Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A12D7F0ADFF411EF9DCB3165762E951A.roa
File: A12D7F0ADFF411EF9DCB3165762E951A.roa (raw, json)
Hash identifier: 5oqeVY/zk/uY00yrWPVG2F1h8jdi6SPhiLcTY1WUFCc=
Subject key identifier: CF:0D:7A:4B:F9:2E:D0:5D:26:75:A1:33:74:37:F4:9C:FD:2B:67:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011695
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A12D7F0ADFF411EF9DCB3165762E951A.roa
Signing time: Fri 31 Jan 2025 16:58:44 +0000
ROA not before: Fri 31 Jan 2025 16:58:40 +0000
ROA not after: Tue 25 Feb 2025 16:58:40 +0000
asID: 62468
IP address blocks: 156.245.198.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71317 (0x11695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 16:58:40 2025 GMT
Not After : Feb 25 16:58:40 2025 GMT
Subject: CN=679d0144-c137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:49:64:1c:1d:db:7a:b4:32:d5:a3:d1:6e:
4f:48:e9:78:07:5a:ef:23:a5:7c:44:47:aa:0f:cb:
7c:7a:2f:fe:1d:70:ba:a0:71:64:e5:61:2c:be:36:
cf:eb:ed:61:25:41:bc:f6:c8:de:67:40:ff:c9:a4:
7e:7f:3c:ce:d4:20:81:dc:48:75:bc:7a:d3:e4:a6:
8a:41:ab:f7:2e:a4:08:81:77:13:8f:c2:5b:18:fb:
5a:2b:f0:5a:1e:0f:14:05:22:14:0d:b3:0f:62:31:
61:23:94:54:e1:d8:c4:f8:11:1c:25:72:7b:73:bd:
4d:e3:a7:31:47:a2:a9:e4:da:a6:97:29:d4:6d:54:
d2:3c:4e:45:77:9c:ab:47:91:00:3f:20:31:72:e8:
36:79:27:47:6b:95:76:50:b2:fa:86:b0:ae:25:65:
f6:97:75:18:ae:fd:36:04:8f:9e:0e:3d:77:eb:7f:
2c:2c:85:58:5b:f4:10:5e:5f:e6:5e:77:3f:0e:82:
a8:fd:e1:12:28:6d:eb:14:5b:9f:4d:01:e7:16:a8:
1b:fe:56:d2:5b:1b:9e:7b:53:f3:a3:5e:bf:5f:99:
5b:e4:3e:f0:5e:68:2c:5e:ad:16:35:b2:72:49:4d:
2f:40:72:4c:ca:e7:b9:8f:8a:2d:13:76:cf:b0:79:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0D:7A:4B:F9:2E:D0:5D:26:75:A1:33:74:37:F4:9C:FD:2B:67:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A12D7F0ADFF411EF9DCB3165762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.198.0/23
Signature Algorithm: sha256WithRSAEncryption
04:2b:e4:73:ed:71:b6:1a:a7:6c:4b:eb:5d:c5:75:f1:ca:90:
b4:48:17:d1:32:9c:5e:39:bd:49:63:20:61:a5:59:43:cf:50:
b2:10:ef:57:5d:31:6d:12:a7:17:62:9c:76:be:d7:80:2b:cd:
ae:fe:6a:4b:c5:61:9e:5d:15:90:91:d6:ca:5d:33:65:9e:ab:
26:c5:43:1f:5c:6a:1f:79:78:d2:79:40:91:df:1f:15:6f:89:
94:56:32:11:a8:33:c3:bb:dd:cc:55:78:0b:f1:21:ea:f5:e5:
09:cc:8b:3a:09:3f:f7:5b:58:de:e6:70:22:f9:d7:70:df:2a:
c0:d9:bb:80:c7:a1:a5:e2:52:13:10:21:6f:33:96:23:4d:9c:
66:69:92:df:7a:47:99:00:46:4e:17:52:09:5c:05:60:9a:1e:
70:4f:c8:a3:4a:ef:05:e4:2e:b7:33:16:cd:65:e7:ca:b0:0e:
8a:7b:ae:fd:01:6e:b0:57:81:07:58:80:e6:45:f7:19:aa:9c:
09:62:22:ab:64:f2:b1:fe:34:3e:bf:f8:a6:3b:6e:19:9d:3a:
61:5a:9d:9e:ab:52:74:46:4d:b1:77:a2:26:a4:d5:14:6d:09:
8e:20:7c:36:0e:84:4b:84:82:40:df:b4:12:f0:e3:7e:7b:f4:
44:79:6e:4c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARaVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTMxMTY1ODQwWhcNMjUwMjI1MTY1ODQwWjAYMRYw
FAYDVQQDEw02NzlkMDE0NC1jMTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmaBJZBwd23q0MtWj0W5PSOl4B1rvI6V8REeqD8t8ei/+HXC6oHFk5WEs
vjbP6+1hJUG89sjeZ0D/yaR+fzzO1CCB3Eh1vHrT5KaKQav3LqQIgXcTj8JbGPta
K/BaHg8UBSIUDbMPYjFhI5RU4djE+BEcJXJ7c71N46cxR6Kp5NqmlynUbVTSPE5F
d5yrR5EAPyAxcug2eSdHa5V2ULL6hrCuJWX2l3UYrv02BI+eDj13638sLIVYW/QQ
Xl/mXnc/DoKo/eESKG3rFFufTQHnFqgb/lbSWxuee1Pzo16/X5lb5D7wXmgsXq0W
NbJySU0vQHJMyue5j4otE3bPsHmZbQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM8N
ekv5LtBdJnWhM3Q39Jz9K2cAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMTJEN0YwQURGRjQxMUVGOURDQjMxNjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPXGMA0GCSqGSIb3DQEBCwUA
A4IBAQAEK+Rz7XG2GqdsS+tdxXXxypC0SBfRMpxeOb1JYyBhpVlDz1CyEO9XXTFt
EqcXYpx2vteAK82u/mpLxWGeXRWQkdbKXTNlnqsmxUMfXGofeXjSeUCR3x8Vb4mU
VjIRqDPDu93MVXgL8SHq9eUJzIs6CT/3W1je5nAi+ddw3yrA2buAx6Gl4lITECFv
M5YjTZxmaZLfekeZAEZOF1IJXAVgmh5wT8ijSu8F5C63MxbNZefKsA6Ke679AW6w
V4EHWIDmRfcZqpwJYiKrZPKx/jQ+v/imO24ZnTphWp2eq1J0Rk2xd6ImpNUUbQmO
IHw2DoRLhIJA37QS8ON+e/REeW5M
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:45:29 2025 by rpki-client