Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB646864F43E11EFBF7E85BB762E951A.roa
File: EB646864F43E11EFBF7E85BB762E951A.roa (raw, json)
Hash identifier: SF4G7oGh0GsSiZg7Tci9VydAJlXGl/rqOUf6lvZLyIU=
Subject key identifier: AB:56:A6:BD:62:33:CC:2A:1D:B8:A0:86:FB:CF:FD:FC:7C:61:F1:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01329F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB646864F43E11EFBF7E85BB762E951A.roa
Signing time: Wed 26 Feb 2025 12:40:55 +0000
ROA not before: Wed 26 Feb 2025 12:40:51 +0000
ROA not after: Thu 19 Feb 2026 12:40:51 +0000
asID: 984
IP address blocks: 45.206.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78495 (0x1329f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:40:51 2025 GMT
Not After : Feb 19 12:40:51 2026 GMT
Subject: CN=67bf0bd6-145d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:8f:50:40:ee:f3:d4:bb:9a:b2:24:c6:23:
6e:35:17:8a:78:f0:9d:3a:e7:82:99:c3:d9:da:97:
84:5f:0e:21:49:be:0d:95:f8:57:4c:57:0c:77:99:
ff:20:4b:4d:39:fa:8d:44:35:57:86:c9:ea:0c:3b:
b7:bb:2a:6a:a6:eb:2e:12:88:d7:8a:80:2d:71:a9:
17:ad:ce:4d:69:6c:e7:a4:03:b6:3a:db:61:62:8d:
e1:6d:7f:49:f4:78:91:cf:c4:f1:72:fb:f7:b1:16:
bb:25:5c:ce:20:27:31:be:49:01:79:cb:b9:b0:3f:
7a:5d:cf:f7:a7:e0:46:12:af:6c:4e:a2:ec:09:9d:
ef:1b:9f:fa:a7:bc:a5:38:f7:8a:95:b9:ca:f9:16:
7d:33:5f:ae:93:4f:68:f1:71:2a:32:0a:c8:f0:d9:
38:e3:94:aa:6c:90:84:2e:78:a4:9e:88:4c:7f:c1:
8b:f1:91:48:f2:bb:3a:81:a7:3c:93:aa:23:d9:a5:
5f:5f:f9:5a:6c:57:55:fc:77:33:c7:51:24:52:25:
80:47:f4:87:62:d9:28:61:2d:ec:e6:14:ee:d0:ba:
08:e8:30:c7:d0:ac:a9:6e:31:5c:a0:47:70:18:65:
da:68:4a:01:d1:56:63:b3:2b:5f:a9:34:51:0e:69:
03:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:56:A6:BD:62:33:CC:2A:1D:B8:A0:86:FB:CF:FD:FC:7C:61:F1:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB646864F43E11EFBF7E85BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.62.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9d:a0:f9:b6:15:93:4d:2e:67:0f:35:0f:71:59:e2:8b:5e:
09:eb:0e:e9:70:dd:a5:69:7e:40:0c:35:04:e9:59:bb:1e:ba:
34:66:eb:45:84:1b:e4:97:58:af:7a:2b:0d:01:7e:e7:9e:76:
1c:73:3d:56:f8:e3:61:89:9e:b3:3e:98:05:3b:bd:2f:71:ba:
5d:ac:c3:90:41:cf:1c:4a:0e:40:67:dc:31:b6:0d:6d:50:85:
89:a9:2c:e8:0c:60:27:b7:94:36:30:0d:fd:fc:2a:d7:bc:fc:
35:86:04:8a:a4:cb:ab:3a:8d:b9:47:50:ac:06:7b:df:a1:78:
4d:2a:a3:a2:47:be:3d:e4:ec:ab:d7:93:7d:04:e4:a8:c7:d8:
e7:08:89:47:b2:80:05:2f:1b:14:d2:00:f7:9b:e0:0e:e7:ad:
8d:71:8b:0d:f9:34:d6:46:f8:43:ff:c3:3f:01:7d:d5:8e:6b:
65:d6:53:7c:87:3c:cf:ab:7a:00:8b:ce:f9:2f:16:7e:45:4a:
23:99:df:33:7b:24:87:87:72:98:3f:3c:1b:87:47:14:a8:da:
96:d3:65:1b:c6:74:e9:52:b0:19:d4:98:e2:0f:a6:f9:2b:d1:
8c:3f:dd:4f:4a:bb:f0:26:30:03:e2:b3:b1:58:38:89:9f:9c:
15:fd:38:27
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATKfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTI0MDUxWhcNMjYwMjE5MTI0MDUxWjAYMRYw
FAYDVQQDEw02N2JmMGJkNi0xNDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApdqPUEDu89S7mrIkxiNuNReKePCdOueCmcPZ2peEXw4hSb4NlfhXTFcM
d5n/IEtNOfqNRDVXhsnqDDu3uypqpusuEojXioAtcakXrc5NaWznpAO2OtthYo3h
bX9J9HiRz8Txcvv3sRa7JVzOICcxvkkBecu5sD96Xc/3p+BGEq9sTqLsCZ3vG5/6
p7ylOPeKlbnK+RZ9M1+uk09o8XEqMgrI8Nk445SqbJCELniknohMf8GL8ZFI8rs6
gac8k6oj2aVfX/labFdV/Hczx1EkUiWAR/SHYtkoYS3s5hTu0LoI6DDH0KypbjFc
oEdwGGXaaEoB0VZjsytfqTRRDmkDWQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKtW
pr1iM8wqHbighvvP/fx8YfGEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQjY0Njg2NEY0M0UxMUVGQkY3RTg1QkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc4+MA0GCSqGSIb3DQEBCwUA
A4IBAQBynaD5thWTTS5nDzUPcVnii14J6w7pcN2laX5ADDUE6Vm7Hro0ZutFhBvk
l1iveisNAX7nnnYccz1W+ONhiZ6zPpgFO70vcbpdrMOQQc8cSg5AZ9wxtg1tUIWJ
qSzoDGAnt5Q2MA39/CrXvPw1hgSKpMurOo25R1CsBnvfoXhNKqOiR7495Oyr15N9
BOSox9jnCIlHsoAFLxsU0gD3m+AO562NcYsN+TTWRvhD/8M/AX3Vjmtl1lN8hzzP
q3oAi875LxZ+RUojmd8zeySHh3KYPzwbh0cUqNqW02UbxnTpUrAZ1JjiD6b5K9GM
P91PSrvwJjAD4rOxWDiJn5wV/Tgn
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:58 2025 by rpki-client