Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3371D202D7F911EF86CD13AC762E951A.roa
File: 3371D202D7F911EF86CD13AC762E951A.roa (raw, json)
Hash identifier: iIf2++OZppPNeu2VHJn5WMTaJCX6lpxvaxlqoc+bvs0=
Subject key identifier: DF:0C:12:3E:B4:80:B0:2C:5C:97:F7:9E:3E:9E:6C:BE:8A:D6:2F:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DC8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3371D202D7F911EF86CD13AC762E951A.roa
Signing time: Tue 21 Jan 2025 13:11:18 +0000
ROA not before: Tue 21 Jan 2025 13:11:14 +0000
ROA not after: Sat 01 Feb 2025 13:11:14 +0000
asID: 48031
IP address blocks: 156.246.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69064 (0x10dc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:11:14 2025 GMT
Not After : Feb 1 13:11:14 2025 GMT
Subject: CN=678f9cf6-17ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:c3:8d:67:95:5c:df:c9:e0:bd:45:86:3b:
7e:28:88:07:f2:87:11:51:9b:aa:3e:61:9d:7e:40:
0b:28:2d:91:09:9d:7a:8b:bd:83:f0:37:2e:3f:de:
d1:6c:40:cd:65:ee:6b:22:8e:d5:a5:74:65:02:b9:
78:f6:c4:ab:96:d4:e8:b3:13:9a:68:df:8e:d8:4b:
96:99:9f:c3:70:62:57:bd:07:eb:9f:37:dd:07:68:
3c:7b:3c:ad:12:a8:2d:a0:f8:52:c9:6b:02:ac:5b:
1d:09:24:9b:2c:1f:7d:ae:88:c2:48:4b:e2:2c:e3:
8c:6e:0a:e4:e5:bb:a8:26:c0:bc:f0:97:e4:e3:cd:
8c:74:a3:dd:b1:fa:3f:8d:a1:9d:e9:fb:e5:f8:fe:
94:ef:58:45:b3:f1:93:7d:71:83:13:65:b7:55:bb:
2b:cd:c4:a5:2c:25:ee:17:57:28:ca:58:ca:eb:8f:
f3:dd:ee:68:e3:dc:6e:65:63:c4:28:7b:5c:cc:eb:
43:ce:72:76:9a:83:4c:a5:1a:54:88:7d:68:f3:5c:
1e:2b:e3:71:6d:57:64:83:dc:d9:ae:f3:f9:14:00:
4a:a7:28:ce:bf:61:7e:f2:84:d5:09:78:73:c1:db:
2c:fd:90:33:b8:4c:30:5b:7f:d6:6e:13:82:6c:a9:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0C:12:3E:B4:80:B0:2C:5C:97:F7:9E:3E:9E:6C:BE:8A:D6:2F:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3371D202D7F911EF86CD13AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.133.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:27:9b:0d:1e:bb:6c:d2:26:e2:e0:1a:df:30:36:ab:91:6a:
fd:81:93:f5:8c:e5:de:e3:e9:49:e7:dc:3b:48:c6:14:d8:86:
d9:46:09:12:27:df:3e:74:dd:12:62:fa:12:98:91:d8:9a:70:
8f:76:54:44:96:40:fa:7e:5a:b9:4d:46:58:dc:8e:d4:ac:a7:
de:6f:75:01:7d:a8:1a:05:c5:e2:fb:76:58:a1:50:e5:5e:b3:
e7:34:75:15:0c:14:98:ad:55:42:9c:ee:b4:58:34:49:e3:6c:
29:5b:c1:38:6d:09:65:cf:4c:c6:31:0b:4f:f2:79:86:d7:01:
b5:d5:13:ff:45:de:b5:99:8f:72:05:06:ee:7e:97:4c:54:30:
01:54:ec:b0:b5:80:96:16:9d:e5:b7:10:62:c5:32:a5:4f:15:
10:4a:e9:93:d9:74:af:5c:c2:8b:f1:ac:09:23:87:d5:55:aa:
13:03:0e:0a:d8:72:7f:1a:49:60:ec:43:ea:50:ba:8d:f2:ce:
a9:dd:50:ff:30:c2:ed:d4:cd:bd:59:be:2b:71:13:79:2c:f0:
21:51:c7:9b:ef:89:a7:d2:be:4d:0b:3b:4a:74:79:54:40:85:
cb:d7:e1:17:c6:5f:56:9a:e7:88:a3:71:0d:f4:cc:e6:74:85:
a2:d0:5b:9a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ3IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTMxMTE0WhcNMjUwMjAxMTMxMTE0WjAYMRYw
FAYDVQQDEw02NzhmOWNmNi0xN2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1drDjWeVXN/J4L1Fhjt+KIgH8ocRUZuqPmGdfkALKC2RCZ16i72D8Dcu
P97RbEDNZe5rIo7VpXRlArl49sSrltTosxOaaN+O2EuWmZ/DcGJXvQfrnzfdB2g8
ezytEqgtoPhSyWsCrFsdCSSbLB99rojCSEviLOOMbgrk5buoJsC88Jfk482MdKPd
sfo/jaGd6fvl+P6U71hFs/GTfXGDE2W3VbsrzcSlLCXuF1coyljK64/z3e5o49xu
ZWPEKHtczOtDznJ2moNMpRpUiH1o81weK+NxbVdkg9zZrvP5FABKpyjOv2F+8oTV
CXhzwdss/ZAzuEwwW3/WbhOCbKmhNwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN8M
Ej60gLAsXJf3nj6ebL6K1i+PMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMzcxRDIwMkQ3RjkxMUVGODZDRDEzQUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPaFMA0GCSqGSIb3DQEBCwUA
A4IBAQCaJ5sNHrts0ibi4BrfMDarkWr9gZP1jOXe4+lJ59w7SMYU2IbZRgkSJ98+
dN0SYvoSmJHYmnCPdlRElkD6flq5TUZY3I7UrKfeb3UBfagaBcXi+3ZYoVDlXrPn
NHUVDBSYrVVCnO60WDRJ42wpW8E4bQllz0zGMQtP8nmG1wG11RP/Rd61mY9yBQbu
fpdMVDABVOywtYCWFp3ltxBixTKlTxUQSumT2XSvXMKL8awJI4fVVaoTAw4K2HJ/
Gklg7EPqULqN8s6p3VD/MMLt1M29Wb4rcRN5LPAhUceb74mn0r5NCztKdHlUQIXL
1+EXxl9WmueIo3EN9MzmdIWi0Fua
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:44:11 2025 by rpki-client