Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/813A2AB4D95411EF933161B2762E951A.roa
File: 813A2AB4D95411EF933161B2762E951A.roa (raw, json)
Hash identifier: e89Mg9HPvcRcfy3Scgr+xFXrNi6ApUEnBVfzIkQfUYg=
Subject key identifier: 17:F8:7E:A5:0F:DC:7B:57:BA:66:34:F9:EB:D1:2E:DF:77:06:5D:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/813A2AB4D95411EF933161B2762E951A.roa
Signing time: Thu 23 Jan 2025 06:37:24 +0000
ROA not before: Thu 23 Jan 2025 06:37:20 +0000
ROA not after: Sat 15 Mar 2025 06:37:20 +0000
asID: 138915
IP address blocks: 156.244.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69275 (0x10e9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 06:37:20 2025 GMT
Not After : Mar 15 06:37:20 2025 GMT
Subject: CN=6791e3a4-c25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d8:26:57:3a:c1:b6:bf:34:6f:27:33:eb:b0:
d3:e4:b8:9f:a7:88:7b:4a:23:fa:3b:5c:89:ca:46:
fc:a3:53:9c:bb:91:62:b2:de:36:3f:4b:95:d3:1a:
e5:70:c9:cd:bd:58:d4:21:eb:f5:62:bb:24:cc:65:
3b:9e:6a:2e:d9:a6:e5:bd:8f:fe:b9:8a:78:5c:6c:
f2:53:e3:6e:ee:0d:a9:b0:26:d2:c4:d5:2a:58:78:
44:f2:e5:19:fc:04:09:fe:ee:f0:d1:81:25:d0:77:
c3:96:4d:32:1d:4b:0f:f0:8b:0b:37:f6:bb:cc:48:
6c:3b:73:5f:2d:dd:32:b7:53:54:55:96:d4:c7:25:
b4:1b:43:5a:a2:70:1e:50:58:95:0c:46:8c:d2:69:
f0:c9:92:d4:17:4a:6c:46:0e:57:d2:db:46:45:66:
fc:10:00:d3:38:44:fb:d6:65:84:b9:08:2d:f2:70:
66:b8:e0:c0:f9:09:b3:76:44:4c:b9:90:50:7b:94:
d7:fc:9a:ab:68:d6:13:b3:dd:32:ba:fd:bc:48:24:
79:de:65:9a:0e:31:26:40:63:64:60:47:77:2a:59:
4c:68:c6:96:c7:1f:19:a6:ba:ed:bc:48:a7:e2:8a:
44:39:4d:d1:96:44:9f:98:66:23:5f:54:38:3d:07:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F8:7E:A5:0F:DC:7B:57:BA:66:34:F9:EB:D1:2E:DF:77:06:5D:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/813A2AB4D95411EF933161B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.39.0/24
Signature Algorithm: sha256WithRSAEncryption
30:30:a5:f6:b3:22:9c:89:c9:7e:df:e6:d4:09:73:f2:1e:a2:
f1:28:86:4e:c6:8f:fc:06:33:13:52:0b:a6:21:a2:ed:ed:44:
a6:96:4e:b7:23:67:6a:6b:4d:74:40:1e:4f:54:35:97:38:cd:
cd:27:30:25:81:cc:51:c9:ea:a8:c6:4d:e6:b3:a6:2b:3b:c6:
63:34:01:3f:17:f0:d1:f0:84:7a:7b:cd:ed:74:80:e3:6e:95:
18:c7:6f:10:fe:23:7f:59:61:f3:2c:19:7b:c8:62:db:05:55:
6f:f1:02:ab:3c:46:5f:c8:14:bc:8e:ed:31:07:8d:a5:ae:1c:
89:04:4f:df:2c:2a:fc:8c:0d:8c:92:dc:d1:bd:91:1a:7c:1d:
cb:a8:c8:12:fb:82:16:a8:ef:c6:de:c6:b3:8d:e9:9a:3f:a3:
fc:53:ac:5d:e3:ba:15:f3:e4:26:7e:7d:69:b7:f1:c1:a4:4b:
50:ed:1f:1d:22:65:03:87:76:8a:ea:c2:eb:c9:75:0b:4f:98:
2b:9d:2e:44:c3:24:4d:e6:db:ed:c0:ec:5c:db:92:e7:e5:87:
09:7c:02:e5:cc:32:63:42:74:8d:7a:8f:e9:89:8b:02:7d:8b:
2d:16:12:1f:00:61:65:b2:41:73:25:77:25:c6:57:16:d8:ec:
12:b4:cc:fc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ6bMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIzMDYzNzIwWhcNMjUwMzE1MDYzNzIwWjAYMRYw
FAYDVQQDEw02NzkxZTNhNC1jMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+dgmVzrBtr80bycz67DT5Lifp4h7SiP6O1yJykb8o1Ocu5Fist42P0uV
0xrlcMnNvVjUIev1YrskzGU7nmou2ablvY/+uYp4XGzyU+Nu7g2psCbSxNUqWHhE
8uUZ/AQJ/u7w0YEl0HfDlk0yHUsP8IsLN/a7zEhsO3NfLd0yt1NUVZbUxyW0G0Na
onAeUFiVDEaM0mnwyZLUF0psRg5X0ttGRWb8EADTOET71mWEuQgt8nBmuODA+Qmz
dkRMuZBQe5TX/JqraNYTs90yuv28SCR53mWaDjEmQGNkYEd3KllMaMaWxx8Zprrt
vEin4opEOU3RlkSfmGYjX1Q4PQfWQwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBf4
fqUP3HtXumY0+evRLt93Bl2QMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MTNBMkFCNEQ5NTQxMUVGOTMzMTYxQjI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQnMA0GCSqGSIb3DQEBCwUA
A4IBAQAwMKX2syKcicl+3+bUCXPyHqLxKIZOxo/8BjMTUgumIaLt7USmlk63I2dq
a010QB5PVDWXOM3NJzAlgcxRyeqoxk3ms6YrO8ZjNAE/F/DR8IR6e83tdIDjbpUY
x28Q/iN/WWHzLBl7yGLbBVVv8QKrPEZfyBS8ju0xB42lrhyJBE/fLCr8jA2MktzR
vZEafB3LqMgS+4IWqO/G3sazjemaP6P8U6xd47oV8+Qmfn1pt/HBpEtQ7R8dImUD
h3aK6sLryXULT5grnS5EwyRN5tvtwOxc25Ln5YcJfALlzDJjQnSNeo/piYsCfYst
FhIfAGFlskFzJXclxlcW2OwStMz8
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:17 2025 by rpki-client