Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99828E1ED3D611EFA6BBBF9C762E951A.roa
File: 99828E1ED3D611EFA6BBBF9C762E951A.roa (raw, json)
Hash identifier: K0xKCIdizWOQjrYQEhNNPC5ooNiqf8hpIleXMOICiPQ=
Subject key identifier: 35:1D:61:24:C3:4C:AB:E2:CE:0E:EE:6F:9C:D9:EB:92:1A:DB:10:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99828E1ED3D611EFA6BBBF9C762E951A.roa
Signing time: Thu 16 Jan 2025 06:53:32 +0000
ROA not before: Thu 16 Jan 2025 06:53:29 +0000
ROA not after: Thu 06 Feb 2025 06:53:29 +0000
asID: 138985
IP address blocks: 156.238.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67754 (0x108aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 06:53:29 2025 GMT
Not After : Feb 6 06:53:29 2025 GMT
Subject: CN=6788acec-0849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:3e:05:08:9e:f0:43:71:8f:78:2a:e6:97:
21:df:da:13:60:cd:61:78:90:9e:2d:e1:11:f8:db:
28:db:a7:6b:d9:14:f8:d0:cf:ca:a3:2a:b7:9b:e7:
91:73:c0:fd:27:01:d0:41:cc:fe:92:5b:4a:fd:18:
0e:93:03:d7:9e:4e:d7:4a:e9:6a:20:53:a4:3a:59:
83:eb:53:92:a2:f6:8a:50:14:34:88:44:c0:28:e5:
95:69:55:a4:9c:fc:1e:40:88:15:4f:04:a6:af:57:
18:2f:14:3a:8d:a2:37:9c:94:7f:be:84:1f:c1:78:
b0:44:a7:b7:3a:7c:56:73:01:db:64:31:e5:d6:79:
0d:e9:87:cb:79:d6:9b:b7:74:1b:a4:62:02:2d:fd:
87:ea:ca:4f:03:ce:79:16:90:c2:9d:35:6d:42:48:
90:f5:68:f0:72:b6:11:8c:c2:bb:17:d8:b9:25:b2:
7b:09:8c:6a:0d:75:d6:1f:9d:cb:fb:d6:a9:a3:6d:
ba:d9:b6:01:07:7a:b9:75:f0:06:87:ae:52:3b:85:
64:2a:ad:21:64:08:04:33:07:28:72:56:f0:f8:e3:
0b:fe:89:6a:b0:55:10:43:9b:28:d1:fb:e2:99:47:
59:9c:23:b1:fd:7d:9e:d6:be:bc:52:50:09:af:0f:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1D:61:24:C3:4C:AB:E2:CE:0E:EE:6F:9C:D9:EB:92:1A:DB:10:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99828E1ED3D611EFA6BBBF9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.81.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c6:ee:8f:a4:8c:a3:02:d9:80:fa:9e:4f:58:46:d5:c4:e9:
99:b3:98:ad:de:f7:4a:fc:fd:8b:99:ee:f4:f1:76:f6:1c:bd:
30:f4:b6:56:4c:a9:36:fb:93:20:7b:ca:81:f7:42:e7:0d:aa:
aa:3c:ce:80:1f:3d:34:b0:78:a5:b1:60:43:da:f7:4c:e8:8b:
84:1b:e8:09:8a:96:53:18:69:13:7e:06:da:de:40:d4:3a:4b:
4e:73:57:9e:7e:1c:d4:f2:c8:97:07:f7:46:6d:b4:30:22:87:
a3:95:b6:91:46:12:15:51:4f:56:a0:dc:71:d1:ec:a2:ce:e9:
39:a9:08:d3:30:d6:d6:7a:42:73:5f:16:c9:8d:ea:fa:74:ca:
4b:7d:fd:2f:e3:04:3f:5f:56:09:77:7f:49:02:c0:06:8d:fe:
97:61:b0:9e:a2:e2:df:ec:9d:67:a9:73:ef:ce:68:77:9d:f4:
f6:c8:33:fa:61:34:fe:0b:fa:17:b1:e7:c3:f6:59:24:9d:08:
66:16:7f:d2:f9:6a:f4:2b:af:a2:07:63:43:5e:85:9f:dd:dd:
d0:9a:89:ba:5f:5e:b8:e2:35:78:2c:17:9e:cd:2f:94:45:8e:
63:e9:dc:89:aa:4a:f7:19:7f:e7:9f:13:c5:0e:13:41:d9:23:
40:33:37:41
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQiqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE2MDY1MzI5WhcNMjUwMjA2MDY1MzI5WjAYMRYw
FAYDVQQDEw02Nzg4YWNlYy0wODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq+Q+BQie8ENxj3gq5pch39oTYM1heJCeLeER+Nso26dr2RT40M/Koyq3
m+eRc8D9JwHQQcz+kltK/RgOkwPXnk7XSulqIFOkOlmD61OSovaKUBQ0iETAKOWV
aVWknPweQIgVTwSmr1cYLxQ6jaI3nJR/voQfwXiwRKe3OnxWcwHbZDHl1nkN6YfL
edabt3QbpGICLf2H6spPA855FpDCnTVtQkiQ9WjwcrYRjMK7F9i5JbJ7CYxqDXXW
H53L+9apo2262bYBB3q5dfAGh65SO4VkKq0hZAgEMwcoclbw+OML/olqsFUQQ5so
0fvimUdZnCOx/X2e1r68UlAJrw8tiwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDUd
YSTDTKvizg7ub5zZ65Ia2xAvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85OTgyOEUxRUQzRDYxMUVGQTZCQkJGOUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO5RMA0GCSqGSIb3DQEBCwUA
A4IBAQAhxu6PpIyjAtmA+p5PWEbVxOmZs5it3vdK/P2Lme708Xb2HL0w9LZWTKk2
+5Mge8qB90LnDaqqPM6AHz00sHilsWBD2vdM6IuEG+gJipZTGGkTfgba3kDUOktO
c1eefhzU8siXB/dGbbQwIoejlbaRRhIVUU9WoNxx0eyizuk5qQjTMNbWekJzXxbJ
jer6dMpLff0v4wQ/X1YJd39JAsAGjf6XYbCeouLf7J1nqXPvzmh3nfT2yDP6YTT+
C/oXsefD9lkknQhmFn/S+Wr0K6+iB2NDXoWf3d3Qmom6X1644jV4LBeezS+URY5j
6dyJqkr3GX/nnxPFDhNB2SNAMzdB
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:22:01 2025 by rpki-client