Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89A8D250F42911EFB568FEA7762E951A.roa
File: 89A8D250F42911EFB568FEA7762E951A.roa (raw, json)
Hash identifier: 3elS5Rda1c4El8fN9WtXNA+ISWLxdzLneO5UhNiJGaQ=
Subject key identifier: B0:93:F6:BA:AB:3F:7F:52:11:24:DF:A7:E3:5F:94:AE:16:AE:60:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89A8D250F42911EFB568FEA7762E951A.roa
Signing time: Wed 26 Feb 2025 10:07:51 +0000
ROA not before: Wed 26 Feb 2025 10:07:48 +0000
ROA not after: Sun 20 Feb 2028 10:07:48 +0000
asID: 17561
IP address blocks: 45.204.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78028 (0x130cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:07:48 2025 GMT
Not After : Feb 20 10:07:48 2028 GMT
Subject: CN=67bee7f7-c962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:29:ad:65:62:d9:bf:e5:a5:64:ba:b3:c0:
16:dc:4a:9a:8b:11:cf:66:ef:b1:5f:1b:0c:c0:19:
b8:7b:e7:0b:2d:1e:4e:23:66:ba:80:aa:c8:9d:d4:
1f:b3:ae:28:13:8d:e9:cc:ff:7a:10:b3:1d:2e:ca:
73:5f:84:11:e1:32:11:e5:31:3a:3e:28:26:69:2b:
c2:c2:ba:82:e3:b2:83:42:82:5b:3b:34:72:c2:ba:
28:d1:73:17:0b:62:40:08:85:a1:6c:33:d3:24:15:
0e:07:14:2b:a4:a7:64:21:ee:f9:06:35:7c:0d:b9:
5b:a1:52:37:4e:0f:ac:87:a2:71:6a:21:b5:5a:85:
0f:96:d9:13:87:f5:a7:11:51:83:96:e0:40:4f:e6:
4b:d5:fa:31:3a:e8:a3:f7:21:0e:51:7f:41:e9:38:
09:80:82:d4:09:3d:a3:46:37:91:6f:f6:b8:4a:61:
84:78:23:dc:5e:96:a5:e4:47:04:df:c0:32:0a:71:
1f:9c:ab:5e:90:27:da:78:c6:35:3f:1b:ee:1f:f2:
12:01:29:4c:da:3c:84:58:6f:9c:1a:b7:f9:6d:f6:
69:63:99:b6:1f:02:37:10:84:13:b5:00:79:2f:9b:
84:9e:30:da:ef:74:07:ce:af:16:00:18:87:c4:be:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:93:F6:BA:AB:3F:7F:52:11:24:DF:A7:E3:5F:94:AE:16:AE:60:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89A8D250F42911EFB568FEA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.31.0/24
Signature Algorithm: sha256WithRSAEncryption
71:26:17:00:13:a6:83:29:ff:3d:53:9d:f4:8e:ab:3a:e3:fd:
11:f2:3b:54:0b:fc:eb:93:16:95:7e:1a:8a:f0:b8:45:63:c3:
9b:20:24:ef:d2:c2:0b:c4:d9:e5:39:4a:c6:f7:9f:6a:9a:3b:
48:55:82:16:4d:44:07:7d:d2:0c:5a:3c:8c:3b:39:ef:58:1e:
6e:92:59:95:9c:f2:44:9a:05:96:7f:c3:12:12:5c:66:02:67:
0b:7d:34:ec:a3:4d:24:d9:e1:80:cc:fb:23:4f:8c:fb:3b:8e:
d7:f9:2a:8d:72:d3:a4:cb:9b:bb:49:78:38:a6:99:1a:c2:0f:
c9:11:64:34:05:b4:f1:a1:7f:89:33:c4:95:fc:a0:ab:38:d4:
91:88:d5:be:4d:b3:dc:48:da:8d:f5:a1:cd:66:1a:1e:90:51:
18:5c:e4:13:8a:8e:66:ae:a2:1a:ac:20:ac:45:eb:96:e0:34:
7a:8e:dc:ca:96:a2:89:05:9a:98:9e:af:50:0f:01:f6:24:a5:
b4:a9:f6:0f:6c:fd:54:4c:80:a6:2c:4a:ca:5e:2e:bf:47:23:
0a:78:03:27:df:ba:4d:67:9b:b1:b1:7d:4d:0f:23:9c:b3:81:
6d:ee:ee:f9:be:5b:dd:42:fe:6f:08:70:0d:4b:49:f0:4a:de:
22:03:46:91
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATDMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTAwNzQ4WhcNMjgwMjIwMTAwNzQ4WjAYMRYw
FAYDVQQDEw02N2JlZTdmNy1jOTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApacprWVi2b/lpWS6s8AW3EqaixHPZu+xXxsMwBm4e+cLLR5OI2a6gKrI
ndQfs64oE43pzP96ELMdLspzX4QR4TIR5TE6PigmaSvCwrqC47KDQoJbOzRywroo
0XMXC2JACIWhbDPTJBUOBxQrpKdkIe75BjV8DblboVI3Tg+sh6JxaiG1WoUPltkT
h/WnEVGDluBAT+ZL1foxOuij9yEOUX9B6TgJgILUCT2jRjeRb/a4SmGEeCPcXpal
5EcE38AyCnEfnKtekCfaeMY1PxvuH/ISASlM2jyEWG+cGrf5bfZpY5m2HwI3EIQT
tQB5L5uEnjDa73QHzq8WABiHxL4ZeQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLCT
9rqrP39SESTfp+NflK4WrmBCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84OUE4RDI1MEY0MjkxMUVGQjU2OEZFQTc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcwfMA0GCSqGSIb3DQEBCwUA
A4IBAQBxJhcAE6aDKf89U530jqs64/0R8jtUC/zrkxaVfhqK8LhFY8ObICTv0sIL
xNnlOUrG959qmjtIVYIWTUQHfdIMWjyMOznvWB5uklmVnPJEmgWWf8MSElxmAmcL
fTTso00k2eGAzPsjT4z7O47X+SqNctOky5u7SXg4ppkawg/JEWQ0BbTxoX+JM8SV
/KCrONSRiNW+TbPcSNqN9aHNZhoekFEYXOQTio5mrqIarCCsReuW4DR6jtzKlqKJ
BZqYnq9QDwH2JKW0qfYPbP1UTICmLErKXi6/RyMKeAMn37pNZ5uxsX1NDyOcs4Ft
7u75vlvdQv5vCHANS0nwSt4iA0aR
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:38 2025 by rpki-client