Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD747348FE5311EF80642DB0762E951A.roa
File: CD747348FE5311EF80642DB0762E951A.roa (raw, json)
Hash identifier: bn6NC0VJ7Ofzf2ErdIiRwFVRVaNKID/4KwHbMNnNsVo=
Subject key identifier: BF:9E:9B:A2:F6:6C:4C:50:D7:01:F8:26:4D:77:1A:C9:8E:DE:31:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD747348FE5311EF80642DB0762E951A.roa
Signing time: Tue 11 Mar 2025 08:35:35 +0000
ROA not before: Tue 11 Mar 2025 08:35:30 +0000
ROA not after: Wed 16 Apr 2025 08:35:30 +0000
asID: 395793
IP address blocks: 45.196.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83171 (0x144e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 11 08:35:30 2025 GMT
Not After : Apr 16 08:35:30 2025 GMT
Subject: CN=67cff5d7-2a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:f0:bd:57:7c:ea:c2:59:a1:b9:a7:e4:3d:
5d:5c:fd:df:58:4a:45:90:ba:d7:3e:b0:68:8f:b4:
7c:ad:fa:5c:69:5f:50:83:51:c0:07:9d:62:3f:ae:
85:bd:34:95:76:c1:20:7e:8c:1d:17:45:20:39:35:
cb:38:6a:95:2e:5e:03:3e:1e:e1:57:9d:74:65:9b:
0c:0d:1c:1d:cd:1d:92:f0:d2:6b:39:f7:b3:9f:dd:
bb:e0:ac:d5:02:80:6b:73:1c:35:ac:2f:b0:cc:9d:
59:80:f1:aa:7f:63:b3:2a:4e:4b:dc:18:a7:0d:e2:
99:2f:83:db:86:94:d6:51:d1:d1:b9:93:f5:01:48:
27:7a:af:3f:62:f3:73:d5:17:98:4f:f6:5d:e9:b2:
94:23:d3:5c:e1:f2:9a:be:38:4d:11:4d:29:e8:a8:
70:37:44:68:4e:93:f5:e7:6c:2d:98:be:54:2e:21:
4c:49:22:03:fc:cc:83:f1:aa:11:53:49:9b:4c:4b:
ce:da:fa:27:39:16:e5:e0:7b:9d:2e:e6:7f:33:05:
84:e7:78:33:61:48:af:63:72:f7:e1:3c:c4:5e:58:
55:0d:44:04:63:70:27:af:50:13:30:06:ec:7c:d2:
ed:10:94:5e:61:53:05:5a:a9:1b:b3:9a:74:81:7f:
4c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9E:9B:A2:F6:6C:4C:50:D7:01:F8:26:4D:77:1A:C9:8E:DE:31:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD747348FE5311EF80642DB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.194.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:1d:d8:4c:f2:e7:09:eb:3b:34:17:0f:40:b2:65:57:68:83:
1e:5f:62:eb:5d:1f:40:e6:af:fc:75:cc:00:c6:b1:b5:13:77:
01:64:70:d2:77:43:f4:99:5e:00:f1:67:1b:04:46:93:f7:b4:
03:c9:ee:01:87:dc:9e:60:42:d1:99:c9:f1:86:a4:46:32:9d:
87:4b:54:22:00:70:8d:0c:8b:6a:76:e6:08:7d:b4:3d:e8:7a:
41:09:da:91:a3:99:c3:90:4f:31:58:e2:8f:ff:da:0a:7e:1d:
3f:59:5b:66:83:8d:2c:f4:28:07:a8:33:7b:b4:12:ac:3a:ab:
08:ab:cf:59:14:a5:91:8b:f3:25:53:94:7a:61:bf:44:ab:44:
4e:40:65:bd:4a:cf:e5:fd:1d:d7:00:7d:1a:ad:99:ac:a6:00:
9d:a1:94:43:89:00:fc:2d:3c:54:72:78:7a:e8:2e:cb:fd:42:
6b:b8:5c:bb:bd:61:16:9f:a4:c0:6a:56:ec:24:6f:60:95:c6:
d0:56:29:66:2c:53:b3:d4:62:b2:58:9e:90:f0:9a:0e:cc:25:
6b:ad:09:bd:74:0d:91:d5:63:ed:80:98:9e:7d:3f:46:a1:7d:
41:62:59:d9:22:fb:42:3e:70:3c:15:f5:7e:35:32:66:1a:e0:
e9:e6:35:1e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUTjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzExMDgzNTMwWhcNMjUwNDE2MDgzNTMwWjAYMRYw
FAYDVQQDEw02N2NmZjVkNy0yYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqHPwvVd86sJZobmn5D1dXP3fWEpFkLrXPrBoj7R8rfpcaV9Qg1HAB51i
P66FvTSVdsEgfowdF0UgOTXLOGqVLl4DPh7hV510ZZsMDRwdzR2S8NJrOfezn927
4KzVAoBrcxw1rC+wzJ1ZgPGqf2OzKk5L3BinDeKZL4PbhpTWUdHRuZP1AUgneq8/
YvNz1ReYT/Zd6bKUI9Nc4fKavjhNEU0p6KhwN0RoTpP152wtmL5ULiFMSSID/MyD
8aoRU0mbTEvO2vonORbl4HudLuZ/MwWE53gzYUivY3L34TzEXlhVDUQEY3Anr1AT
MAbsfNLtEJReYVMFWqkbs5p0gX9MhQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL+e
m6L2bExQ1wH4Jk13GsmO3jG8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRDc0NzM0OEZFNTMxMUVGODA2NDJEQjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcTCMA0GCSqGSIb3DQEBCwUA
A4IBAQBbHdhM8ucJ6zs0Fw9AsmVXaIMeX2LrXR9A5q/8dcwAxrG1E3cBZHDSd0P0
mV4A8WcbBEaT97QDye4Bh9yeYELRmcnxhqRGMp2HS1QiAHCNDItqduYIfbQ96HpB
CdqRo5nDkE8xWOKP/9oKfh0/WVtmg40s9CgHqDN7tBKsOqsIq89ZFKWRi/MlU5R6
Yb9Eq0ROQGW9Ss/l/R3XAH0arZmspgCdoZRDiQD8LTxUcnh66C7L/UJruFy7vWEW
n6TAalbsJG9glcbQVilmLFOz1GKyWJ6Q8JoOzCVrrQm9dA2R1WPtgJiefT9GoX1B
YlnZIvtCPnA8FfV+NTJmGuDp5jUe
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:47 2025 by rpki-client