Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C9923ACDC0711EF81FE6F69762E951A.roa
File: 6C9923ACDC0711EF81FE6F69762E951A.roa (raw, json)
Hash identifier: nZJMXwTADW2jBFUw/XueqPrMnNChUYrIZNWzcQ6ucMI=
Subject key identifier: BB:83:45:76:C2:07:01:5F:14:8C:EF:E5:F1:D6:7D:F0:27:35:34:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01141C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C9923ACDC0711EF81FE6F69762E951A.roa
Signing time: Sun 26 Jan 2025 17:03:12 +0000
ROA not before: Sun 26 Jan 2025 17:03:08 +0000
ROA not after: Sun 23 Mar 2025 17:03:08 +0000
asID: 63139
IP address blocks: 156.227.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70684 (0x1141c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 17:03:08 2025 GMT
Not After : Mar 23 17:03:08 2025 GMT
Subject: CN=67966ad0-8869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:0e:8a:73:8c:bc:5a:2d:ee:20:cb:9f:3b:
a0:78:cb:8a:a5:0d:8c:29:e4:2e:13:56:5d:f7:a8:
89:1a:01:bd:2a:24:59:80:51:a2:5f:87:02:9b:de:
76:dc:0f:81:23:3c:08:91:44:b7:7e:ad:88:ee:d1:
ef:27:8e:c8:4d:55:fb:84:88:49:35:bb:e9:22:ce:
96:a5:e0:28:55:51:74:ae:86:5f:ee:5b:b7:a1:3c:
d6:00:50:b4:ac:0e:34:51:26:78:5a:ec:7e:d8:e5:
bd:d6:51:38:19:a3:6f:84:08:ae:72:ee:59:eb:48:
d4:bf:25:76:ad:ce:a2:e7:34:0e:30:5b:ac:d3:77:
b6:13:46:20:8a:f9:72:ee:91:c4:f6:e8:89:59:af:
98:48:12:5d:b9:78:9f:e8:8c:e9:42:a9:aa:13:f3:
db:ff:eb:62:2a:2b:7b:63:29:91:ac:f6:bc:b9:97:
fc:27:8a:56:31:d9:96:e7:0d:20:6b:4f:f7:0c:98:
67:17:a0:05:be:85:7e:c4:68:82:54:92:2a:96:6a:
0f:d9:49:a1:a9:6a:5a:2e:a3:fc:7d:c3:39:64:7e:
1d:64:78:8d:cc:55:99:72:08:37:05:63:17:4e:1e:
5e:53:b7:72:9f:a5:39:d8:ea:38:59:27:d3:46:5e:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:83:45:76:C2:07:01:5F:14:8C:EF:E5:F1:D6:7D:F0:27:35:34:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C9923ACDC0711EF81FE6F69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.220.0/22
Signature Algorithm: sha256WithRSAEncryption
60:50:5f:be:7c:ab:df:f6:f9:60:d9:4d:3a:1b:7e:1a:3f:5a:
95:56:98:70:22:6e:7e:73:ee:f9:02:1b:a3:ae:7d:cc:ab:ec:
98:53:76:ff:19:51:39:65:9b:16:31:e7:56:c6:cb:7f:6d:f2:
fb:b0:21:ec:21:0c:42:fa:28:77:e2:95:db:9d:aa:a6:7c:49:
ef:44:33:d0:c2:e8:91:bf:05:16:5c:29:33:45:6d:4f:4e:86:
24:45:ca:85:c9:69:7b:6d:66:b5:73:64:c4:40:dc:6d:27:db:
a7:c2:00:a6:fe:09:b1:ab:95:f0:74:25:a3:aa:ec:e8:3a:be:
5e:64:fe:5d:b0:f2:2e:49:a8:e8:b2:29:aa:bf:0e:99:67:e3:
c0:bf:6e:87:f7:ff:61:35:82:34:5f:b1:de:fa:ac:8d:2f:70:
a5:73:42:2a:dd:b8:30:e6:00:80:22:3b:03:f4:b0:62:2e:2f:
51:5f:cb:23:2b:39:00:83:31:e5:b8:88:07:86:71:28:13:8f:
ef:da:b3:d1:9d:28:ad:b8:0d:ec:48:42:4d:3b:97:72:68:86:
34:7b:ea:28:c7:2c:7d:3e:ee:1b:be:48:f1:ae:85:ac:1d:2e:
64:f0:62:5e:00:94:13:72:e9:17:25:43:87:fb:cd:30:e4:2a:
21:e1:7a:a4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARQcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI2MTcwMzA4WhcNMjUwMzIzMTcwMzA4WjAYMRYw
FAYDVQQDEw02Nzk2NmFkMC04ODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsrIOinOMvFot7iDLnzugeMuKpQ2MKeQuE1Zd96iJGgG9KiRZgFGiX4cC
m9523A+BIzwIkUS3fq2I7tHvJ47ITVX7hIhJNbvpIs6WpeAoVVF0roZf7lu3oTzW
AFC0rA40USZ4Wux+2OW91lE4GaNvhAiucu5Z60jUvyV2rc6i5zQOMFus03e2E0Yg
ivly7pHE9uiJWa+YSBJduXif6IzpQqmqE/Pb/+tiKit7YymRrPa8uZf8J4pWMdmW
5w0ga0/3DJhnF6AFvoV+xGiCVJIqlmoP2UmhqWpaLqP8fcM5ZH4dZHiNzFWZcgg3
BWMXTh5eU7dyn6U52Oo4WSfTRl40uQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLuD
RXbCBwFfFIzv5fHWffAnNTT5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82Qzk5MjNBQ0RDMDcxMUVGODFGRTZGNjk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOPcMA0GCSqGSIb3DQEBCwUA
A4IBAQBgUF++fKvf9vlg2U06G34aP1qVVphwIm5+c+75Ahujrn3Mq+yYU3b/GVE5
ZZsWMedWxst/bfL7sCHsIQxC+ih34pXbnaqmfEnvRDPQwuiRvwUWXCkzRW1PToYk
RcqFyWl7bWa1c2TEQNxtJ9unwgCm/gmxq5XwdCWjquzoOr5eZP5dsPIuSajosimq
vw6ZZ+PAv26H9/9hNYI0X7He+qyNL3Clc0Iq3bgw5gCAIjsD9LBiLi9RX8sjKzkA
gzHluIgHhnEoE4/v2rPRnSituA3sSEJNO5dyaIY0e+ooxyx9Pu4bvkjxroWsHS5k
8GJeAJQTcukXJUOH+80w5Coh4Xqk
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:59 2025 by rpki-client