Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/574C3EBE00BD11F09DD574B2762E951A.roa
File: 574C3EBE00BD11F09DD574B2762E951A.roa (raw, json)
Hash identifier: Dsb/pYI7htC+qvj1BEPvf58SLWsllTAjgZSFwY7Aw5U=
Subject key identifier: FE:69:27:50:E6:4C:15:DB:17:4C:DF:7C:43:78:03:44:86:1E:89:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/574C3EBE00BD11F09DD574B2762E951A.roa
Signing time: Fri 14 Mar 2025 10:16:06 +0000
ROA not before: Fri 14 Mar 2025 10:16:01 +0000
ROA not after: Tue 22 Apr 2025 10:16:01 +0000
asID: 8796
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83420 (0x145dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 10:16:01 2025 GMT
Not After : Apr 22 10:16:01 2025 GMT
Subject: CN=67d401e6-b31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:a5:ac:15:6f:42:f5:31:4a:82:07:7b:cc:
ee:1f:bb:b8:7b:09:83:32:a9:89:e9:54:ee:45:3b:
7f:2c:73:a3:40:8e:3b:60:6a:17:25:1d:ab:b6:4d:
f3:09:0b:bd:15:6e:82:18:7a:7a:cb:1a:95:8f:9f:
b7:f7:cf:3a:3f:14:7d:99:8d:88:a6:e7:bc:c7:fb:
73:5c:54:90:17:1f:40:f1:4a:5d:aa:12:18:7a:30:
a1:32:b4:bc:54:2f:23:61:2e:01:66:d8:2b:91:bc:
a3:3f:be:71:f9:51:93:c7:3e:34:27:21:ee:a3:e1:
92:ed:4e:25:59:2d:c4:c3:62:4e:f8:a8:d7:c1:e9:
14:54:e0:25:8c:3d:4a:d3:ff:66:f6:5c:05:6b:c1:
68:c5:0d:67:af:78:4b:e8:fe:b1:98:34:b3:85:4c:
17:bf:77:c4:de:66:71:14:a2:cb:86:e9:b8:5a:8c:
ec:03:4e:3f:12:89:9f:d6:8b:cb:cb:dc:78:32:9a:
65:2a:f0:04:eb:31:0b:88:71:99:52:9c:ad:fb:fa:
26:30:b9:26:f1:6e:5a:6a:46:c0:fb:38:72:3c:3c:
ae:8e:d7:18:b0:55:83:12:f6:37:37:ed:a6:1b:19:
51:ea:1e:e7:45:17:9b:45:d9:08:68:18:f6:ea:d1:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:69:27:50:E6:4C:15:DB:17:4C:DF:7C:43:78:03:44:86:1E:89:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/574C3EBE00BD11F09DD574B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
58:08:4f:5d:84:f0:ba:04:9a:a0:51:64:58:1b:a8:48:44:d3:
d7:7a:05:6c:dc:d9:a7:5c:e3:c7:4c:43:c4:be:ce:a4:7d:fa:
68:8c:c4:14:26:ef:c7:6f:80:56:47:5e:44:c7:33:c1:3c:dc:
4a:ed:06:4b:d8:af:5a:8b:a8:c5:49:5f:18:47:17:97:55:23:
be:80:b8:6e:ea:3d:84:f1:d6:71:c7:c2:e5:b9:7e:be:2a:56:
8b:55:c5:d7:a1:23:f8:38:8b:e4:48:2a:20:a4:3f:23:a1:00:
9a:34:c9:7c:97:59:77:9b:c1:43:e8:dd:4b:e4:47:86:76:d5:
a4:d4:2e:68:ea:6f:a5:21:3e:7a:10:64:01:67:e1:0f:f7:69:
65:8b:0f:fa:a6:b5:ff:f1:9f:ca:07:60:5c:a7:24:4a:38:5d:
82:17:bc:59:de:7f:78:e3:ff:44:96:ef:cf:9e:82:7f:d6:c8:
c7:2c:9d:3d:f9:cb:cf:4c:5a:54:02:9d:3b:4d:68:4c:c6:60:
c8:3b:5b:f7:64:93:1b:d7:ed:ea:bb:f5:ec:e3:11:86:92:05:
35:91:79:21:f4:c7:d7:57:7b:b4:0c:cc:a0:aa:e8:87:58:fb:
ae:10:7a:3d:f7:b2:2d:f2:96:db:d4:9a:6c:58:76:24:07:cb:
a2:ff:d2:12
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUXcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE0MTAxNjAxWhcNMjUwNDIyMTAxNjAxWjAYMRYw
FAYDVQQDEw02N2Q0MDFlNi1iMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp0WlrBVvQvUxSoIHe8zuH7u4ewmDMqmJ6VTuRTt/LHOjQI47YGoXJR2r
tk3zCQu9FW6CGHp6yxqVj5+39886PxR9mY2Ipue8x/tzXFSQFx9A8UpdqhIYejCh
MrS8VC8jYS4BZtgrkbyjP75x+VGTxz40JyHuo+GS7U4lWS3Ew2JO+KjXwekUVOAl
jD1K0/9m9lwFa8FoxQ1nr3hL6P6xmDSzhUwXv3fE3mZxFKLLhum4WozsA04/Eomf
1ovLy9x4MpplKvAE6zELiHGZUpyt+/omMLkm8W5aakbA+zhyPDyujtcYsFWDEvY3
N+2mGxlR6h7nRRebRdkIaBj26tGINwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP5p
J1DmTBXbF0zffEN4A0SGHomCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NzRDM0VCRTAwQkQxMUYwOURENTc0QjI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELc0QMA0GCSqGSIb3DQEBCwUA
A4IBAQBYCE9dhPC6BJqgUWRYG6hIRNPXegVs3NmnXOPHTEPEvs6kffpojMQUJu/H
b4BWR15ExzPBPNxK7QZL2K9ai6jFSV8YRxeXVSO+gLhu6j2E8dZxx8LluX6+KlaL
VcXXoSP4OIvkSCogpD8joQCaNMl8l1l3m8FD6N1L5EeGdtWk1C5o6m+lIT56EGQB
Z+EP92lliw/6prX/8Z/KB2BcpyRKOF2CF7xZ3n944/9Elu/PnoJ/1sjHLJ09+cvP
TFpUAp07TWhMxmDIO1v3ZJMb1+3qu/Xs4xGGkgU1kXkh9MfXV3u0DMygquiHWPuu
EHo997It8pbb1JpsWHYkB8ui/9IS
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:02 2025 by rpki-client