Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2517258D57A11EFB01B235C762E951A.roa
File: A2517258D57A11EFB01B235C762E951A.roa (raw, json)
Hash identifier: qWbru9DIIdJ7JtFcIufTNqDt/tVqH+v8gFNT4wyUTJM=
Subject key identifier: 93:DE:F7:B4:C1:A6:92:59:60:82:56:67:6E:9E:75:48:EE:6B:B7:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2517258D57A11EFB01B235C762E951A.roa
Signing time: Sat 18 Jan 2025 09:00:16 +0000
ROA not before: Sat 18 Jan 2025 09:00:12 +0000
ROA not after: Thu 22 Jan 2026 09:00:12 +0000
asID: 18186
IP address blocks: 45.196.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68401 (0x10b31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 18 09:00:12 2025 GMT
Not After : Jan 22 09:00:12 2026 GMT
Subject: CN=678b6da0-b0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e7:22:d7:7c:8b:52:f6:80:9b:aa:40:83:a1:
24:6e:2d:61:6c:9e:07:78:ee:c4:a7:c8:82:55:b0:
c7:c7:d1:28:55:6e:c6:e2:9c:5a:34:06:73:4a:a3:
98:d7:30:91:96:15:45:42:e2:98:e0:50:d1:c2:8f:
1d:85:6d:41:5b:58:e1:25:d8:38:1d:69:5b:c5:91:
08:c1:85:d5:50:86:17:fd:bc:3d:05:3a:36:53:b4:
52:6a:bf:66:3f:9e:3a:30:eb:12:63:ec:12:f3:b9:
30:dd:01:9e:71:ce:6a:50:2e:05:59:ae:f4:04:e2:
de:2b:b2:95:a3:ce:6c:78:d0:c7:75:2d:54:92:8d:
85:f3:9f:10:29:5e:6e:50:de:c5:d3:d3:22:e2:8e:
4d:cd:21:a4:38:70:18:e0:32:34:38:0b:57:dc:11:
25:2d:8d:32:1c:92:06:56:5e:fd:a0:78:e9:b8:13:
e1:de:9c:78:41:3f:df:a3:c3:fd:45:e3:cc:46:0f:
94:a6:fe:04:85:70:af:dc:09:8b:1e:ee:a2:b4:f0:
a2:4c:ca:d1:66:6c:55:a8:c0:be:54:96:17:0f:4c:
f5:bd:c1:b2:9c:8e:98:68:13:2e:87:ab:58:fa:6b:
1a:6d:eb:18:65:64:cd:36:57:09:20:51:78:2c:cc:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DE:F7:B4:C1:A6:92:59:60:82:56:67:6E:9E:75:48:EE:6B:B7:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2517258D57A11EFB01B235C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.244.0/22
Signature Algorithm: sha256WithRSAEncryption
19:92:40:11:8d:35:ee:63:a1:15:01:e3:14:b7:ab:5b:bf:25:
42:e3:fb:52:6a:22:79:ac:ed:29:3e:d3:e9:e9:9f:1c:4a:de:
71:b0:a7:3f:b8:09:e7:b5:18:1c:01:6e:db:a4:1a:a7:a6:fc:
e5:ea:4a:d8:85:2a:51:01:86:3a:af:c7:d3:a1:d9:53:10:96:
4c:de:e1:8c:35:0e:4f:b2:8e:8b:42:8a:45:55:0e:0b:a4:b9:
76:d6:7a:67:80:28:66:32:ad:b3:7a:82:5b:5a:46:bf:b8:27:
c0:11:73:1e:ba:77:06:9d:03:06:89:b3:92:7f:c5:84:e9:8f:
73:0d:80:bd:09:e2:d9:f2:f8:5c:ed:f0:b9:3a:18:e2:05:db:
87:ff:62:1e:3e:b0:90:70:3d:40:ed:c6:c9:31:67:8f:08:82:
17:fc:37:56:66:93:cc:67:12:62:44:b8:d4:fb:db:24:4a:46:
fb:2d:e6:d7:cb:74:55:74:05:92:67:9d:ca:ab:57:57:b8:7f:
5b:de:be:11:19:7d:76:34:12:ac:31:34:42:15:7a:20:c7:d8:
db:31:60:82:2d:63:39:b1:34:fa:7d:1e:a7:cf:bb:71:9d:b8:
51:97:b9:47:4f:dc:de:65:04:26:f7:16:9e:02:9e:fe:54:a7:
08:c1:79:bb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQsxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE4MDkwMDEyWhcNMjYwMTIyMDkwMDEyWjAYMRYw
FAYDVQQDEw02NzhiNmRhMC1iMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6Oci13yLUvaAm6pAg6Ekbi1hbJ4HeO7Ep8iCVbDHx9EoVW7G4pxaNAZz
SqOY1zCRlhVFQuKY4FDRwo8dhW1BW1jhJdg4HWlbxZEIwYXVUIYX/bw9BTo2U7RS
ar9mP546MOsSY+wS87kw3QGecc5qUC4FWa70BOLeK7KVo85seNDHdS1Uko2F858Q
KV5uUN7F09Mi4o5NzSGkOHAY4DI0OAtX3BElLY0yHJIGVl79oHjpuBPh3px4QT/f
o8P9RePMRg+Upv4EhXCv3AmLHu6itPCiTMrRZmxVqMC+VJYXD0z1vcGynI6YaBMu
h6tY+msabesYZWTNNlcJIFF4LMyJtwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJPe
97TBppJZYIJWZ26edUjua7dEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMjUxNzI1OEQ1N0ExMUVGQjAxQjIzNUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcT0MA0GCSqGSIb3DQEBCwUA
A4IBAQAZkkARjTXuY6EVAeMUt6tbvyVC4/tSaiJ5rO0pPtPp6Z8cSt5xsKc/uAnn
tRgcAW7bpBqnpvzl6krYhSpRAYY6r8fTodlTEJZM3uGMNQ5Pso6LQopFVQ4LpLl2
1npngChmMq2zeoJbWka/uCfAEXMeuncGnQMGibOSf8WE6Y9zDYC9CeLZ8vhc7fC5
OhjiBduH/2IePrCQcD1A7cbJMWePCIIX/DdWZpPMZxJiRLjU+9skSkb7LebXy3RV
dAWSZ53Kq1dXuH9b3r4RGX12NBKsMTRCFXogx9jbMWCCLWM5sTT6fR6nz7txnbhR
l7lHT9zeZQQm9xaeAp7+VKcIwXm7
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:08 2025 by rpki-client