Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10884AE8FF3411EFAA672A52762E951A.roa
File: 10884AE8FF3411EFAA672A52762E951A.roa (raw, json)
Hash identifier: H0iVf+KgfWzkv7KDRFzTtQIPCMTP2vPi+shZxc/jdlg=
Subject key identifier: 60:EB:C5:5F:08:8F:25:A7:A4:46:CA:44:92:6B:F6:70:18:C5:44:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014559
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10884AE8FF3411EFAA672A52762E951A.roa
Signing time: Wed 12 Mar 2025 11:20:55 +0000
ROA not before: Wed 12 Mar 2025 11:20:51 +0000
ROA not after: Thu 08 May 2025 11:20:51 +0000
asID: 63787
IP address blocks: 45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/24 maxlen: 24
45.192.179.0/24 maxlen: 24
45.192.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83289 (0x14559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 11:20:51 2025 GMT
Not After : May 8 11:20:51 2025 GMT
Subject: CN=67d16e17-f82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:0c:3c:96:76:f7:bf:e7:70:da:19:1f:b2:
00:b9:02:1e:12:fc:c0:23:b5:68:51:3d:1e:0b:2a:
14:2d:c6:f0:cf:c3:a2:43:43:48:43:e8:d1:4a:3c:
34:3a:8a:2b:18:60:68:cf:04:e6:87:86:64:21:9f:
db:9e:83:22:a0:89:da:95:ef:9d:70:35:cf:42:0c:
d9:d6:a4:df:23:7f:4c:26:a7:15:f8:60:f1:ad:3e:
e8:cd:ab:6e:37:03:ef:69:6f:d6:dd:2a:ed:6a:0e:
7d:22:4b:c0:8d:0d:a1:40:a5:b2:4e:af:ac:8b:11:
98:a7:aa:4d:c8:e4:ca:a0:b4:a1:87:bf:44:d1:cb:
3f:d2:f8:51:2a:d4:07:b2:fa:63:eb:ab:83:2c:bd:
07:6d:38:b6:59:7e:ce:7d:9d:93:76:26:26:98:fe:
c4:3a:7f:1a:f4:92:42:6b:bd:a6:3f:56:30:ed:e3:
7c:3d:53:83:fc:5b:44:51:b1:5f:61:9e:f6:d8:87:
8b:ba:83:c7:85:53:a9:2f:ec:41:aa:bc:c1:a1:83:
a6:1e:d0:3e:21:a5:e7:38:2d:01:4e:0f:1b:c6:cf:
aa:53:36:4c:f1:6f:b5:e9:39:78:df:a2:e3:5e:de:
5b:ec:43:5d:b3:2b:ad:b6:1a:7e:0f:5a:06:94:70:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EB:C5:5F:08:8F:25:A7:A4:46:CA:44:92:6B:F6:70:18:C5:44:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10884AE8FF3411EFAA672A52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.176.0-45.192.180.255
Signature Algorithm: sha256WithRSAEncryption
81:71:09:40:ab:30:65:eb:04:ee:af:a0:29:76:1c:67:c0:d1:
b5:da:fe:be:78:b1:57:08:ef:d3:47:0f:2f:3e:2d:db:21:b7:
9b:ad:d6:13:07:fa:ed:41:bc:79:ba:68:60:7c:2c:79:8a:26:
ec:12:f2:c0:bb:68:78:56:bd:f6:28:9b:a1:80:70:c4:30:e5:
0e:14:c8:b3:f8:57:84:c7:ca:db:5b:24:37:98:f6:4a:0d:21:
0e:f0:4e:1a:a0:fa:f2:87:02:5c:8d:af:75:9b:6a:b6:da:4e:
4a:d6:5a:c8:7e:92:0e:fc:3d:ed:b5:19:56:1c:65:99:2f:d5:
23:05:58:b0:02:24:34:57:7b:12:f7:2b:23:0a:3f:f1:b2:e8:
0e:d1:30:1e:c7:4f:be:ec:0f:76:b4:be:ff:ca:0c:0e:16:d9:
78:53:1d:25:a4:d6:2a:cb:a6:2e:5d:a6:6a:57:38:29:d5:29:
a4:37:30:23:83:ee:b2:6f:07:ab:70:34:33:5a:b4:e4:2a:15:
08:a4:48:20:28:b6:75:4d:f4:6c:19:d9:ac:3d:0d:88:d4:a0:
8f:ad:da:27:3c:db:c8:f4:c5:e8:06:9d:0b:d6:25:c9:a0:c1:
c1:2f:6d:52:46:ae:bf:a2:93:18:77:18:e1:b2:e1:42:2a:04:
4b:a4:76:d0
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAUVZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzEyMTEyMDUxWhcNMjUwNTA4MTEyMDUxWjAYMRYw
FAYDVQQDEw02N2QxNmUxNy1mODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv48MPJZ297/ncNoZH7IAuQIeEvzAI7VoUT0eCyoULcbwz8OiQ0NIQ+jR
Sjw0OoorGGBozwTmh4ZkIZ/bnoMioInale+dcDXPQgzZ1qTfI39MJqcV+GDxrT7o
zatuNwPvaW/W3Srtag59IkvAjQ2hQKWyTq+sixGYp6pNyOTKoLShh79E0cs/0vhR
KtQHsvpj66uDLL0HbTi2WX7OfZ2TdiYmmP7EOn8a9JJCa72mP1Yw7eN8PVOD/FtE
UbFfYZ722IeLuoPHhVOpL+xBqrzBoYOmHtA+IaXnOC0BTg8bxs+qUzZM8W+16Tl4
36LjXt5b7ENdsyutthp+D1oGlHCJ5wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGDr
xV8IjyWnpEbKRJJr9nAYxUSyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMDg4NEFFOEZGMzQxMUVGQUE2NzJBNTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQtwLADBAAtwLQwDQYJKoZI
hvcNAQELBQADggEBAIFxCUCrMGXrBO6voCl2HGfA0bXa/r54sVcI79NHDy8+Ldsh
t5ut1hMH+u1BvHm6aGB8LHmKJuwS8sC7aHhWvfYom6GAcMQw5Q4UyLP4V4THyttb
JDeY9koNIQ7wThqg+vKHAlyNr3WbarbaTkrWWsh+kg78Pe21GVYcZZkv1SMFWLAC
JDRXexL3KyMKP/Gy6A7RMB7HT77sD3a0vv/KDA4W2XhTHSWk1irLpi5dpmpXOCnV
KaQ3MCOD7rJvB6twNDNatOQqFQikSCAotnVN9GwZ2aw9DYjUoI+t2ic828j0xegG
nQvWJcmgwcEvbVJGrr+ikxh3GOGy4UIqBEukdtA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:43 2025 by rpki-client