Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE130FA8DA7C11EFB8E84B82762E951A.roa
File: CE130FA8DA7C11EFB8E84B82762E951A.roa (raw, json)
Hash identifier: WxWB9SLbLg9xhv8wajQv4HOS/bTiwOk0QPuAOWFcuKQ=
Subject key identifier: 13:4E:83:40:8B:B1:00:05:36:2C:3E:C2:05:E6:06:8E:8D:D6:BF:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FF4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE130FA8DA7C11EFB8E84B82762E951A.roa
Signing time: Fri 24 Jan 2025 17:58:24 +0000
ROA not before: Fri 24 Jan 2025 17:58:20 +0000
ROA not after: Tue 25 Feb 2025 17:58:20 +0000
asID: 202656
IP address blocks: 45.192.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69620 (0x10ff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 17:58:20 2025 GMT
Not After : Feb 25 17:58:20 2025 GMT
Subject: CN=6793d4c0-8975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:8e:18:54:8e:16:71:34:62:7d:b0:5f:89:
ee:a9:6d:2a:1e:50:56:07:36:4e:90:d5:7d:c4:69:
4a:ab:fe:1c:94:02:36:91:5b:e3:87:c2:1b:ff:10:
67:02:f4:1f:aa:6b:75:e5:25:d8:8d:95:5a:36:34:
87:05:1d:c2:d6:5b:cf:e0:19:91:99:1a:bc:30:68:
ac:fb:a3:0c:9d:86:25:a3:06:cf:4c:42:8f:58:81:
7b:1f:e8:a2:b1:de:d0:c5:85:3b:60:eb:ae:16:c2:
98:f3:1a:5d:7a:55:42:02:bb:48:fd:1c:79:07:f0:
b7:bc:3d:79:3c:f5:1b:93:e0:34:be:8d:bc:7c:40:
21:4b:1d:74:1e:08:63:2f:a9:02:bb:09:45:66:e6:
83:35:da:42:a3:aa:da:ac:19:5e:d2:a3:a9:7a:c4:
57:f8:ad:ce:43:19:7a:e1:55:28:0f:97:c9:99:aa:
5e:8a:44:96:22:48:71:1b:2f:ff:76:4b:93:53:cc:
63:ba:4f:f5:4a:6f:91:9c:fa:2a:e0:07:06:90:d6:
52:87:88:5e:92:36:6b:16:0d:ac:58:4e:ba:05:75:
5f:fe:e3:7e:a5:ed:90:ea:33:09:6b:cc:fa:c3:1c:
b7:63:24:8e:2f:5c:43:bd:43:bc:24:9d:1c:4a:a1:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4E:83:40:8B:B1:00:05:36:2C:3E:C2:05:E6:06:8E:8D:D6:BF:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE130FA8DA7C11EFB8E84B82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.49.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4c:bf:42:7b:0d:4b:33:6c:38:88:a0:b9:15:7e:24:a0:98:
e3:64:b7:e1:d0:29:42:d7:f3:e2:9d:e7:f3:60:5a:85:91:26:
fe:d1:ef:97:88:ba:16:aa:4a:48:f8:77:02:0c:a6:cd:7e:da:
de:73:b4:7b:55:75:c2:b5:ed:b9:58:1a:38:73:43:86:98:25:
23:25:57:1c:0a:9a:97:e0:f2:28:65:4d:e5:64:c3:02:0f:db:
82:30:ef:27:50:c2:70:3e:e6:d6:29:7c:40:9c:dd:91:90:86:
35:89:88:a9:2c:d5:bc:03:2d:4b:d8:29:6f:21:53:e8:86:e4:
71:27:ba:e2:32:2b:6f:df:a5:ec:d1:26:b9:2a:f2:a4:07:f1:
6d:30:a9:85:39:92:3d:53:a4:2f:8f:c8:fe:20:6e:1d:a6:24:
8b:aa:d8:92:6c:83:c5:6f:d7:00:d3:eb:fe:ff:9f:eb:88:da:
09:b1:28:09:20:4e:88:73:96:38:5e:ad:84:46:33:2e:ad:ef:
1f:aa:02:2a:04:1b:3f:d6:06:de:99:7f:c2:52:4a:d4:84:88:
61:f6:79:a0:50:02:16:d3:50:8e:6c:cb:7f:35:19:06:13:7f:
f3:b8:2a:de:ea:dd:c5:17:80:6b:5f:3f:83:c8:54:4c:20:60:
01:d0:73:35
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ/0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MTc1ODIwWhcNMjUwMjI1MTc1ODIwWjAYMRYw
FAYDVQQDEw02NzkzZDRjMC04OTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzFaOGFSOFnE0Yn2wX4nuqW0qHlBWBzZOkNV9xGlKq/4clAI2kVvjh8Ib
/xBnAvQfqmt15SXYjZVaNjSHBR3C1lvP4BmRmRq8MGis+6MMnYYlowbPTEKPWIF7
H+iisd7QxYU7YOuuFsKY8xpdelVCArtI/Rx5B/C3vD15PPUbk+A0vo28fEAhSx10
HghjL6kCuwlFZuaDNdpCo6rarBle0qOpesRX+K3OQxl64VUoD5fJmapeikSWIkhx
Gy//dkuTU8xjuk/1Sm+RnPoq4AcGkNZSh4hekjZrFg2sWE66BXVf/uN+pe2Q6jMJ
a8z6wxy3YySOL1xDvUO8JJ0cSqE+3QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBNO
g0CLsQAFNiw+wgXmBo6N1r9LMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRTEzMEZBOERBN0MxMUVGQjhFODRCODI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAxMA0GCSqGSIb3DQEBCwUA
A4IBAQBbTL9Cew1LM2w4iKC5FX4koJjjZLfh0ClC1/PinefzYFqFkSb+0e+XiLoW
qkpI+HcCDKbNftrec7R7VXXCte25WBo4c0OGmCUjJVccCpqX4PIoZU3lZMMCD9uC
MO8nUMJwPubWKXxAnN2RkIY1iYipLNW8Ay1L2ClvIVPohuRxJ7riMitv36Xs0Sa5
KvKkB/FtMKmFOZI9U6Qvj8j+IG4dpiSLqtiSbIPFb9cA0+v+/5/riNoJsSgJIE6I
c5Y4Xq2ERjMure8fqgIqBBs/1gbemX/CUkrUhIhh9nmgUAIW01CObMt/NRkGE3/z
uCre6t3FF4BrXz+DyFRMIGAB0HM1
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:11 2025 by rpki-client