Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C6028AADC1611EF9BE2674C762E951A.roa
File: 5C6028AADC1611EF9BE2674C762E951A.roa (raw, json)
Hash identifier: 0p1vJ52+R7BTjWuQwy/5VjFypPF8tDrgzib2tAUQQ0E=
Subject key identifier: D2:8F:4B:1D:78:DE:9D:B3:36:D0:DF:71:D7:F0:68:D2:71:6E:99:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01143C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C6028AADC1611EF9BE2674C762E951A.roa
Signing time: Sun 26 Jan 2025 18:50:07 +0000
ROA not before: Sun 26 Jan 2025 18:50:03 +0000
ROA not after: Fri 07 Feb 2025 18:50:03 +0000
asID: 142062
IP address blocks: 156.232.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70716 (0x1143c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 18:50:03 2025 GMT
Not After : Feb 7 18:50:03 2025 GMT
Subject: CN=679683df-588a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:8a:9a:3f:ca:bf:8f:25:79:bd:ba:b5:d2:
08:11:ac:1c:04:42:f6:d7:5f:bb:c7:53:56:fa:1c:
75:e2:87:59:a0:cc:e7:30:c7:8e:de:41:ef:19:18:
43:55:45:bd:8e:a2:53:ad:f5:e8:94:1b:86:a9:78:
21:55:cb:55:4b:13:1e:bb:de:b4:1b:87:90:b6:47:
04:a8:71:5c:8a:99:b0:ea:2b:6b:3d:de:43:9f:11:
38:47:df:6a:ec:b6:c4:77:6b:78:36:c0:76:ed:67:
9d:1f:73:58:d6:68:3b:d9:f9:9b:89:44:1f:c7:63:
b9:45:3f:66:14:7a:87:8d:73:e3:90:2a:8b:07:8a:
47:f0:e0:a4:18:6e:39:a4:27:75:6a:7d:9f:a6:48:
13:1d:b3:3f:c0:e0:a2:c4:d4:fd:a2:44:3b:3e:c7:
35:8c:ef:55:95:c6:3a:7a:da:28:a3:13:ac:c3:f8:
25:8b:1b:85:e6:19:e4:70:40:6f:34:1f:ec:a7:ef:
dc:7d:e0:eb:39:43:f6:60:e1:4a:a8:14:eb:ab:c6:
fb:a2:57:fa:87:77:f0:88:d3:2f:22:44:45:e3:9f:
77:4e:43:9c:0b:c5:10:ea:f8:7b:ef:72:e7:e3:60:
bf:a7:6e:9a:f0:19:ee:fb:8d:1c:dd:7c:6f:14:33:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8F:4B:1D:78:DE:9D:B3:36:D0:DF:71:D7:F0:68:D2:71:6E:99:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C6028AADC1611EF9BE2674C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.32.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:36:f8:d7:1c:06:ea:c3:f9:58:c1:c9:03:e9:8c:98:05:51:
fb:71:f6:27:b0:53:e4:3f:08:b5:3f:f0:a1:48:8c:28:90:66:
3f:67:b8:62:46:4d:06:f7:1f:4a:fa:9d:fa:80:d2:91:92:db:
7a:5c:a6:a8:fd:a0:38:e2:02:9e:5d:6f:d6:51:ff:00:2b:7b:
f0:4f:8b:5b:b4:37:48:99:ae:e7:5d:70:39:0b:2b:07:59:c9:
c7:64:c4:04:ad:e4:9a:dc:5d:2e:27:d0:cc:f1:aa:04:48:41:
2a:b5:de:c7:36:de:e6:7b:ff:e8:d9:c8:b7:70:0a:e1:96:de:
12:81:a0:0a:64:39:4f:fc:05:48:e0:e6:a9:61:1c:f1:fb:66:
7f:f9:1d:5a:c6:14:be:a5:26:4b:00:95:3d:99:80:65:42:90:
50:05:71:94:ac:9f:db:5b:5f:f2:60:ec:83:f6:59:36:17:d5:
ea:47:35:59:51:3b:8c:5a:69:39:60:82:58:fe:63:15:36:52:
be:df:a1:cd:da:55:54:17:84:e8:24:2d:6b:6e:77:2f:4c:0f:
dd:7b:15:88:d3:12:2c:6d:87:14:29:bd:c6:6b:3a:e0:07:16:
b7:87:01:60:59:79:eb:4e:09:9f:e6:99:0e:e2:f1:07:c9:83:
39:3f:1e:8c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARQ8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI2MTg1MDAzWhcNMjUwMjA3MTg1MDAzWjAYMRYw
FAYDVQQDEw02Nzk2ODNkZi01ODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArW2Kmj/Kv48leb26tdIIEawcBEL211+7x1NW+hx14odZoMznMMeO3kHv
GRhDVUW9jqJTrfXolBuGqXghVctVSxMeu960G4eQtkcEqHFcipmw6itrPd5DnxE4
R99q7LbEd2t4NsB27WedH3NY1mg72fmbiUQfx2O5RT9mFHqHjXPjkCqLB4pH8OCk
GG45pCd1an2fpkgTHbM/wOCixNT9okQ7Psc1jO9VlcY6etoooxOsw/glixuF5hnk
cEBvNB/sp+/cfeDrOUP2YOFKqBTrq8b7olf6h3fwiNMvIkRF4593TkOcC8UQ6vh7
73Ln42C/p26a8Bnu+40c3XxvFDMv2wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNKP
Sx143p2zNtDfcdfwaNJxbpn5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QzYwMjhBQURDMTYxMUVGOUJFMjY3NEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnOggMA0GCSqGSIb3DQEBCwUA
A4IBAQCqNvjXHAbqw/lYwckD6YyYBVH7cfYnsFPkPwi1P/ChSIwokGY/Z7hiRk0G
9x9K+p36gNKRktt6XKao/aA44gKeXW/WUf8AK3vwT4tbtDdIma7nXXA5CysHWcnH
ZMQEreSa3F0uJ9DM8aoESEEqtd7HNt7me//o2ci3cArhlt4SgaAKZDlP/AVI4Oap
YRzx+2Z/+R1axhS+pSZLAJU9mYBlQpBQBXGUrJ/bW1/yYOyD9lk2F9XqRzVZUTuM
Wmk5YIJY/mMVNlK+36HN2lVUF4ToJC1rbncvTA/dexWI0xIsbYcUKb3GazrgBxa3
hwFgWXnrTgmf5pkO4vEHyYM5Px6M
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:06 2025 by rpki-client