Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDB98164F42B11EFB0DC49B6762E951A.roa
File: BDB98164F42B11EFB0DC49B6762E951A.roa (raw, json)
Hash identifier: +nkMyFfrVoKtmZpiot/zqx3hgDlpMS5+05artiXIWzc=
Subject key identifier: BF:83:B9:58:CF:55:49:2F:01:F8:9F:EF:C7:BE:1E:A3:CA:5F:6A:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDB98164F42B11EFB0DC49B6762E951A.roa
Signing time: Wed 26 Feb 2025 10:23:37 +0000
ROA not before: Wed 26 Feb 2025 10:23:34 +0000
ROA not after: Sun 20 Feb 2028 10:23:34 +0000
asID: 17561
IP address blocks: 45.203.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78077 (0x130fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:23:34 2025 GMT
Not After : Feb 20 10:23:34 2028 GMT
Subject: CN=67beeba9-1055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:4a:df:83:ba:e3:65:8f:9b:42:2f:fc:68:
a4:24:05:22:af:a5:b5:29:87:a7:04:92:cb:90:b1:
10:23:6a:21:2b:a5:21:2a:09:bd:b2:d5:c3:4d:bc:
47:6f:ab:d4:a9:e9:27:5a:8c:0a:34:a7:f4:29:ef:
b4:4d:43:f7:3d:c8:b2:88:fe:9c:cf:1e:6d:5e:60:
6f:4d:45:ba:42:b1:fe:02:07:90:ca:82:02:85:52:
c1:02:92:e8:6b:3c:dc:b6:dd:d3:7f:9a:5b:ea:69:
e5:11:87:18:13:6f:0c:88:02:fa:6a:31:0f:49:50:
73:93:33:4e:85:e9:a2:81:df:17:78:d0:7d:d8:29:
e4:5e:b1:a0:cc:d0:43:2d:a1:cb:50:96:78:2d:89:
f2:6d:e3:83:51:d1:d8:5e:ac:4d:d3:f0:b6:45:d0:
b7:5e:2b:f3:81:99:0d:b3:62:2b:79:e2:7b:47:5b:
1d:76:27:9e:0f:32:c2:29:58:20:e2:8b:5c:91:32:
30:95:09:8c:35:7b:b6:c6:ef:33:2d:d2:f9:cc:48:
de:99:ea:62:d3:4b:94:fe:d8:07:57:2a:d1:5e:48:
a6:b4:f2:51:11:e6:e7:16:73:78:3d:06:16:1c:2c:
63:bb:19:86:8b:8c:a3:6b:d4:b6:1d:c1:6f:47:6f:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:83:B9:58:CF:55:49:2F:01:F8:9F:EF:C7:BE:1E:A3:CA:5F:6A:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDB98164F42B11EFB0DC49B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.157.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c1:0f:3d:c0:82:ee:8e:8c:0d:80:de:ad:d6:0e:af:f7:aa:
d4:ec:21:66:32:3c:06:93:b8:a8:eb:bd:ad:15:9e:83:60:72:
ab:70:d8:7d:a5:68:d8:88:fa:f6:a5:8c:f4:ca:25:50:ae:23:
ca:33:c5:ed:4e:9c:1f:2e:0e:f7:3d:97:df:a0:1f:dd:fc:ee:
1e:61:9a:88:19:a9:80:35:02:82:b8:c1:90:17:a2:40:53:8d:
7c:9a:74:e3:27:18:b1:94:98:07:ca:b4:a9:8f:68:19:1f:1a:
96:7a:e8:7d:1e:56:34:b3:bc:eb:f3:a8:90:7d:68:42:66:91:
90:ed:63:1a:62:b3:0d:16:05:62:0c:81:39:2d:a0:88:84:de:
ad:28:e0:e8:7e:75:40:c9:0f:31:83:b6:f5:c7:d9:a8:3d:0a:
5a:27:ea:b9:8d:91:1a:02:37:24:5c:a6:36:33:92:cd:f5:c5:
e7:3b:b2:49:e1:67:32:5e:1d:2e:7a:9d:26:4f:0a:09:cb:89:
b1:5a:0e:59:20:6e:a1:15:96:51:c1:f9:76:36:87:2a:12:05:
93:bd:c3:1f:07:62:af:c0:79:72:45:30:7b:64:30:b3:12:cc:
a6:e0:02:cc:bd:b3:be:7f:a6:2b:ec:bf:87:ed:ce:45:60:ec:
99:60:e5:b1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATD9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTAyMzM0WhcNMjgwMjIwMTAyMzM0WjAYMRYw
FAYDVQQDEw02N2JlZWJhOS0xMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsIBK34O642WPm0Iv/GikJAUir6W1KYenBJLLkLEQI2ohK6UhKgm9stXD
TbxHb6vUqeknWowKNKf0Ke+0TUP3PciyiP6czx5tXmBvTUW6QrH+AgeQyoIChVLB
ApLoazzctt3Tf5pb6mnlEYcYE28MiAL6ajEPSVBzkzNOhemigd8XeNB92CnkXrGg
zNBDLaHLUJZ4LYnybeODUdHYXqxN0/C2RdC3XivzgZkNs2IreeJ7R1sddieeDzLC
KVgg4otckTIwlQmMNXu2xu8zLdL5zEjemepi00uU/tgHVyrRXkimtPJREebnFnN4
PQYWHCxjuxmGi4yja9S2HcFvR2+FyQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL+D
uVjPVUkvAfif78e+HqPKX2qIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CREI5ODE2NEY0MkIxMUVGQjBEQzQ5QjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcudMA0GCSqGSIb3DQEBCwUA
A4IBAQB5wQ89wILujowNgN6t1g6v96rU7CFmMjwGk7io672tFZ6DYHKrcNh9pWjY
iPr2pYz0yiVQriPKM8XtTpwfLg73PZffoB/d/O4eYZqIGamANQKCuMGQF6JAU418
mnTjJxixlJgHyrSpj2gZHxqWeuh9HlY0s7zr86iQfWhCZpGQ7WMaYrMNFgViDIE5
LaCIhN6tKODofnVAyQ8xg7b1x9moPQpaJ+q5jZEaAjckXKY2M5LN9cXnO7JJ4Wcy
Xh0uep0mTwoJy4mxWg5ZIG6hFZZRwfl2NocqEgWTvcMfB2KvwHlyRTB7ZDCzEsym
4ALMvbO+f6Yr7L+H7c5FYOyZYOWx
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:58 2025 by rpki-client