Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DC3635ED7ED11EFB1CCDE5D762E951A.roa
File: 2DC3635ED7ED11EFB1CCDE5D762E951A.roa (raw, json)
Hash identifier: kqm2QtcPP08POIU0b+xS3Bs3Z73Qcewu0G/FgAoCOgE=
Subject key identifier: 31:52:CF:37:94:C8:35:4D:F6:45:B8:CA:AB:E4:00:11:F1:33:1D:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DC3635ED7ED11EFB1CCDE5D762E951A.roa
Signing time: Tue 21 Jan 2025 11:45:15 +0000
ROA not before: Tue 21 Jan 2025 11:45:10 +0000
ROA not after: Sat 01 Feb 2025 11:45:10 +0000
asID: 44559
IP address blocks: 156.246.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68986 (0x10d7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 11:45:10 2025 GMT
Not After : Feb 1 11:45:10 2025 GMT
Subject: CN=678f88cb-f08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:a8:bc:82:95:9d:d8:e5:b5:35:bd:81:9d:
75:1b:89:70:05:28:fa:f5:db:3c:50:8a:a5:28:e6:
a2:3d:6f:00:5b:b3:13:ad:6a:0b:ed:d1:c4:54:03:
a5:6d:a2:d7:86:81:e7:5f:c2:d0:0c:ab:72:de:d0:
cc:6c:40:eb:18:bb:b8:f1:d0:ef:72:f7:b2:c8:ca:
6d:23:14:1e:20:c5:7a:b1:28:f5:f6:75:91:74:1c:
b6:43:58:04:72:70:95:d1:af:2b:a4:dd:54:45:88:
3b:40:49:06:4b:b4:a1:b4:04:d8:eb:33:24:0a:08:
70:57:4e:cc:bc:d0:eb:66:87:55:4c:9e:96:64:55:
d8:b4:dd:53:35:1d:94:e0:50:c5:dc:50:05:d2:c1:
0d:fb:70:8f:0c:bb:3c:9f:60:02:b4:17:aa:90:f4:
78:b5:c8:3f:92:4b:85:ff:ea:b8:92:1a:b4:68:5b:
41:cb:71:ef:99:5f:63:3c:a4:aa:7f:46:e6:b5:79:
de:96:8b:02:6b:15:16:3e:99:03:dd:16:e4:af:51:
39:e4:15:7d:fb:34:9a:2c:8f:0e:5f:87:71:73:79:
34:04:92:bc:95:d0:58:09:aa:a0:4f:3b:58:b2:e1:
56:66:df:91:92:56:51:e7:75:e4:fc:13:99:a7:90:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:52:CF:37:94:C8:35:4D:F6:45:B8:CA:AB:E4:00:11:F1:33:1D:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DC3635ED7ED11EFB1CCDE5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.222.0/24
Signature Algorithm: sha256WithRSAEncryption
94:75:9c:6e:65:05:71:98:fa:23:9b:e2:b0:dc:3b:92:0d:c5:
52:5b:8a:a5:92:d0:4b:62:43:07:f5:92:cc:b6:7d:82:96:88:
2b:d8:c1:ac:a8:d6:d9:e4:df:4f:6d:11:8d:f6:55:d5:5c:a1:
6d:f4:23:7b:44:31:e0:e4:b9:0a:d8:75:52:5b:47:8e:32:53:
66:6f:bd:a1:74:74:af:df:9f:5a:70:a7:cd:2b:d6:eb:3b:d6:
0e:69:dc:4d:de:80:04:a5:64:16:64:85:a6:3f:ae:1c:57:c4:
fa:a2:71:fc:02:9c:30:46:da:f5:40:9a:bd:25:d9:12:d8:77:
c8:3c:9c:ed:56:6e:82:0e:8e:88:6c:31:a2:46:e8:78:dd:95:
0a:7c:46:47:60:e6:f5:5f:6d:6c:c5:dd:0d:3f:f8:c8:e8:b1:
a9:ba:bb:76:af:b8:37:fe:e7:ad:71:d7:71:ac:4b:1d:8e:27:
d3:0b:8f:f8:62:6d:a8:59:da:c8:f0:dc:b7:f3:08:c1:b2:d4:
93:f8:b7:58:28:93:47:19:bc:0f:b6:88:d2:f4:44:a1:aa:c7:
76:d7:20:ca:0c:0a:d7:cd:cc:ba:82:13:01:af:d9:47:49:60:
35:b8:01:a3:0e:a6:0e:76:8d:6c:41:a6:9f:da:d4:a7:3f:9a:
6b:be:fc:ef
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ16MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTE0NTEwWhcNMjUwMjAxMTE0NTEwWjAYMRYw
FAYDVQQDEw02NzhmODhjYi1mMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnqSovIKVndjltTW9gZ11G4lwBSj69ds8UIqlKOaiPW8AW7MTrWoL7dHE
VAOlbaLXhoHnX8LQDKty3tDMbEDrGLu48dDvcveyyMptIxQeIMV6sSj19nWRdBy2
Q1gEcnCV0a8rpN1URYg7QEkGS7ShtATY6zMkCghwV07MvNDrZodVTJ6WZFXYtN1T
NR2U4FDF3FAF0sEN+3CPDLs8n2ACtBeqkPR4tcg/kkuF/+q4khq0aFtBy3HvmV9j
PKSqf0bmtXnelosCaxUWPpkD3Rbkr1E55BV9+zSaLI8OX4dxc3k0BJK8ldBYCaqg
TztYsuFWZt+RklZR53Xk/BOZp5BLUwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDFS
zzeUyDVN9kW4yqvkABHxMx0/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yREMzNjM1RUQ3RUQxMUVGQjFDQ0RFNUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPbeMA0GCSqGSIb3DQEBCwUA
A4IBAQCUdZxuZQVxmPojm+Kw3DuSDcVSW4qlktBLYkMH9ZLMtn2Clogr2MGsqNbZ
5N9PbRGN9lXVXKFt9CN7RDHg5LkK2HVSW0eOMlNmb72hdHSv359acKfNK9brO9YO
adxN3oAEpWQWZIWmP64cV8T6onH8ApwwRtr1QJq9JdkS2HfIPJztVm6CDo6IbDGi
Ruh43ZUKfEZHYOb1X21sxd0NP/jI6LGpurt2r7g3/uetcddxrEsdjifTC4/4Ym2o
WdrI8Ny38wjBstST+LdYKJNHGbwPtojS9EShqsd21yDKDArXzcy6ghMBr9lHSWA1
uAGjDqYOdo1sQaaf2tSnP5prvvzv
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:48:31 2025 by rpki-client