Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/915DAE62DA9811EF96037CB8762E951A.roa
File: 915DAE62DA9811EF96037CB8762E951A.roa (raw, json)
Hash identifier: 3fmNdXC/uQck81pw4LXM6x8v2jSB5uqsYoHARl1KUyc=
Subject key identifier: 6F:45:F6:39:D6:51:A8:A9:F9:6D:92:66:49:6F:4E:8D:E2:76:BD:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/915DAE62DA9811EF96037CB8762E951A.roa
Signing time: Fri 24 Jan 2025 21:17:08 +0000
ROA not before: Fri 24 Jan 2025 21:17:04 +0000
ROA not after: Tue 25 Feb 2025 21:17:04 +0000
asID: 44559
IP address blocks: 156.246.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69800 (0x110a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:17:04 2025 GMT
Not After : Feb 25 21:17:04 2025 GMT
Subject: CN=67940354-df23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:a8:16:4f:cd:de:50:a8:87:87:60:44:32:
c9:78:48:75:e6:d4:23:fd:86:76:82:83:d8:ca:e9:
d1:22:e0:20:32:7e:d1:75:fa:40:69:03:09:27:20:
cb:2d:76:3d:db:c9:01:34:a5:97:70:1b:3b:21:82:
69:a4:1d:5d:a2:aa:8e:4c:97:a2:c9:d5:1c:1f:ed:
27:f3:2b:ac:ff:cd:ac:e3:be:a3:8a:a1:63:dc:6e:
62:5e:7a:d9:b9:a4:c1:bd:29:e1:f4:5e:09:20:ce:
8f:36:ea:d8:fb:32:1d:8a:c7:1a:7f:54:97:59:cd:
ae:3c:99:07:59:2c:1d:c3:99:77:d7:72:19:b9:00:
3b:b5:d1:3f:d5:4a:bf:c1:87:d5:d5:8d:48:8c:b3:
7a:b4:85:81:b4:1e:d4:69:4c:be:8d:45:0a:4a:4e:
a2:44:c1:f4:bd:e3:7b:af:26:1c:6e:d8:a5:53:97:
5d:f1:29:e3:6a:d5:e4:64:7c:29:8a:2f:d5:2f:ad:
bb:e4:32:a4:dc:3c:11:1b:bf:82:19:2d:2a:75:37:
a0:e4:23:ed:c4:83:2a:40:80:e8:c2:c6:30:69:60:
ba:ab:f5:d7:42:57:24:1a:2d:40:50:04:97:96:42:
26:19:5e:ba:b0:a7:37:54:44:84:99:ad:da:c3:f2:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:45:F6:39:D6:51:A8:A9:F9:6D:92:66:49:6F:4E:8D:E2:76:BD:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/915DAE62DA9811EF96037CB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
09:4f:8e:23:4c:40:3e:d3:cb:ea:35:3e:f4:2a:94:78:b6:ff:
f4:43:c6:0b:61:61:be:e3:6a:24:60:37:00:dc:f1:76:82:84:
b8:f4:1a:d2:c9:58:61:81:3e:c4:b5:37:26:9b:96:c7:e3:49:
cf:39:05:01:f1:88:b9:55:c5:09:4a:9b:0f:d6:3e:b2:e9:fb:
0c:93:4f:c3:4c:60:a2:53:49:f6:0e:e1:f7:71:ba:c6:4d:33:
96:25:34:03:a9:5d:b1:d7:cf:aa:71:5d:3d:3c:34:95:79:16:
f3:30:81:bf:80:77:e5:9e:02:b6:3c:82:b1:c9:63:19:e0:29:
0f:1e:80:d0:b1:df:1f:b9:02:98:86:5b:af:4b:e4:86:4d:61:
a2:38:f5:38:6c:58:e7:08:4f:77:58:83:64:c7:ab:9d:e8:85:
0f:d8:b3:b1:42:1a:e9:9a:09:05:ff:f6:23:0d:6a:c3:94:86:
42:01:b9:3e:fc:c9:a6:97:54:3f:32:7a:79:93:6c:e1:bc:4b:
73:52:4f:cc:e2:a9:52:cc:a9:5e:db:18:59:f2:42:58:62:a8:
d1:99:fc:07:af:29:34:ee:a3:2f:ae:95:76:d9:8c:7c:ff:23:
cf:62:9e:8e:11:75:b9:ce:cb:18:1c:9d:87:9f:32:ca:c5:51:
09:7c:03:e3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARCoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MjExNzA0WhcNMjUwMjI1MjExNzA0WjAYMRYw
FAYDVQQDEw02Nzk0MDM1NC1kZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0YuoFk/N3lCoh4dgRDLJeEh15tQj/YZ2goPYyunRIuAgMn7RdfpAaQMJ
JyDLLXY928kBNKWXcBs7IYJppB1doqqOTJeiydUcH+0n8yus/82s476jiqFj3G5i
XnrZuaTBvSnh9F4JIM6PNurY+zIdiscaf1SXWc2uPJkHWSwdw5l313IZuQA7tdE/
1Uq/wYfV1Y1IjLN6tIWBtB7UaUy+jUUKSk6iRMH0veN7ryYcbtilU5dd8SnjatXk
ZHwpii/VL6275DKk3DwRG7+CGS0qdTeg5CPtxIMqQIDowsYwaWC6q/XXQlckGi1A
UASXlkImGV66sKc3VESEma3aw/Is2QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG9F
9jnWUaip+W2SZklvTo3idr0UMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MTVEQUU2MkRBOTgxMUVGOTYwMzdDQjg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPbcMA0GCSqGSIb3DQEBCwUA
A4IBAQAJT44jTEA+08vqNT70KpR4tv/0Q8YLYWG+42okYDcA3PF2goS49BrSyVhh
gT7EtTcmm5bH40nPOQUB8Yi5VcUJSpsP1j6y6fsMk0/DTGCiU0n2DuH3cbrGTTOW
JTQDqV2x18+qcV09PDSVeRbzMIG/gHflngK2PIKxyWMZ4CkPHoDQsd8fuQKYhluv
S+SGTWGiOPU4bFjnCE93WINkx6ud6IUP2LOxQhrpmgkF//YjDWrDlIZCAbk+/Mmm
l1Q/Mnp5k2zhvEtzUk/M4qlSzKle2xhZ8kJYYqjRmfwHryk07qMvrpV22Yx8/yPP
Yp6OEXW5zssYHJ2HnzLKxVEJfAPj
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:56:32 2025 by rpki-client