Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD46F7E4F48311EF8A2EBF9D762E951A.roa
File: CD46F7E4F48311EF8A2EBF9D762E951A.roa (raw, json)
Hash identifier: 425qn+nCK9YSZUNOOV087GNjTdeSMo9XkQ+CPgy5igA=
Subject key identifier: 20:92:98:85:AE:83:23:5B:2F:FF:7D:71:30:33:40:89:D7:5B:91:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0137A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD46F7E4F48311EF8A2EBF9D762E951A.roa
Signing time: Wed 26 Feb 2025 20:53:59 +0000
ROA not before: Wed 26 Feb 2025 20:53:56 +0000
ROA not after: Sat 19 Feb 2028 20:53:56 +0000
asID: 17561
IP address blocks: 45.201.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79784 (0x137a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 20:53:56 2025 GMT
Not After : Feb 19 20:53:56 2028 GMT
Subject: CN=67bf7f67-9a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:bb:34:d4:e4:5b:71:8b:35:d5:85:5d:af:
24:c5:e9:bd:ce:d4:ef:c3:59:7c:61:42:48:c1:aa:
3d:f7:d5:6a:00:64:7b:cd:a3:86:48:5c:2a:a3:6e:
9b:90:35:a2:7d:1e:b9:b4:7e:42:08:5f:45:88:fa:
b2:e0:75:02:cf:5c:58:8a:7c:bf:47:08:a0:c2:86:
67:e0:72:51:d2:99:9e:9d:d6:d9:2e:4e:69:01:79:
c1:76:c0:7f:eb:c9:0c:22:16:2d:7e:5f:20:62:6e:
7a:d8:55:1a:ec:b3:19:f9:b9:32:3c:6a:97:1d:44:
16:1b:4a:19:6c:60:5a:a4:dd:be:d3:68:ad:f2:0b:
6d:15:62:d1:40:55:74:4f:40:25:b2:d6:bc:6c:8f:
86:84:e5:d6:dd:79:ac:b3:8d:95:47:cf:a6:00:d8:
4e:ba:b8:59:74:20:98:60:b0:58:0f:ef:6e:4c:1b:
00:09:0a:70:9c:d5:f9:03:66:0e:75:dd:06:4c:2f:
60:7f:d2:2c:bb:e9:05:fc:4b:03:02:59:26:0f:b8:
df:14:1a:b0:39:f6:d1:79:0e:9e:45:64:66:99:50:
f3:6e:7d:aa:92:5a:f9:5d:2f:5f:8b:27:f2:05:1b:
9c:97:4b:b6:2f:08:a8:b8:87:c9:15:7e:49:28:03:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:92:98:85:AE:83:23:5B:2F:FF:7D:71:30:33:40:89:D7:5B:91:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD46F7E4F48311EF8A2EBF9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.236.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:3b:da:37:77:5e:3a:b2:2e:de:d0:1e:a9:54:a1:77:a8:ae:
dd:6c:de:5b:d4:b1:ab:17:32:42:29:e6:b1:aa:ec:71:0f:3c:
60:be:a3:ac:cd:ec:54:2e:0f:77:b1:69:df:39:d6:6b:24:bc:
4b:8d:36:8a:50:00:32:b4:82:d2:73:d6:eb:fb:d4:cf:aa:d8:
6d:16:d5:2e:f1:1e:00:e5:ac:2d:ad:b6:51:23:36:73:aa:6a:
e1:e7:f0:de:3c:3b:40:93:61:0a:69:38:f9:0f:1d:30:0c:62:
e3:7c:66:a3:fc:b0:b5:76:a2:b1:20:d5:dc:07:a5:fe:63:84:
25:6d:2c:06:75:71:7d:83:fc:5a:ca:a2:bb:e4:a8:11:c8:85:
8e:40:fd:c3:13:d7:06:cb:99:f6:9a:81:b1:18:f0:a2:66:96:
7a:c1:5a:9f:b4:ce:e4:7f:1b:c8:8e:02:6e:7e:3a:c4:8e:26:
b8:16:9d:06:1c:39:25:bb:40:79:57:a9:40:b4:dc:7e:48:e5:
f4:6d:fe:9f:d4:ab:e6:e1:bc:75:10:d8:06:43:5d:ae:2a:18:
f5:d2:6f:d5:1a:33:c5:08:a9:1e:74:c2:e7:6c:fd:15:c5:70:
68:2f:de:ae:c0:cb:64:3c:fa:81:bc:20:f4:5f:2f:7b:13:1f:
b2:16:2a:a3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATeoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MjA1MzU2WhcNMjgwMjE5MjA1MzU2WjAYMRYw
FAYDVQQDEw02N2JmN2Y2Ny05YTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Lm7NNTkW3GLNdWFXa8kxem9ztTvw1l8YUJIwao999VqAGR7zaOGSFwq
o26bkDWifR65tH5CCF9FiPqy4HUCz1xYiny/RwigwoZn4HJR0pmendbZLk5pAXnB
dsB/68kMIhYtfl8gYm562FUa7LMZ+bkyPGqXHUQWG0oZbGBapN2+02it8gttFWLR
QFV0T0Alsta8bI+GhOXW3Xmss42VR8+mANhOurhZdCCYYLBYD+9uTBsACQpwnNX5
A2YOdd0GTC9gf9Isu+kF/EsDAlkmD7jfFBqwOfbReQ6eRWRmmVDzbn2qklr5XS9f
iyfyBRucl0u2LwiouIfJFX5JKAObSwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCCS
mIWugyNbL/99cTAzQInXW5GRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRDQ2RjdFNEY0ODMxMUVGOEEyRUJGOUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcnsMA0GCSqGSIb3DQEBCwUA
A4IBAQAsO9o3d146si7e0B6pVKF3qK7dbN5b1LGrFzJCKeaxquxxDzxgvqOszexU
Lg93sWnfOdZrJLxLjTaKUAAytILSc9br+9TPqthtFtUu8R4A5awtrbZRIzZzqmrh
5/DePDtAk2EKaTj5Dx0wDGLjfGaj/LC1dqKxINXcB6X+Y4QlbSwGdXF9g/xayqK7
5KgRyIWOQP3DE9cGy5n2moGxGPCiZpZ6wVqftM7kfxvIjgJufjrEjia4Fp0GHDkl
u0B5V6lAtNx+SOX0bf6f1Kvm4bx1ENgGQ12uKhj10m/VGjPFCKkedMLnbP0VxXBo
L96uwMtkPPqBvCD0Xy97Ex+yFiqj
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:03 2025 by rpki-client