Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82850A78DCD411EFAAD1974D762E951A.roa
File: 82850A78DCD411EFAAD1974D762E951A.roa (raw, json)
Hash identifier: NU9C++HXpzV6GCZBwkYJsYKPFHWOT6RYqUcSuQq2i+g=
Subject key identifier: DB:BD:20:C1:CC:16:5F:3E:3D:46:B6:36:58:A3:29:E2:9B:11:99:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01155B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82850A78DCD411EFAAD1974D762E951A.roa
Signing time: Mon 27 Jan 2025 17:31:15 +0000
ROA not before: Mon 27 Jan 2025 17:31:12 +0000
ROA not after: Sat 15 Feb 2025 17:31:12 +0000
asID: 39600
IP address blocks: 156.237.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71003 (0x1155b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:31:12 2025 GMT
Not After : Feb 15 17:31:12 2025 GMT
Subject: CN=6797c2e3-fa0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:52:66:22:13:a1:77:d1:ce:52:a8:a2:1c:
87:5a:12:62:0f:d0:59:37:d1:dc:0c:15:cf:43:be:
1c:2c:3b:7f:15:29:ec:84:21:13:df:cf:90:cb:07:
da:16:3d:64:8b:04:f9:27:a4:b5:d4:05:1d:13:90:
b7:4c:c0:80:c0:10:2e:34:0e:09:42:ba:b1:fc:57:
f9:bb:db:26:e2:85:80:98:f7:33:62:0f:e0:d5:0d:
61:72:2e:22:2c:3c:93:bc:b2:de:c0:24:23:dd:ce:
04:a3:08:c9:0c:27:1a:b1:14:74:53:f5:a6:f3:d8:
4c:b1:22:a5:a1:22:0c:12:8d:f7:2d:a0:8d:3b:27:
fc:ed:19:68:00:20:7a:46:9d:54:9c:ad:e4:fe:2a:
7a:85:95:c3:33:bd:e1:0f:eb:69:27:7f:48:ac:c0:
4f:8d:1a:b7:3c:c0:5b:be:19:90:22:50:71:68:f5:
9b:26:d4:b1:64:91:0c:e1:d9:6f:e9:f6:6e:50:47:
f3:25:19:4b:a3:f7:b5:7a:7d:0b:e1:1c:34:53:59:
40:d2:8c:ab:42:c5:c4:ab:af:c1:5b:03:4d:ef:89:
e9:79:b6:e4:13:40:cd:ab:9e:68:11:b9:6e:4a:95:
10:46:19:10:90:e5:ff:88:2f:b2:ba:c5:41:2b:5b:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BD:20:C1:CC:16:5F:3E:3D:46:B6:36:58:A3:29:E2:9B:11:99:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82850A78DCD411EFAAD1974D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.110.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b9:11:14:fe:1e:60:96:61:a0:dc:28:41:03:fe:5d:00:a1:
e3:bb:00:b2:5c:08:27:99:64:3a:24:c0:f9:ba:4a:5e:6d:e5:
24:d0:38:38:92:cf:1a:cb:73:38:be:19:06:1f:c2:b9:12:36:
7f:53:0d:40:e3:48:d7:62:a6:a8:97:d1:2e:f5:62:98:14:be:
c4:2f:76:fb:2e:86:02:24:0d:9d:35:24:37:67:cb:5c:94:89:
a5:ed:5f:a9:68:f9:71:b7:87:3e:38:f7:b0:9d:14:fa:cf:55:
98:84:db:57:be:97:84:c7:2b:fe:15:9f:a6:56:99:8b:6c:58:
12:e2:8b:e9:aa:5a:5c:ad:d8:55:cb:c3:28:1f:b9:dd:7c:c4:
01:33:b3:6d:2d:61:3d:4c:a7:f5:36:92:5d:58:4e:01:43:ed:
14:97:31:32:1a:8f:36:2f:cc:a8:bd:07:0f:3d:8e:0a:c7:1b:
a4:e0:07:73:87:c0:e7:ba:db:30:57:84:92:b5:19:c0:ff:3f:
be:9e:64:a7:dd:e9:c7:b1:cf:f7:51:34:bf:5f:3d:72:06:cf:
40:76:a9:36:e5:eb:cc:ba:d3:70:87:80:7a:bd:f0:c2:a1:3e:
75:d7:d0:12:26:15:98:cd:40:f7:22:e8:a9:04:ae:bb:40:99:
fd:ee:45:de
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARVbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MTczMTEyWhcNMjUwMjE1MTczMTEyWjAYMRYw
FAYDVQQDEw02Nzk3YzJlMy1mYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtthSZiIToXfRzlKoohyHWhJiD9BZN9HcDBXPQ74cLDt/FSnshCET38+Q
ywfaFj1kiwT5J6S11AUdE5C3TMCAwBAuNA4JQrqx/Ff5u9sm4oWAmPczYg/g1Q1h
ci4iLDyTvLLewCQj3c4EowjJDCcasRR0U/Wm89hMsSKloSIMEo33LaCNOyf87Rlo
ACB6Rp1UnK3k/ip6hZXDM73hD+tpJ39IrMBPjRq3PMBbvhmQIlBxaPWbJtSxZJEM
4dlv6fZuUEfzJRlLo/e1en0L4Rw0U1lA0oyrQsXEq6/BWwNN74npebbkE0DNq55o
EbluSpUQRhkQkOX/iC+yusVBK1t8CwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNu9
IMHMFl8+PUa2NlijKeKbEZmYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84Mjg1MEE3OERDRDQxMUVGQUFEMTk3NEQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO1uMA0GCSqGSIb3DQEBCwUA
A4IBAQB6uREU/h5glmGg3ChBA/5dAKHjuwCyXAgnmWQ6JMD5ukpebeUk0Dg4ks8a
y3M4vhkGH8K5EjZ/Uw1A40jXYqaol9Eu9WKYFL7EL3b7LoYCJA2dNSQ3Z8tclIml
7V+paPlxt4c+OPewnRT6z1WYhNtXvpeExyv+FZ+mVpmLbFgS4ovpqlpcrdhVy8Mo
H7ndfMQBM7NtLWE9TKf1NpJdWE4BQ+0UlzEyGo82L8yovQcPPY4Kxxuk4Adzh8Dn
utswV4SStRnA/z++nmSn3enHsc/3UTS/Xz1yBs9Adqk25evMutNwh4B6vfDCoT51
19ASJhWYzUD3IuipBK67QJn97kXe
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:45:09 2025 by rpki-client