Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D566B3F4D72511EFB734A943762E951A.roa
File: D566B3F4D72511EFB734A943762E951A.roa (raw, json)
Hash identifier: XweA7Z0iP4l8IxnLzOJS0In2+SeJU8PZCbsHIE10vXY=
Subject key identifier: 72:7A:00:9D:E8:00:82:19:E6:F5:F8:ED:DE:98:CC:53:1F:AB:B6:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C5D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D566B3F4D72511EFB734A943762E951A.roa
Signing time: Mon 20 Jan 2025 11:58:17 +0000
ROA not before: Mon 20 Jan 2025 11:58:13 +0000
ROA not after: Sat 01 Feb 2025 11:58:13 +0000
asID: 202656
IP address blocks: 45.199.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68701 (0x10c5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 11:58:13 2025 GMT
Not After : Feb 1 11:58:13 2025 GMT
Subject: CN=678e3a58-428a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:38:eb:22:92:83:83:6e:f6:c3:b0:9e:16:
93:c6:95:4a:05:5d:96:1b:ec:4c:be:c9:0b:b6:37:
26:74:e5:a5:23:28:b7:aa:9f:a0:3e:0d:a9:d9:26:
13:43:e5:f7:5c:91:57:15:27:0b:63:a5:46:e4:80:
da:79:31:fa:f0:3f:b9:0f:56:70:85:08:a4:1e:c2:
ef:46:45:3d:e4:f2:c3:c9:24:62:33:cb:f5:90:93:
10:7a:e5:e3:6a:a5:59:98:4f:50:8d:2d:52:5b:5b:
b7:01:36:cd:1f:6c:ff:a7:ca:0d:b4:43:5d:16:0b:
1a:c8:9a:48:74:33:b5:47:9c:2a:5c:1a:a9:a5:ef:
ab:4c:26:46:9b:93:cc:7b:f5:9f:87:0b:ef:46:e2:
c2:d7:ee:70:e3:41:e9:b5:26:9d:89:42:f2:6c:a9:
a1:74:93:d5:4a:5b:58:07:9e:ee:ac:23:51:97:5b:
f8:a5:7e:6a:79:6b:b9:32:65:11:ba:36:e9:61:90:
76:62:fe:11:5f:f4:6d:8d:1c:30:99:04:bd:f5:37:
5c:94:19:92:a2:f1:cc:fa:23:d1:16:16:61:ee:5a:
01:27:a9:26:72:97:a3:3d:b7:39:e9:15:8c:36:d3:
3d:21:0c:6e:42:20:78:26:e0:87:c5:2a:1b:c1:c2:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7A:00:9D:E8:00:82:19:E6:F5:F8:ED:DE:98:CC:53:1F:AB:B6:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D566B3F4D72511EFB734A943762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.244.0/22
Signature Algorithm: sha256WithRSAEncryption
27:89:61:e2:f2:f0:78:95:e3:79:47:e6:ba:d8:69:c5:49:e5:
9c:8a:90:be:c6:69:e6:a3:59:b0:5b:a4:a6:9f:27:5f:7c:ca:
e4:28:e7:e0:83:36:88:e0:f9:e9:16:fd:f4:0f:25:44:0a:d7:
af:2c:60:7e:7c:6c:bf:ad:c4:90:72:1b:68:6a:ac:8c:00:ce:
9d:b7:98:9d:4d:dc:0d:10:3d:d2:3e:03:e6:42:3f:a1:54:55:
23:45:18:a1:ec:79:1f:be:0e:da:df:0e:c8:7f:7d:ca:ae:60:
40:85:a5:98:4e:7f:e6:29:f7:0f:b6:e8:7f:95:1a:af:63:ce:
bf:3e:1d:d5:a8:00:14:45:35:6d:13:51:2c:33:64:b3:b2:b4:
2b:d2:b6:2a:c2:90:26:00:ed:f5:57:24:9b:2a:36:68:33:b7:
0e:b0:ec:8e:0a:d9:31:ed:e1:da:64:08:51:34:96:03:7f:61:
8d:74:b7:cc:61:ee:bf:ee:1f:e3:16:04:17:4c:aa:d7:50:83:
a1:e4:50:da:c6:22:00:54:46:f2:cd:72:55:6e:b3:43:03:ed:
4c:df:33:e1:ee:88:88:44:3e:6d:69:a6:da:8e:05:bb:81:7c:
a1:75:99:25:4b:02:28:f9:da:ad:6d:f2:b1:15:eb:58:d4:c9:
68:28:33:9e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQxdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIwMTE1ODEzWhcNMjUwMjAxMTE1ODEzWjAYMRYw
FAYDVQQDEw02NzhlM2E1OC00MjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyKg46yKSg4Nu9sOwnhaTxpVKBV2WG+xMvskLtjcmdOWlIyi3qp+gPg2p
2SYTQ+X3XJFXFScLY6VG5IDaeTH68D+5D1ZwhQikHsLvRkU95PLDySRiM8v1kJMQ
euXjaqVZmE9QjS1SW1u3ATbNH2z/p8oNtENdFgsayJpIdDO1R5wqXBqppe+rTCZG
m5PMe/WfhwvvRuLC1+5w40HptSadiULybKmhdJPVSltYB57urCNRl1v4pX5qeWu5
MmURujbpYZB2Yv4RX/RtjRwwmQS99TdclBmSovHM+iPRFhZh7loBJ6kmcpejPbc5
6RWMNtM9IQxuQiB4JuCHxSobwcLU/QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHJ6
AJ3oAIIZ5vX47d6YzFMfq7adMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENTY2QjNGNEQ3MjUxMUVGQjczNEE5NDM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcf0MA0GCSqGSIb3DQEBCwUA
A4IBAQAniWHi8vB4leN5R+a62GnFSeWcipC+xmnmo1mwW6SmnydffMrkKOfggzaI
4PnpFv30DyVECtevLGB+fGy/rcSQchtoaqyMAM6dt5idTdwNED3SPgPmQj+hVFUj
RRih7Hkfvg7a3w7If33KrmBAhaWYTn/mKfcPtuh/lRqvY86/Ph3VqAAURTVtE1Es
M2SzsrQr0rYqwpAmAO31VySbKjZoM7cOsOyOCtkx7eHaZAhRNJYDf2GNdLfMYe6/
7h/jFgQXTKrXUIOh5FDaxiIAVEbyzXJVbrNDA+1M3zPh7oiIRD5taabajgW7gXyh
dZklSwIo+dqtbfKxFetY1MloKDOe
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:30 2025 by rpki-client