Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6237AB06DAF211EF9AC1E6A1762E951A.roa
File: 6237AB06DAF211EF9AC1E6A1762E951A.roa (raw, json)
Hash identifier: K695W/+oQy9yvVo3CB+PvGS8YE75qm0yBqGc5w1fLvY=
Subject key identifier: CB:D0:43:9C:0D:61:E2:67:B1:7F:75:CB:9F:FB:36:66:B5:E4:C0:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011159
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6237AB06DAF211EF9AC1E6A1762E951A.roa
Signing time: Sat 25 Jan 2025 08:00:04 +0000
ROA not before: Sat 25 Jan 2025 08:00:00 +0000
ROA not after: Fri 07 Feb 2025 08:00:00 +0000
asID: 5065
IP address blocks: 156.229.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69977 (0x11159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:00:00 2025 GMT
Not After : Feb 7 08:00:00 2025 GMT
Subject: CN=67949a04-58c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ca:58:fd:ae:c2:6d:3a:21:fd:bb:c4:e9:16:
e0:4d:2f:63:ef:1d:68:2c:d7:31:02:15:e3:a5:1a:
8e:77:17:24:27:6c:e4:67:76:38:ef:6c:31:57:99:
17:7b:3b:d5:5a:d4:10:26:f7:12:5e:5d:d7:ba:48:
f6:aa:e4:20:f1:27:94:39:f7:91:a4:2e:85:64:79:
b0:ab:47:e0:0f:12:2e:5a:e6:ef:4d:3d:b3:50:a4:
9a:1c:3a:68:3d:3b:76:12:f8:df:f0:f8:18:55:50:
03:46:97:0a:63:fb:cb:ae:37:f9:73:20:75:9b:f6:
a0:8e:0b:7e:8f:2b:b7:42:21:d2:41:6a:18:3f:3c:
b1:c2:91:c2:9f:84:16:07:ec:66:2a:12:10:b3:d0:
9e:54:ea:c8:45:4e:a0:21:9e:da:4e:67:d0:83:60:
e8:7f:35:e5:d9:0f:c2:94:16:88:d4:bd:e9:df:d3:
3c:ac:1e:dc:77:94:58:38:52:c4:b6:ac:4d:b6:3a:
9f:dd:93:22:ee:7d:0b:55:1d:09:c3:db:47:68:4c:
94:e0:c8:7e:79:09:a4:3d:78:8f:d2:93:cd:9a:e5:
e4:00:a5:fa:b5:a6:d4:94:d3:0d:d6:f5:77:d3:e5:
27:ec:52:c9:66:45:80:a1:7a:99:0a:62:b8:62:55:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D0:43:9C:0D:61:E2:67:B1:7F:75:CB:9F:FB:36:66:B5:E4:C0:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6237AB06DAF211EF9AC1E6A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f1:09:a4:b3:c3:7c:97:66:9e:16:10:bc:36:eb:0d:1c:49:
52:1d:2f:9e:06:c9:75:90:ad:17:63:75:cd:5f:bc:6e:0b:41:
8b:8a:fb:ff:e0:d1:09:b0:f9:68:66:d4:8c:53:64:a9:b5:cf:
33:d8:ef:d3:07:3e:b7:4c:fd:0b:de:2d:57:3c:bb:3a:93:6c:
75:7a:19:c7:e6:30:66:53:4d:05:4c:bb:91:83:09:86:eb:1d:
32:c6:02:13:a1:b9:9f:13:b0:e0:4f:aa:e0:9b:26:b8:a0:64:
39:00:5d:77:92:af:c2:1f:c8:6c:96:0d:31:01:d4:73:6b:1e:
a5:4d:6f:31:d4:1f:54:83:f7:9a:62:22:83:66:e1:30:f2:65:
14:61:22:2e:7b:12:97:54:5c:73:66:e9:62:8f:ce:fd:c6:59:
29:78:40:6c:a2:c4:24:79:21:98:48:64:a2:ca:9d:df:c7:ac:
f0:31:62:ed:ad:88:27:30:e7:56:94:fc:30:43:66:24:4e:ad:
13:2d:92:26:8e:eb:51:70:e0:8b:d0:0b:42:06:e6:18:d4:36:
62:fd:97:bc:fe:11:45:7a:fd:80:09:c9:e9:05:ae:5d:d2:75:
97:fc:c1:ea:ee:38:65:4d:01:f5:f8:4a:c3:4d:c7:64:90:3a:
6d:07:96:af
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARFZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MDgwMDAwWhcNMjUwMjA3MDgwMDAwWjAYMRYw
FAYDVQQDEw02Nzk0OWEwNC01OGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8spY/a7CbToh/bvE6RbgTS9j7x1oLNcxAhXjpRqOdxckJ2zkZ3Y472wx
V5kXezvVWtQQJvcSXl3Xukj2quQg8SeUOfeRpC6FZHmwq0fgDxIuWubvTT2zUKSa
HDpoPTt2Evjf8PgYVVADRpcKY/vLrjf5cyB1m/agjgt+jyu3QiHSQWoYPzyxwpHC
n4QWB+xmKhIQs9CeVOrIRU6gIZ7aTmfQg2DofzXl2Q/ClBaI1L3p39M8rB7cd5RY
OFLEtqxNtjqf3ZMi7n0LVR0Jw9tHaEyU4Mh+eQmkPXiP0pPNmuXkAKX6tabUlNMN
1vV30+Un7FLJZkWAoXqZCmK4YlUqIQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMvQ
Q5wNYeJnsX91y5/7Nma15MDcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MjM3QUIwNkRBRjIxMUVGOUFDMUU2QTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOU8MA0GCSqGSIb3DQEBCwUA
A4IBAQBP8Qmks8N8l2aeFhC8NusNHElSHS+eBsl1kK0XY3XNX7xuC0GLivv/4NEJ
sPloZtSMU2Sptc8z2O/TBz63TP0L3i1XPLs6k2x1ehnH5jBmU00FTLuRgwmG6x0y
xgITobmfE7DgT6rgmya4oGQ5AF13kq/CH8hslg0xAdRzax6lTW8x1B9Ug/eaYiKD
ZuEw8mUUYSIuexKXVFxzZulij879xlkpeEBsosQkeSGYSGSiyp3fx6zwMWLtrYgn
MOdWlPwwQ2YkTq0TLZImjutRcOCL0AtCBuYY1DZi/Ze8/hFFev2ACcnpBa5d0nWX
/MHq7jhlTQH1+ErDTcdkkDptB5av
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:29:24 2025 by rpki-client