Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/865EB2FEF39311EFAD9D769F762E951A.roa
File: 865EB2FEF39311EFAD9D769F762E951A.roa (raw, json)
Hash identifier: se+MzAYZCqUriHkejrVIP+KeElzi89iKyZwX4VL0Szc=
Subject key identifier: A3:4D:75:49:7F:98:13:BB:22:1B:A5:5F:A2:93:4E:16:1E:6E:CE:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/865EB2FEF39311EFAD9D769F762E951A.roa
Signing time: Tue 25 Feb 2025 16:14:01 +0000
ROA not before: Tue 25 Feb 2025 16:13:57 +0000
ROA not after: Wed 09 Apr 2025 16:13:57 +0000
asID: 63139
IP address blocks: 45.197.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77455 (0x12e8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 16:13:57 2025 GMT
Not After : Apr 9 16:13:57 2025 GMT
Subject: CN=67bdec49-c841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:45:42:96:ac:b1:e8:cd:f2:93:b7:fb:d0:
a2:d5:63:d2:da:cf:c6:93:c4:81:48:8c:30:41:01:
62:11:a7:bc:a7:de:05:5d:3e:57:69:e5:1a:ba:0a:
e0:a9:d8:3b:94:e0:92:3f:ab:6d:86:35:69:e9:ea:
8c:80:f0:79:cd:a7:92:d7:e1:fc:17:77:fd:ae:b2:
31:e8:40:38:fc:42:e3:ec:75:e0:ff:4e:80:1d:17:
6f:ff:f4:50:e4:1a:ee:85:d2:53:bc:c8:ac:0d:61:
ef:6d:f2:6a:8b:c0:cf:86:06:89:66:6c:4f:66:10:
e8:e6:77:69:1a:bc:9a:01:0a:ea:86:2f:d9:19:d1:
43:09:31:ae:e6:41:c8:c9:d1:81:35:f3:e7:5a:e1:
57:81:96:2d:1a:28:51:2a:7f:b8:4a:dd:6a:53:fb:
a3:67:89:ff:eb:70:98:de:88:b4:d7:b2:af:49:b2:
fe:82:bb:2f:ba:11:07:19:65:4c:eb:49:d0:79:8e:
9e:d6:6d:b7:4e:fd:5d:39:bf:27:bb:64:c4:41:48:
14:91:07:94:68:17:e1:79:28:51:53:6f:60:44:33:
48:0a:b2:89:26:d8:80:1c:cc:8b:c2:bf:09:5f:85:
4a:5c:44:2e:31:e5:ea:19:f6:e4:6b:d2:0e:54:72:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4D:75:49:7F:98:13:BB:22:1B:A5:5F:A2:93:4E:16:1E:6E:CE:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/865EB2FEF39311EFAD9D769F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.115.0/24
Signature Algorithm: sha256WithRSAEncryption
77:93:9c:bf:28:78:d1:02:6e:e5:f1:b9:01:62:68:d2:05:a4:
ac:41:13:f0:3a:5b:6c:eb:bc:3a:bf:0d:58:eb:60:fa:58:8b:
4f:a7:e9:68:1d:29:9c:39:83:8f:4e:2a:2a:2c:03:6d:8c:dd:
73:8b:13:97:e4:56:57:61:ef:8a:96:51:4f:09:61:3d:17:18:
0b:40:30:46:85:f8:51:26:d5:71:4b:dd:70:cd:35:c2:c7:88:
12:6b:4b:82:c5:f4:c4:bc:3a:6e:ac:5f:93:22:1d:ed:f7:4a:
5f:9a:5a:d3:b6:dd:d2:61:9d:9c:72:17:41:6d:50:d0:a3:21:
b6:81:bc:44:fb:28:f9:fa:62:78:e0:b7:00:7f:78:81:35:e7:
f2:45:cb:9c:13:9f:16:5f:3d:97:f2:e4:47:82:7b:e6:0f:4b:
59:57:8e:50:58:dd:19:3e:91:29:6f:ad:76:96:eb:c5:36:75:
e1:9b:ed:0b:ff:41:8e:72:19:53:3c:9c:ff:1f:0a:88:50:53:
0d:35:f6:d3:2e:65:8b:47:09:a5:43:5d:98:18:ff:28:85:76:
82:e8:58:bb:06:e4:3f:8d:55:ab:a6:79:9d:72:89:82:a4:e2:
68:6b:93:e2:cb:87:b8:e1:f3:69:9e:c2:5c:5b:96:ea:64:b2:
bf:c5:c0:ec
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS6PMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MTYxMzU3WhcNMjUwNDA5MTYxMzU3WjAYMRYw
FAYDVQQDEw02N2JkZWM0OS1jODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyjFFQpassejN8pO3+9Ci1WPS2s/Gk8SBSIwwQQFiEae8p94FXT5XaeUa
ugrgqdg7lOCSP6tthjVp6eqMgPB5zaeS1+H8F3f9rrIx6EA4/ELj7HXg/06AHRdv
//RQ5BruhdJTvMisDWHvbfJqi8DPhgaJZmxPZhDo5ndpGryaAQrqhi/ZGdFDCTGu
5kHIydGBNfPnWuFXgZYtGihRKn+4St1qU/ujZ4n/63CY3oi017KvSbL+grsvuhEH
GWVM60nQeY6e1m23Tv1dOb8nu2TEQUgUkQeUaBfheShRU29gRDNICrKJJtiAHMyL
wr8JX4VKXEQuMeXqGfbka9IOVHKWrQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKNN
dUl/mBO7IhulX6KTThYebs79MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NjVFQjJGRUYzOTMxMUVGQUQ5RDc2OUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcVzMA0GCSqGSIb3DQEBCwUA
A4IBAQB3k5y/KHjRAm7l8bkBYmjSBaSsQRPwOlts67w6vw1Y62D6WItPp+loHSmc
OYOPTioqLANtjN1zixOX5FZXYe+KllFPCWE9FxgLQDBGhfhRJtVxS91wzTXCx4gS
a0uCxfTEvDpurF+TIh3t90pfmlrTtt3SYZ2cchdBbVDQoyG2gbxE+yj5+mJ44LcA
f3iBNefyRcucE58WXz2X8uRHgnvmD0tZV45QWN0ZPpEpb612luvFNnXhm+0L/0GO
chlTPJz/HwqIUFMNNfbTLmWLRwmlQ12YGP8ohXaC6Fi7BuQ/jVWrpnmdcomCpOJo
a5Piy4e44fNpnsJcW5bqZLK/xcDs
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:12 2025 by rpki-client