3b:43:
58:d9:4e:f4:43:0c:28:d7:b0:81:0d:65:a0:1b:bb:0b:8f:61:
2d:89:ab:96:43:ba:1c:33:82:57:40:ac:3f:49:9d:5f:98:46:
64:ca:aa:87
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ4WMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTQzNzUzWhcNMjUwMjAxMTQzNzUzWjAYMRYw
FAYDVQQDEw02NzhmYjE0NC1jMjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv3MAOtUqd4PjEAqCvgsdC2nfgCjINVzuRTuSdyAz7KiPFGMrDU4v18VC
gz8alj8jXDVtCp7xMGe76o5BplGoA/PFpC8xdBjl2LT1E2ZflVnvRYWYovsD66Xy
vX39o40GFc42vOcRg3EiE0Q9q3zZQopTU5CDSxwvCpPPhXQRzcCmeipe6Y6xyriL
hDyEveSWpaGaULLnqL5DWP0Opy2u595kv6McmNP4z+s5bfOLdjER1SqHvUwHFmgM
gH3GurL+NdjDwWGgke+zP5YkKGaYOrWdpkoNyXzAoxhqbasu0vNcGeel574B0485
ojOQNHhI6qyScFpmK8v1gSePOOlY/QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAHj
yFXu/b8w8vwTmzI6DkuPNvEIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80REI5QjdGNEQ4MDUxMUVGOEE5MTgxN0M3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAuMA0GCSqGSIb3DQEBCwUA
A4IBAQCWGCV8m2mIeHngIEmr5CzyrGw8EN98252Ab89R3p9pG1H5pJMbocV+U8mz
KsMCoQrH+/N50+3YOM+93yGOBqk+JlI4MTvO1DwZMRrHNSm8ysya1xJAnPCogji2
A5L7O92mUPFRhrQGbJMxeCd9w69czKzkExA2HursIz8MmVhqP+9Gs4sE4ojrkKkj
o34QgOeu29S8QMZZDc52AM+pta6AeBUJP2kTzmfq7VucYjK5tBzt7Ewq1pMFfToi
6jTyz56h69g2psu3SiC7a0GxW2vc2jv5z7TcO0NY2U70Qwwo17CBDWWgG7sLj2Et
iauWQ7ocM4JXQKw/SZ1fmEZkyqqH
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:17:57 2025 by rpki-client