Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F544666DAF111EFB577FB98762E951A.roa
File: 0F544666DAF111EFB577FB98762E951A.roa (raw, json)
Hash identifier: mYZTrt9+tTBECKPv2PihlfvpQOyUq0e9mW6v6oHEqMg=
Subject key identifier: 6C:12:24:D2:3F:17:D0:85:AA:E8:CC:05:61:F3:63:2B:6A:04:23:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011147
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F544666DAF111EFB577FB98762E951A.roa
Signing time: Sat 25 Jan 2025 07:50:35 +0000
ROA not before: Sat 25 Jan 2025 07:50:31 +0000
ROA not after: Fri 07 Feb 2025 07:50:31 +0000
asID: 5065
IP address blocks: 156.229.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69959 (0x11147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:50:31 2025 GMT
Not After : Feb 7 07:50:31 2025 GMT
Subject: CN=679497cb-9add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a4:66:cb:56:b3:f1:23:df:8d:c2:db:30:a9:
17:87:37:ed:e3:06:58:eb:10:8a:dc:71:d9:2e:56:
d6:df:30:e3:c6:ed:a6:b6:53:5e:69:b9:b2:f4:b4:
4f:50:d0:0e:01:17:f6:e6:37:09:e0:fc:c2:e0:c4:
28:47:90:54:b9:21:16:ae:e9:bf:72:68:09:3f:14:
18:81:8a:f5:95:8d:1f:d2:f8:2d:0d:4b:28:4a:e7:
24:76:b7:f9:df:76:5b:b9:72:31:0a:1f:da:18:8b:
12:50:e6:ae:3d:7d:83:da:3d:ee:93:f3:a2:d4:35:
b8:cd:eb:6a:36:6a:ad:cf:db:11:ab:96:af:b2:23:
0b:58:6e:7e:df:84:11:bc:8d:bb:f3:36:54:a0:3f:
41:36:c3:59:92:b6:29:bd:89:7c:19:26:5b:c4:1f:
99:62:ba:9a:02:68:ad:94:1f:bc:83:7d:d6:98:21:
c9:33:c2:21:c5:cc:da:84:6a:28:03:1e:a1:9e:2f:
93:0f:e2:72:55:0d:b2:d4:93:e6:04:f5:d7:88:b2:
7b:31:9c:19:76:26:d1:ee:c0:28:8b:14:c6:16:2e:
00:ab:c3:a8:35:80:e7:f2:4d:51:07:e0:5d:33:62:
9e:be:c5:a3:94:d2:45:ee:a1:d5:22:fb:51:ae:6c:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:12:24:D2:3F:17:D0:85:AA:E8:CC:05:61:F3:63:2B:6A:04:23:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F544666DAF111EFB577FB98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:01:19:bb:52:a1:2d:3e:9c:36:1e:f7:97:1c:ec:64:be:cd:
bc:f4:33:82:97:ff:a0:3e:67:a5:72:0b:21:e8:f6:96:34:35:
15:db:ca:c7:0b:4f:7f:45:69:e7:b8:43:a0:8a:61:77:16:b7:
d3:6b:61:d4:3b:53:70:4a:a3:e5:a5:b4:a7:c7:f1:de:b4:43:
91:f6:d1:27:24:8e:d3:84:9b:cb:db:dd:f5:ff:9e:65:f6:6b:
9d:9f:ce:f8:10:86:58:06:5f:de:8f:f0:c3:70:e9:5b:87:3a:
2e:84:66:f2:df:4b:61:83:de:6b:cf:b9:b3:3e:a2:0f:2a:05:
87:49:7d:e3:25:fd:35:ac:fc:8f:20:75:d0:8b:be:7a:f6:e3:
0a:41:53:97:86:52:ea:2d:cd:6f:7c:c6:e3:5f:54:6b:b9:43:
10:92:3a:97:e9:fd:f0:fe:7e:82:91:8b:4b:a4:8f:a4:8e:e6:
5c:cc:83:03:0c:77:87:91:81:f9:5d:3a:cc:c1:46:b8:6b:65:
54:f3:45:74:1a:e8:95:7e:7e:31:a4:8d:1a:e2:2c:18:77:db:
d5:40:32:34:10:15:0c:4d:47:43:a9:9b:65:3b:2c:c9:51:3d:
0d:d6:04:a6:f3:67:3c:59:7e:e5:3b:42:50:c9:5d:29:2b:8f:
7f:51:cd:5c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARFHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MDc1MDMxWhcNMjUwMjA3MDc1MDMxWjAYMRYw
FAYDVQQDEw02Nzk0OTdjYi05YWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7aRmy1az8SPfjcLbMKkXhzft4wZY6xCK3HHZLlbW3zDjxu2mtlNeabmy
9LRPUNAOARf25jcJ4PzC4MQoR5BUuSEWrum/cmgJPxQYgYr1lY0f0vgtDUsoSuck
drf533ZbuXIxCh/aGIsSUOauPX2D2j3uk/Oi1DW4zetqNmqtz9sRq5avsiMLWG5+
34QRvI278zZUoD9BNsNZkrYpvYl8GSZbxB+ZYrqaAmitlB+8g33WmCHJM8Ihxcza
hGooAx6hni+TD+JyVQ2y1JPmBPXXiLJ7MZwZdibR7sAoixTGFi4Aq8OoNYDn8k1R
B+BdM2KevsWjlNJF7qHVIvtRrmwz/wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGwS
JNI/F9CFqujMBWHzYytqBCMnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRjU0NDY2NkRBRjExMUVGQjU3N0ZCOTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOU1MA0GCSqGSIb3DQEBCwUA
A4IBAQCpARm7UqEtPpw2HveXHOxkvs289DOCl/+gPmelcgsh6PaWNDUV28rHC09/
RWnnuEOgimF3FrfTa2HUO1NwSqPlpbSnx/HetEOR9tEnJI7ThJvL2931/55l9mud
n874EIZYBl/ej/DDcOlbhzouhGby30thg95rz7mzPqIPKgWHSX3jJf01rPyPIHXQ
i7569uMKQVOXhlLqLc1vfMbjX1RruUMQkjqX6f3w/n6CkYtLpI+kjuZczIMDDHeH
kYH5XTrMwUa4a2VU80V0GuiVfn4xpI0a4iwYd9vVQDI0EBUMTUdDqZtlOyzJUT0N
1gSm82c8WX7lO0JQyV0pK49/Uc1c
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:40:54 2025 by rpki-client