Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/354AF164DAEF11EFBD87D68E762E951A.roa
File: 354AF164DAEF11EFBD87D68E762E951A.roa (raw, json)
Hash identifier: aHV/KMhoc+He9R6flxHFm5ZfL2BvoFWKBt3peVgRuuI=
Subject key identifier: F8:D5:13:B2:7C:03:C2:4D:3A:04:F2:FD:28:B5:1A:BA:90:15:9E:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011137
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/354AF164DAEF11EFBD87D68E762E951A.roa
Signing time: Sat 25 Jan 2025 07:37:20 +0000
ROA not before: Sat 25 Jan 2025 07:37:16 +0000
ROA not after: Fri 07 Feb 2025 07:37:16 +0000
asID: 5065
IP address blocks: 156.229.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69943 (0x11137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:37:16 2025 GMT
Not After : Feb 7 07:37:16 2025 GMT
Subject: CN=679494b0-8592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:70:51:fc:fc:d7:c3:94:26:3a:e4:66:5d:20:
96:cc:19:b4:8f:d9:07:1d:b0:c1:b4:75:32:5a:6b:
2a:e9:c0:9b:f3:82:8c:ca:24:86:31:43:19:f1:12:
96:90:11:f1:f0:31:d7:58:85:55:c7:22:2d:ff:46:
c8:31:71:3d:23:e0:0a:25:1d:79:f7:50:e2:aa:98:
09:a2:b8:f6:d7:6f:46:1f:65:b8:45:e1:9c:76:36:
a3:37:ce:cc:f2:8a:9e:25:e0:27:9b:87:5d:76:08:
b3:7b:5f:01:8f:8f:35:03:33:29:76:bd:67:df:cb:
ca:75:97:fe:98:b7:47:ae:20:1e:f4:6d:91:8c:8b:
42:9f:bf:2c:d2:a8:d5:5a:f7:8f:b3:5e:17:18:31:
a8:b4:7e:c5:85:2e:d0:36:ab:41:46:9f:00:69:9e:
33:6b:96:6e:43:30:d8:d8:9c:d9:5a:24:8b:3e:5a:
ba:a8:61:0c:4a:30:bc:30:47:ac:cd:5f:47:31:29:
e2:3c:a7:1b:6c:67:4a:b8:31:2e:d3:40:a5:db:37:
20:03:8b:5b:d0:62:0c:10:f0:91:0b:d2:af:14:bd:
cc:48:90:08:2b:4a:98:71:10:97:97:91:fb:f5:c2:
40:96:f6:46:63:a1:f1:b0:db:96:a5:58:59:2d:65:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D5:13:B2:7C:03:C2:4D:3A:04:F2:FD:28:B5:1A:BA:90:15:9E:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/354AF164DAEF11EFBD87D68E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:1a:b8:da:67:ce:f8:55:2f:ee:8d:d9:32:48:fb:4c:89:f1:
4c:d6:9d:a8:ac:8f:df:12:e2:97:db:b9:62:4f:5f:1b:88:a7:
73:8e:75:45:04:eb:ec:7b:12:ff:54:ab:8a:7c:59:3f:53:f0:
c8:8a:b4:08:94:ef:42:fb:16:4e:b6:a5:c9:98:e4:4d:26:0a:
52:a4:ea:24:51:c2:c7:06:16:fe:76:8a:17:08:0a:fd:14:8b:
c2:57:05:83:2a:30:98:88:b3:2e:b3:55:ab:00:9c:d2:0b:bc:
1e:9d:ee:62:0a:2e:7b:4f:a8:26:28:07:d4:cb:f2:85:5e:1a:
30:be:b0:41:f4:0e:4b:a5:cd:62:82:d7:eb:84:b3:c4:5c:58:
c2:0a:43:1b:9b:ca:2d:35:b7:7a:e8:ff:df:74:2c:e8:78:bc:
34:1a:13:e0:84:6f:bf:e3:8a:5b:ad:26:8e:a9:88:a8:dc:72:
24:c8:b4:d8:20:c7:ca:d9:9c:6d:18:62:fe:d3:7b:8e:25:15:
61:b8:81:91:4e:d5:a6:1c:3e:46:28:2a:d2:82:1b:4b:d7:0f:
d6:48:7b:0e:e2:ec:68:d9:0c:f7:db:95:49:16:9b:3e:6a:fb:
f4:c4:da:7b:f6:88:38:f5:fb:58:80:38:ed:e8:93:30:98:14:
fe:b7:42:b0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARE3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MDczNzE2WhcNMjUwMjA3MDczNzE2WjAYMRYw
FAYDVQQDEw02Nzk0OTRiMC04NTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA43BR/PzXw5QmOuRmXSCWzBm0j9kHHbDBtHUyWmsq6cCb84KMyiSGMUMZ
8RKWkBHx8DHXWIVVxyIt/0bIMXE9I+AKJR1591DiqpgJorj2129GH2W4ReGcdjaj
N87M8oqeJeAnm4dddgize18Bj481AzMpdr1n38vKdZf+mLdHriAe9G2RjItCn78s
0qjVWvePs14XGDGotH7FhS7QNqtBRp8AaZ4za5ZuQzDY2JzZWiSLPlq6qGEMSjC8
MEeszV9HMSniPKcbbGdKuDEu00Cl2zcgA4tb0GIMEPCRC9KvFL3MSJAIK0qYcRCX
l5H79cJAlvZGY6HxsNuWpVhZLWXl+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPjV
E7J8A8JNOgTy/Si1GrqQFZ6CMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNTRBRjE2NERBRUYxMUVGQkQ4N0Q2OEU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOU3MA0GCSqGSIb3DQEBCwUA
A4IBAQAsGrjaZ874VS/ujdkySPtMifFM1p2orI/fEuKX27liT18biKdzjnVFBOvs
exL/VKuKfFk/U/DIirQIlO9C+xZOtqXJmORNJgpSpOokUcLHBhb+dooXCAr9FIvC
VwWDKjCYiLMus1WrAJzSC7wene5iCi57T6gmKAfUy/KFXhowvrBB9A5Lpc1igtfr
hLPEXFjCCkMbm8otNbd66P/fdCzoeLw0GhPghG+/44pbrSaOqYio3HIkyLTYIMfK
2ZxtGGL+03uOJRVhuIGRTtWmHD5GKCrSghtL1w/WSHsO4uxo2Qz325VJFps+avv0
xNp79og49ftYgDjt6JMwmBT+t0Kw
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:55 2025 by rpki-client