Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F1A0F2CDFD511EFA27A4095762E951A.roa
File: 9F1A0F2CDFD511EFA27A4095762E951A.roa (raw, json)
Hash identifier: o0vFjbBoKcZSwAM4faYE6TqIEgCl+6kVfrVtllfLJ/Y=
Subject key identifier: C0:6E:E8:D4:63:E7:55:9E:40:54:8A:4C:C2:B1:E0:86:E0:0F:0D:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F1A0F2CDFD511EFA27A4095762E951A.roa
Signing time: Fri 31 Jan 2025 13:16:46 +0000
ROA not before: Fri 31 Jan 2025 13:16:42 +0000
ROA not after: Thu 06 Mar 2025 13:16:42 +0000
asID: 45814
IP address blocks: 45.197.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71114 (0x115ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 13:16:42 2025 GMT
Not After : Mar 6 13:16:42 2025 GMT
Subject: CN=679ccd3e-c201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:c0:a5:53:02:d7:bc:42:cf:71:c3:74:81:
0d:4c:a6:69:27:88:07:5e:c7:1d:1d:47:c4:d7:37:
9f:02:44:9a:3b:24:0a:31:4d:7d:aa:ec:ee:69:36:
5b:d1:70:8f:fd:10:01:c3:f9:db:65:48:cb:47:1b:
90:86:58:d2:59:c0:72:eb:3f:6a:00:a0:29:1a:89:
98:d0:98:66:96:4a:f6:c3:92:e8:cc:e0:bc:2b:d2:
c7:d1:c1:5e:0e:e1:b6:c7:cc:07:15:49:6c:e8:83:
3c:cc:33:04:03:96:d2:8a:95:b6:f9:bf:f4:a6:b3:
76:5f:a1:b1:be:fd:5d:23:09:79:5c:f5:5c:42:db:
87:01:e8:60:e0:14:68:2f:89:5e:b0:38:96:52:c5:
38:0e:f1:3a:21:23:e9:c3:d6:e5:75:22:30:ec:6f:
4c:71:5d:47:ff:c6:a1:af:48:5e:b7:2c:4e:79:4e:
2d:c0:a7:b7:aa:33:6d:d2:90:86:5f:d4:98:8b:f3:
c5:0a:92:f9:67:7d:78:ed:f7:9c:ae:a7:81:1f:8d:
cb:e5:36:60:50:0b:af:a1:4d:1c:5c:e2:5b:2b:92:
94:22:49:0f:4c:6b:0d:36:75:88:7f:df:d6:8c:b8:
fd:36:cf:aa:b8:86:37:48:91:64:60:8f:97:6e:a6:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6E:E8:D4:63:E7:55:9E:40:54:8A:4C:C2:B1:E0:86:E0:0F:0D:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F1A0F2CDFD511EFA27A4095762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:95:3e:8e:50:f4:01:c4:46:dd:4d:8a:8a:36:a8:96:58:36:
a0:b4:51:7e:6b:88:f0:5c:12:c5:29:92:28:43:65:3c:17:ba:
ac:f4:58:19:26:30:79:5e:23:ad:f2:dc:ec:5c:2b:0f:ae:59:
de:0e:ae:3f:e5:46:ea:ef:14:6c:30:5b:f7:01:3b:b4:99:ff:
25:87:06:d1:b9:e6:d0:08:f1:86:d1:fb:0c:ed:85:32:b8:ce:
7b:93:39:bf:6f:ed:ef:60:09:1b:44:6f:4c:c7:89:85:84:8b:
72:77:f3:b7:da:91:76:1d:c0:ed:0d:23:96:d4:62:64:a8:22:
9b:9a:a6:26:70:80:9a:f2:0c:f3:48:e0:49:d8:3b:78:fa:a7:
6b:11:b5:ec:4d:d9:37:99:42:f9:9d:41:9d:ea:3d:06:c6:85:
ef:69:9d:a4:0e:c5:31:c4:58:9d:02:6b:6c:32:a7:25:d9:d3:
45:44:fa:26:9a:10:a7:5e:0f:0e:86:4a:be:48:2e:0d:f4:c5:
b7:43:0b:58:3e:ff:98:d1:2c:17:e6:5e:85:c3:70:99:91:4e:
45:57:59:35:7d:e6:aa:cb:19:2f:28:16:2c:93:0c:26:15:38:
b5:8c:3f:73:45:de:c4:65:ef:29:53:0b:80:47:c5:9e:1c:bc:
85:ed:60:bc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARXKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTMxMTMxNjQyWhcNMjUwMzA2MTMxNjQyWjAYMRYw
FAYDVQQDEw02NzljY2QzZS1jMjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApPzApVMC17xCz3HDdIENTKZpJ4gHXscdHUfE1zefAkSaOyQKMU19quzu
aTZb0XCP/RABw/nbZUjLRxuQhljSWcBy6z9qAKApGomY0Jhmlkr2w5LozOC8K9LH
0cFeDuG2x8wHFUls6IM8zDMEA5bSipW2+b/0prN2X6Gxvv1dIwl5XPVcQtuHAehg
4BRoL4lesDiWUsU4DvE6ISPpw9bldSIw7G9McV1H/8ahr0hetyxOeU4twKe3qjNt
0pCGX9SYi/PFCpL5Z3147fecrqeBH43L5TZgUAuvoU0cXOJbK5KUIkkPTGsNNnWI
f9/WjLj9Ns+quIY3SJFkYI+XbqanmQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMBu
6NRj51WeQFSKTMKx4IbgDw37MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RjFBMEYyQ0RGRDUxMUVGQTI3QTQwOTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcWHMA0GCSqGSIb3DQEBCwUA
A4IBAQBslT6OUPQBxEbdTYqKNqiWWDagtFF+a4jwXBLFKZIoQ2U8F7qs9FgZJjB5
XiOt8tzsXCsPrlneDq4/5Ubq7xRsMFv3ATu0mf8lhwbRuebQCPGG0fsM7YUyuM57
kzm/b+3vYAkbRG9Mx4mFhItyd/O32pF2HcDtDSOW1GJkqCKbmqYmcICa8gzzSOBJ
2Dt4+qdrEbXsTdk3mUL5nUGd6j0GxoXvaZ2kDsUxxFidAmtsMqcl2dNFRPommhCn
Xg8Ohkq+SC4N9MW3QwtYPv+Y0SwX5l6Fw3CZkU5FV1k1feaqyxkvKBYskwwmFTi1
jD9zRd7EZe8pUwuAR8WeHLyF7WC8
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:13 2025 by rpki-client