Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F31A8670D52011EF87B96E81762E951A.roa
File: F31A8670D52011EF87B96E81762E951A.roa (raw, json)
Hash identifier: V13mOEp2jbUhi7xS818/BlZOEUFP6G1Bi+qZBfYIklQ=
Subject key identifier: AC:0D:82:41:43:2A:A3:7D:9F:74:C5:3A:57:08:1C:CD:E4:9A:0D:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AE6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F31A8670D52011EF87B96E81762E951A.roa
Signing time: Fri 17 Jan 2025 22:18:17 +0000
ROA not before: Fri 17 Jan 2025 22:18:13 +0000
ROA not after: Sat 22 Feb 2025 22:18:13 +0000
asID: 139646
IP address blocks: 45.201.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68326 (0x10ae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 22:18:13 2025 GMT
Not After : Feb 22 22:18:13 2025 GMT
Subject: CN=678ad728-dc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:e4:30:55:71:66:af:d5:d7:17:16:36:17:
2c:cc:cb:c5:9f:68:80:8f:fd:1d:13:3d:83:ba:dc:
45:b0:3b:12:3e:61:53:09:48:97:e2:1d:36:9b:92:
a9:3d:9b:6d:61:1c:0c:eb:86:71:86:59:c1:59:2f:
e0:a1:b1:e4:1e:78:1b:1f:9d:0e:3f:e5:5d:b7:54:
03:c1:9b:73:ce:bb:8e:f4:b6:9a:d2:e2:8a:24:13:
2c:5d:9d:6c:70:a2:d1:96:bf:2d:eb:5b:f5:d3:a3:
45:dd:cf:79:68:eb:4d:a6:01:00:5f:d1:6c:ee:f9:
38:08:eb:d2:eb:fa:88:bd:78:60:aa:86:ef:e4:23:
57:a7:6b:a5:82:1d:1f:a9:94:b3:3f:22:4d:6b:f3:
41:95:27:98:ef:fb:4b:7c:39:99:56:48:8c:fd:3a:
7f:08:5f:e9:80:4f:43:92:7a:c4:b9:5a:f8:c4:fd:
7a:25:08:ab:0d:8d:4b:7b:f7:62:45:c1:7e:64:ef:
8f:08:13:16:8c:24:05:b9:ad:ab:1c:89:47:8c:11:
71:9b:28:67:b3:df:cf:a7:bc:81:90:1d:84:95:b9:
53:d3:13:3d:37:6d:d8:45:f7:27:46:63:dd:2e:2c:
44:ab:ff:d4:12:e5:71:1d:64:8f:b4:e0:15:89:68:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0D:82:41:43:2A:A3:7D:9F:74:C5:3A:57:08:1C:CD:E4:9A:0D:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F31A8670D52011EF87B96E81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:7b:31:57:d9:a5:a3:c6:87:33:01:43:75:45:1f:55:30:ca:
97:ff:0b:fe:78:f5:4f:33:ec:c7:0c:51:35:c3:ef:eb:cf:0f:
db:32:ab:83:3d:e2:93:f7:79:17:d4:4b:09:b9:cf:db:7e:da:
2a:5f:7e:8a:de:e3:b1:62:70:78:71:28:9d:bd:42:e8:df:27:
32:41:96:0c:9d:67:30:b5:9b:ca:2d:fb:aa:18:7d:47:a3:42:
24:34:53:2e:f0:65:ec:52:c2:c5:d2:7a:1b:93:70:fe:a8:74:
8b:09:5c:25:5a:36:88:11:19:95:ec:00:97:b8:ed:d4:df:40:
68:92:7b:1a:60:1e:30:0e:4f:87:33:9f:d8:98:4f:14:1b:db:
1a:03:96:9f:e5:66:8e:21:ea:5b:35:e4:bb:ab:68:96:bb:c5:
ff:4a:b3:e3:54:bb:07:eb:06:4f:62:55:ea:43:23:34:f2:e5:
96:12:ee:7f:b9:2c:b3:02:87:1a:59:d4:0f:b1:b4:53:7f:ed:
0d:48:61:c5:bc:a1:f8:a4:26:65:6f:fc:5a:84:62:3b:9e:de:
b5:46:b9:95:90:67:ed:78:6c:0a:22:b4:f1:68:ea:fb:9c:8d:
ef:a9:61:b5:b5:1e:3b:76:a4:ac:0e:c5:25:05:87:48:df:51:
4d:55:60:cc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQrmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MjIxODEzWhcNMjUwMjIyMjIxODEzWjAYMRYw
FAYDVQQDEw02NzhhZDcyOC1kYzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApczkMFVxZq/V1xcWNhcszMvFn2iAj/0dEz2DutxFsDsSPmFTCUiX4h02
m5KpPZttYRwM64ZxhlnBWS/gobHkHngbH50OP+Vdt1QDwZtzzruO9Laa0uKKJBMs
XZ1scKLRlr8t61v106NF3c95aOtNpgEAX9Fs7vk4COvS6/qIvXhgqobv5CNXp2ul
gh0fqZSzPyJNa/NBlSeY7/tLfDmZVkiM/Tp/CF/pgE9DknrEuVr4xP16JQirDY1L
e/diRcF+ZO+PCBMWjCQFua2rHIlHjBFxmyhns9/Pp7yBkB2ElblT0xM9N23YRfcn
RmPdLixEq//UEuVxHWSPtOAViWjqOQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKwN
gkFDKqN9n3TFOlcIHM3kmg0zMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMzFBODY3MEQ1MjAxMUVGODdCOTZFODE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcnYMA0GCSqGSIb3DQEBCwUA
A4IBAQArezFX2aWjxoczAUN1RR9VMMqX/wv+ePVPM+zHDFE1w+/rzw/bMquDPeKT
93kX1EsJuc/bftoqX36K3uOxYnB4cSidvULo3ycyQZYMnWcwtZvKLfuqGH1Ho0Ik
NFMu8GXsUsLF0nobk3D+qHSLCVwlWjaIERmV7ACXuO3U30BoknsaYB4wDk+HM5/Y
mE8UG9saA5af5WaOIepbNeS7q2iWu8X/SrPjVLsH6wZPYlXqQyM08uWWEu5/uSyz
AocaWdQPsbRTf+0NSGHFvKH4pCZlb/xahGI7nt61RrmVkGfteGwKIrTxaOr7nI3v
qWG1tR47dqSsDsUlBYdI31FNVWDM
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:05 2025 by rpki-client