Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/446CE206C27B11EF87E3CC56762E951A.roa
File: 446CE206C27B11EF87E3CC56762E951A.roa (raw, json)
Hash identifier: JjKePFaZboWDYyxTQ5UZx9mgV0uPQhQRh7BNMs6mjpQ=
Subject key identifier: 6E:5A:A3:02:0D:32:EC:10:96:67:F3:D0:CC:CE:8B:A7:D4:A3:A4:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E8A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/446CE206C27B11EF87E3CC56762E951A.roa
Signing time: Wed 25 Dec 2024 04:46:56 +0000
ROA not before: Wed 25 Dec 2024 04:46:52 +0000
ROA not after: Wed 10 Dec 2025 04:46:52 +0000
asID: 984
IP address blocks: 156.227.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59553 (0xe8a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 25 04:46:52 2024 GMT
Not After : Dec 10 04:46:52 2025 GMT
Subject: CN=676b8e40-cc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:bd:a3:70:af:51:12:25:6d:2e:48:3a:bf:
22:e6:e1:56:e5:7b:2c:19:e2:dc:a7:8a:0d:45:f4:
74:a0:7f:3d:0b:d5:21:48:a7:7e:77:4a:f7:85:d6:
94:cf:91:fa:a5:dd:66:d6:89:fb:1b:4f:86:1d:c8:
29:f1:bf:41:08:59:44:52:aa:9e:65:3e:73:00:6f:
c8:da:39:2e:16:43:d5:2e:54:a7:78:74:e8:c5:97:
6b:26:f2:03:d8:1e:e5:a3:c6:5a:0b:4b:f6:ee:80:
61:5d:f8:d0:4c:82:11:dc:25:c6:ee:1f:ff:2e:36:
8c:3f:53:a8:f9:8f:1e:54:b4:83:53:45:80:4c:2e:
2e:39:79:53:e7:4e:37:f1:86:d3:85:f2:6a:ec:44:
ce:e1:00:ee:15:96:b2:88:c8:a4:ac:14:fc:23:5c:
14:5b:b5:ee:26:9f:99:e4:60:4a:a6:3f:9a:ad:1d:
d0:87:7f:87:b6:b6:00:ea:3c:c2:1e:42:09:af:60:
fd:86:8f:80:20:7b:51:72:07:80:6b:0c:6b:6c:f1:
45:24:17:8e:90:eb:04:2c:af:57:ce:bf:14:94:ad:
39:e5:18:bf:74:02:22:9c:27:ea:e9:37:b6:2c:b9:
81:e0:d6:17:3c:59:78:f8:77:85:0d:28:e0:8f:2e:
50:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5A:A3:02:0D:32:EC:10:96:67:F3:D0:CC:CE:8B:A7:D4:A3:A4:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/446CE206C27B11EF87E3CC56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.162.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c8:4b:65:c2:02:6a:4c:80:8d:5a:64:f2:ea:ac:24:2e:66:
e7:04:be:cf:2b:66:e7:43:ef:4a:28:ea:4e:d2:bb:0f:89:80:
7c:8a:1a:5d:ae:e2:04:dd:aa:4b:3f:e8:e0:0e:f3:de:f5:72:
06:88:bb:3c:da:b5:f7:dc:74:21:57:f9:ab:8f:27:c2:86:a7:
05:ab:c4:2a:81:e0:7f:b0:30:f4:1e:fb:56:64:5b:31:c9:99:
ae:d3:29:17:9d:d7:e8:e4:5a:ac:70:95:d6:80:00:b3:d7:c7:
e4:e1:92:cb:12:52:91:52:07:f5:6f:2b:84:7c:23:d8:53:c1:
b4:c2:af:b8:a2:0b:1f:cd:44:3e:97:c7:24:cb:83:5a:ca:6d:
07:65:b7:6b:fc:ad:80:86:c6:85:46:79:4a:49:c4:24:e7:9d:
63:70:a2:55:95:1c:4e:a4:5c:74:4d:94:a0:ef:de:f7:66:a1:
fd:c9:8b:0b:f6:02:cf:94:22:95:c9:6e:ed:50:82:3a:04:96:
81:20:62:55:e2:7a:96:56:c5:6c:e0:5f:8b:b1:97:7f:df:68:
de:a5:f5:6a:2a:9d:bb:a6:3a:6b:a8:53:4c:a4:ba:88:56:e1:
f8:3b:f9:29:4e:17:fd:82:af:f4:75:0e:c4:c0:3b:a5:c4:f6:
f5:02:ae:ca
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOihMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI1MDQ0NjUyWhcNMjUxMjEwMDQ0NjUyWjAYMRYw
FAYDVQQDEw02NzZiOGU0MC1jYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArsu9o3CvURIlbS5IOr8i5uFW5XssGeLcp4oNRfR0oH89C9UhSKd+d0r3
hdaUz5H6pd1m1on7G0+GHcgp8b9BCFlEUqqeZT5zAG/I2jkuFkPVLlSneHToxZdr
JvID2B7lo8ZaC0v27oBhXfjQTIIR3CXG7h//LjaMP1Oo+Y8eVLSDU0WATC4uOXlT
50438YbThfJq7ETO4QDuFZayiMikrBT8I1wUW7XuJp+Z5GBKpj+arR3Qh3+HtrYA
6jzCHkIJr2D9ho+AIHtRcgeAawxrbPFFJBeOkOsELK9Xzr8UlK055Ri/dAIinCfq
6Te2LLmB4NYXPFl4+HeFDSjgjy5QKwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG5a
owINMuwQlmfz0MzOi6fUo6SDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NDZDRTIwNkMyN0IxMUVGODdFM0NDNTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOOiMA0GCSqGSIb3DQEBCwUA
A4IBAQAvyEtlwgJqTICNWmTy6qwkLmbnBL7PK2bnQ+9KKOpO0rsPiYB8ihpdruIE
3apLP+jgDvPe9XIGiLs82rX33HQhV/mrjyfChqcFq8QqgeB/sDD0HvtWZFsxyZmu
0ykXndfo5FqscJXWgACz18fk4ZLLElKRUgf1byuEfCPYU8G0wq+4ogsfzUQ+l8ck
y4Naym0HZbdr/K2AhsaFRnlKScQk551jcKJVlRxOpFx0TZSg7973ZqH9yYsL9gLP
lCKVyW7tUII6BJaBIGJV4nqWVsVs4F+LsZd/32jepfVqKp27pjprqFNMpLqIVuH4
O/kpThf9gq/0dQ7EwDulxPb1Aq7K
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:29:27 2025 by rpki-client