Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BD47E02D70711EF94573B7D762E951A.roa
File: 2BD47E02D70711EF94573B7D762E951A.roa (raw, json)
Hash identifier: Z93I1pb6JbMLwPj/7V4cYpLhxPEaI4M6SqIVSgoZpig=
Subject key identifier: 86:24:41:DA:84:A2:7B:00:06:67:DC:69:84:D0:46:8A:67:82:1E:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BD47E02D70711EF94573B7D762E951A.roa
Signing time: Mon 20 Jan 2025 08:18:47 +0000
ROA not before: Mon 20 Jan 2025 08:18:43 +0000
ROA not after: Sat 01 Feb 2025 08:18:43 +0000
asID: 48031
IP address blocks: 45.200.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68589 (0x10bed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 08:18:43 2025 GMT
Not After : Feb 1 08:18:43 2025 GMT
Subject: CN=678e06e7-e811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a3:db:4d:7e:3d:68:57:e8:28:38:e6:e7:9a:
b0:3f:e8:33:b1:43:89:0f:e7:d3:0f:23:f6:e7:20:
4d:d8:42:bc:c7:02:2a:52:66:2c:69:ce:37:6e:1a:
07:8c:48:26:65:bd:2b:87:ef:b8:09:c9:bb:f0:ba:
5d:4d:05:3d:ec:74:28:fe:8e:4c:6b:39:95:e0:81:
4c:ee:42:c1:d9:f4:25:59:63:76:e8:6a:14:ce:23:
3c:6b:8b:6c:a5:77:c2:1e:00:06:fb:6c:e1:bc:5c:
da:9c:b6:d4:82:24:76:a1:ec:f6:ea:29:f9:25:64:
88:b4:5e:04:16:e7:12:be:e5:8a:5c:b8:e2:ec:f6:
4d:26:ec:9b:f9:a9:81:03:b8:80:0c:df:bd:c5:d9:
70:32:04:a1:4a:4c:4c:47:28:f4:a0:4c:4a:e8:b2:
d5:86:9e:b8:33:b6:c9:74:85:c4:1a:e3:a4:8f:f4:
9a:96:de:69:04:2e:6f:e8:11:24:67:4d:05:37:97:
25:d3:dd:37:ff:ff:a3:c0:09:18:47:ee:4f:60:a5:
d6:62:23:0e:5a:c7:ff:18:8a:7a:4f:9a:cd:96:95:
21:87:13:e2:9d:c6:42:96:33:63:23:be:1b:4f:c9:
af:e6:dd:53:b0:0f:2f:8c:5f:4a:b4:a4:b9:b7:e0:
ea:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:24:41:DA:84:A2:7B:00:06:67:DC:69:84:D0:46:8A:67:82:1E:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BD47E02D70711EF94573B7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.182.0/23
Signature Algorithm: sha256WithRSAEncryption
61:24:83:a4:99:dc:0f:92:71:ef:0c:13:dd:12:53:3f:50:94:
2b:79:03:25:d8:10:8e:d4:6f:ef:a9:de:f9:58:19:ea:0d:3f:
20:5f:91:41:36:d6:d4:a5:b3:10:91:eb:05:80:74:e2:73:50:
58:9c:0c:58:96:16:99:7d:8a:f1:07:f0:1d:c0:df:d8:15:3e:
b5:51:d1:c6:f3:ae:8d:3d:21:7e:a8:5a:49:06:17:e3:59:2b:
c1:06:b6:23:26:47:2a:02:2a:9f:64:aa:3b:ad:0d:eb:3d:47:
1c:db:60:04:6d:37:58:ae:86:50:c1:0d:e6:04:6e:e9:2b:0d:
b7:f1:9b:ce:6e:99:6d:55:a0:27:81:55:bb:14:f3:31:70:bd:
c2:95:d7:01:ae:8c:89:0a:df:1b:09:da:99:d8:6a:1d:d0:73:
c8:d9:7c:e1:a7:3b:31:f4:be:1c:84:9d:1a:db:4d:46:ca:c3:
87:43:91:ef:be:8e:52:e9:f0:c5:b6:0a:22:e8:96:c0:aa:af:
5b:14:16:81:f9:3b:3e:cc:fe:54:0f:5f:ba:a0:fc:57:90:0c:
3b:fe:a7:ef:18:d4:29:75:2f:37:37:67:0e:b6:93:b0:1e:ae:
e9:47:ad:af:19:65:11:91:35:87:bf:55:03:7e:62:9f:58:69:
96:77:78:62
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQvtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIwMDgxODQzWhcNMjUwMjAxMDgxODQzWjAYMRYw
FAYDVQQDEw02NzhlMDZlNy1lODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzqPbTX49aFfoKDjm55qwP+gzsUOJD+fTDyP25yBN2EK8xwIqUmYsac43
bhoHjEgmZb0rh++4Ccm78LpdTQU97HQo/o5MazmV4IFM7kLB2fQlWWN26GoUziM8
a4tspXfCHgAG+2zhvFzanLbUgiR2oez26in5JWSItF4EFucSvuWKXLji7PZNJuyb
+amBA7iADN+9xdlwMgShSkxMRyj0oExK6LLVhp64M7bJdIXEGuOkj/Salt5pBC5v
6BEkZ00FN5cl0903//+jwAkYR+5PYKXWYiMOWsf/GIp6T5rNlpUhhxPincZCljNj
I74bT8mv5t1TsA8vjF9KtKS5t+Dq6QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIYk
QdqEonsABmfcaYTQRopngh4CMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQkQ0N0UwMkQ3MDcxMUVGOTQ1NzNCN0Q3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLci2MA0GCSqGSIb3DQEBCwUA
A4IBAQBhJIOkmdwPknHvDBPdElM/UJQreQMl2BCO1G/vqd75WBnqDT8gX5FBNtbU
pbMQkesFgHTic1BYnAxYlhaZfYrxB/AdwN/YFT61UdHG866NPSF+qFpJBhfjWSvB
BrYjJkcqAiqfZKo7rQ3rPUcc22AEbTdYroZQwQ3mBG7pKw238ZvObpltVaAngVW7
FPMxcL3CldcBroyJCt8bCdqZ2God0HPI2Xzhpzsx9L4chJ0a201GysOHQ5Hvvo5S
6fDFtgoi6JbAqq9bFBaB+Ts+zP5UD1+6oPxXkAw7/qfvGNQpdS83N2cOtpOwHq7p
R62vGWURkTWHv1UDfmKfWGmWd3hi
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:49 2025 by rpki-client