Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC93D40CDAF111EF850FB19D762E951A.roa
File: DC93D40CDAF111EF850FB19D762E951A.roa (raw, json)
Hash identifier: mSHRJzMsmuoIWOL35pz2l9FY/LKIEAGUi/mpbRtrA/0=
Subject key identifier: 2E:EC:A6:CB:3E:35:D7:E7:23:A2:BA:9B:AB:29:D7:6E:CA:12:C4:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011153
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC93D40CDAF111EF850FB19D762E951A.roa
Signing time: Sat 25 Jan 2025 07:56:19 +0000
ROA not before: Sat 25 Jan 2025 07:56:16 +0000
ROA not after: Sun 23 Feb 2025 07:56:16 +0000
asID: 202656
IP address blocks: 45.195.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69971 (0x11153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:56:16 2025 GMT
Not After : Feb 23 07:56:16 2025 GMT
Subject: CN=67949923-5117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:c5:1e:bc:0d:db:89:74:c8:85:5b:ab:2a:
d0:75:c9:a7:a4:7b:d2:90:42:58:38:1a:18:1b:1e:
7b:3e:4d:97:0c:52:b8:0c:e8:37:ff:22:cf:c1:1f:
27:4b:6a:6f:68:ee:64:ce:11:21:a2:28:84:82:72:
67:e0:20:b9:e3:b9:41:ef:e6:c7:1d:c5:54:ee:2f:
0e:3e:31:27:f6:a5:94:7e:d5:85:56:f6:56:32:81:
ad:9e:f4:a0:5f:88:65:59:df:8d:f4:f5:62:07:97:
7d:aa:a6:b7:70:fd:47:77:6a:c1:14:d8:c8:9f:a0:
8f:37:d6:0b:a0:e1:7c:5a:56:83:29:6f:52:fa:ac:
85:e9:bf:e5:6f:3a:3a:fc:2a:35:ee:fa:89:bc:fc:
a9:db:86:cf:49:36:4f:31:39:d9:93:29:83:5c:b7:
35:c0:21:c3:6b:05:bb:d0:3f:a6:25:6a:23:12:b5:
39:60:6a:7d:3e:c2:6a:d3:a6:27:0a:ab:a8:05:14:
f0:cb:af:fc:96:44:92:a0:50:a4:ec:a8:79:26:1e:
4e:3b:c5:95:8a:b1:d5:45:3e:ba:d4:aa:b5:11:aa:
5e:44:b4:8e:7d:51:6f:a9:1a:8a:db:60:50:02:5d:
f5:67:99:c4:24:64:4f:9b:88:c6:59:c0:9c:08:37:
e4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EC:A6:CB:3E:35:D7:E7:23:A2:BA:9B:AB:29:D7:6E:CA:12:C4:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC93D40CDAF111EF850FB19D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.186.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0d:55:2b:81:fd:bd:7c:ad:c0:20:60:d3:29:8e:f3:06:31:
a8:56:3d:3c:d4:f6:76:3e:5b:c1:7f:10:f4:83:42:f8:85:01:
d1:85:da:4f:97:3d:2d:ed:35:4e:28:98:de:51:cc:c0:a5:2a:
93:8c:07:96:1e:92:15:cd:7b:e6:08:68:8a:cf:b1:2e:ae:2e:
88:a1:6d:cf:c0:a8:9b:2e:91:fc:f8:63:63:f2:22:a1:1a:67:
d0:0f:ed:5e:4a:a3:d9:0f:1b:ba:1f:3a:f3:a8:99:e2:80:5f:
8f:3f:27:27:15:7f:88:6c:e4:56:57:41:3f:6d:a4:eb:e4:6f:
a2:0a:93:da:27:d1:e1:0f:da:5e:d5:c3:c6:fb:18:26:8d:03:
11:d5:c5:73:d9:1d:9d:14:60:8d:09:d9:5d:50:e6:c0:e2:7f:
a5:21:0f:70:72:81:8e:2c:df:05:9f:0a:9e:ff:fe:34:88:25:
85:ec:22:27:d9:c7:ec:e4:ae:67:82:ae:59:51:26:e8:5b:f7:
ac:c1:6f:5a:80:64:b9:b5:af:c7:82:78:e2:7e:ca:50:71:c1:
40:c2:cb:bb:3d:fa:d5:07:36:6e:de:80:ae:ff:93:5b:a4:15:
4b:ad:00:0a:ba:e9:16:02:ef:8c:ca:5a:85:57:d7:5a:87:bb:
3f:2c:f4:f6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARFTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MDc1NjE2WhcNMjUwMjIzMDc1NjE2WjAYMRYw
FAYDVQQDEw02Nzk0OTkyMy01MTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApc7FHrwN24l0yIVbqyrQdcmnpHvSkEJYOBoYGx57Pk2XDFK4DOg3/yLP
wR8nS2pvaO5kzhEhoiiEgnJn4CC547lB7+bHHcVU7i8OPjEn9qWUftWFVvZWMoGt
nvSgX4hlWd+N9PViB5d9qqa3cP1Hd2rBFNjIn6CPN9YLoOF8WlaDKW9S+qyF6b/l
bzo6/Co17vqJvPyp24bPSTZPMTnZkymDXLc1wCHDawW70D+mJWojErU5YGp9PsJq
06YnCquoBRTwy6/8lkSSoFCk7Kh5Jh5OO8WVirHVRT661Kq1EapeRLSOfVFvqRqK
22BQAl31Z5nEJGRPm4jGWcCcCDfkuwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC7s
pss+NdfnI6K6m6sp127KEsSgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQzkzRDQwQ0RBRjExMUVGODUwRkIxOUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcO6MA0GCSqGSIb3DQEBCwUA
A4IBAQBHDVUrgf29fK3AIGDTKY7zBjGoVj081PZ2PlvBfxD0g0L4hQHRhdpPlz0t
7TVOKJjeUczApSqTjAeWHpIVzXvmCGiKz7Euri6IoW3PwKibLpH8+GNj8iKhGmfQ
D+1eSqPZDxu6HzrzqJnigF+PPycnFX+IbORWV0E/baTr5G+iCpPaJ9HhD9pe1cPG
+xgmjQMR1cVz2R2dFGCNCdldUObA4n+lIQ9wcoGOLN8Fnwqe//40iCWF7CIn2cfs
5K5ngq5ZUSboW/eswW9agGS5ta/HgnjifspQccFAwsu7PfrVBzZu3oCu/5NbpBVL
rQAKuukWAu+MylqFV9dah7s/LPT2
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:42 2025 by rpki-client