Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52771AE8D58511EFA213F89F762E951A.roa
File: 52771AE8D58511EFA213F89F762E951A.roa (raw, json)
Hash identifier: XiPRy0m9EG1yYj5EahyMS3Qm6Q046Hgva0GPgXTeQrU=
Subject key identifier: 11:87:73:3F:9C:A3:0B:C6:77:A6:E2:D9:3F:F2:37:EF:09:D1:2B:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52771AE8D58511EFA213F89F762E951A.roa
Signing time: Sat 18 Jan 2025 10:16:46 +0000
ROA not before: Sat 18 Jan 2025 10:16:42 +0000
ROA not after: Sun 23 Feb 2025 10:16:42 +0000
asID: 395793
IP address blocks: 45.201.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68471 (0x10b77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 10:16:42 2025 GMT
Not After : Feb 23 10:16:42 2025 GMT
Subject: CN=678b7f8e-12eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:3b:f6:f8:de:ed:f9:6d:a1:59:f8:b3:78:
69:ac:ed:67:c1:d2:1f:24:15:f3:c9:31:3c:ef:ef:
10:b6:45:43:41:de:17:1a:62:a3:11:8e:55:a6:be:
37:77:d3:4a:e3:e5:5a:cf:c4:d0:22:48:8e:93:46:
0a:7e:55:5f:36:a2:99:97:dc:11:14:d7:25:f7:10:
41:87:8e:e5:ee:d1:37:51:f5:41:6b:1f:e8:4c:5d:
aa:ed:ed:1a:5b:88:ee:34:f2:73:a7:ff:80:c0:b9:
91:dc:0b:24:5e:48:c7:d9:d6:3a:7c:ef:c8:fd:92:
d3:38:2b:e6:9e:05:07:39:dc:39:e8:23:f0:20:74:
66:fb:7b:91:0d:88:7b:91:3c:1c:f4:ec:74:eb:83:
70:90:41:9a:40:d2:1d:9c:8b:34:88:84:e4:a5:43:
fc:7e:9b:a9:cf:1f:8f:c7:5e:34:ed:ab:65:0d:59:
de:2e:3b:91:a3:c5:19:a4:af:66:47:31:c7:1d:6f:
95:69:88:57:36:87:aa:ad:4f:85:c5:54:90:c9:c7:
c0:b4:7e:1a:39:60:69:c7:58:83:6a:75:e8:0e:71:
88:49:90:6d:a2:6a:b0:60:b2:9a:a5:71:9e:9e:04:
28:eb:53:6a:08:bd:ba:31:4f:f4:4e:d5:c4:c6:49:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:87:73:3F:9C:A3:0B:C6:77:A6:E2:D9:3F:F2:37:EF:09:D1:2B:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52771AE8D58511EFA213F89F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:b6:bb:93:b9:6f:a9:5c:ff:45:90:7b:16:b1:3d:1b:de:d8:
23:46:c1:05:fa:a2:cc:27:13:21:58:cc:0c:73:60:36:de:7e:
a9:62:7e:36:08:b6:73:e3:83:fc:65:c8:5e:d7:69:54:bc:e9:
bb:df:f6:e1:29:02:d4:7f:f1:3d:25:0c:44:29:ac:51:66:d8:
c6:60:64:f9:3f:bb:c0:34:16:45:65:3b:95:0f:78:7b:93:43:
a9:e2:7e:5e:0e:ce:f6:20:44:4e:9b:d0:26:66:fd:0d:93:40:
8e:7a:f7:02:26:1a:5d:90:59:91:bb:99:68:15:a5:a6:2a:50:
8d:8d:c8:84:91:94:9c:0f:1e:66:8f:2c:a4:52:90:a9:b4:be:
a4:14:6b:96:e1:a2:7c:d8:0c:cf:e0:b8:3b:ee:1e:db:6b:30:
ea:63:bc:42:12:75:de:f7:2b:e6:9b:a9:a4:1e:24:1c:a0:5f:
de:87:1c:53:42:0a:64:3f:04:b9:fa:d2:85:c6:db:c3:af:fa:
56:65:0b:79:e8:f6:d4:37:27:ec:98:1a:b6:81:85:2a:f4:b3:
c4:8b:cc:23:43:f7:83:2e:36:49:dc:31:86:bb:de:ef:35:ff:
be:6b:a6:c8:cb:0b:4b:d8:1a:aa:95:12:62:f7:2c:e4:60:45:
5a:5f:24:d7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQt3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE4MTAxNjQyWhcNMjUwMjIzMTAxNjQyWjAYMRYw
FAYDVQQDEw02NzhiN2Y4ZS0xMmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoLQ79vje7fltoVn4s3hprO1nwdIfJBXzyTE87+8QtkVDQd4XGmKjEY5V
pr43d9NK4+Vaz8TQIkiOk0YKflVfNqKZl9wRFNcl9xBBh47l7tE3UfVBax/oTF2q
7e0aW4juNPJzp/+AwLmR3AskXkjH2dY6fO/I/ZLTOCvmngUHOdw56CPwIHRm+3uR
DYh7kTwc9Ox064NwkEGaQNIdnIs0iITkpUP8fpupzx+Px1407atlDVneLjuRo8UZ
pK9mRzHHHW+VaYhXNoeqrU+FxVSQycfAtH4aOWBpx1iDanXoDnGISZBtomqwYLKa
pXGengQo61NqCL26MU/0TtXExkkTzwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBGH
cz+cowvGd6bi2T/yN+8J0Ss5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81Mjc3MUFFOEQ1ODUxMUVGQTIxM0Y4OUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALckSMA0GCSqGSIb3DQEBCwUA
A4IBAQC2truTuW+pXP9FkHsWsT0b3tgjRsEF+qLMJxMhWMwMc2A23n6pYn42CLZz
44P8Zche12lUvOm73/bhKQLUf/E9JQxEKaxRZtjGYGT5P7vANBZFZTuVD3h7k0Op
4n5eDs72IEROm9AmZv0Nk0COevcCJhpdkFmRu5loFaWmKlCNjciEkZScDx5mjyyk
UpCptL6kFGuW4aJ82AzP4Lg77h7bazDqY7xCEnXe9yvmm6mkHiQcoF/ehxxTQgpk
PwS5+tKFxtvDr/pWZQt56PbUNyfsmBq2gYUq9LPEi8wjQ/eDLjZJ3DGGu97vNf++
a6bIywtL2BqqlRJi9yzkYEVaXyTX
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:26 2025 by rpki-client