Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF3AAB56D8EA11EFB21E6D64762E951A.roa
File: AF3AAB56D8EA11EFB21E6D64762E951A.roa (raw, json)
Hash identifier: amE0h8aHTdoMq+nf6WVq2PT0YcZPD7Y0TSYSfGXCRns=
Subject key identifier: 52:2E:BC:D1:FA:E2:BE:19:F9:0E:D5:A8:5D:DF:AA:4E:B6:20:60:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF3AAB56D8EA11EFB21E6D64762E951A.roa
Signing time: Wed 22 Jan 2025 17:59:55 +0000
ROA not before: Wed 22 Jan 2025 17:59:51 +0000
ROA not after: Sat 15 Mar 2025 17:59:51 +0000
asID: 55320
IP address blocks: 156.244.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69250 (0x10e82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 22 17:59:51 2025 GMT
Not After : Mar 15 17:59:51 2025 GMT
Subject: CN=6791321a-d3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:42:5f:be:e4:26:2e:ea:3b:33:56:bd:30:f9:
04:77:b4:da:40:08:cd:fb:2d:a6:be:eb:8e:50:ec:
35:95:dc:76:f4:69:f7:8c:b8:32:b5:dc:9f:a7:7d:
ff:dc:fb:98:9e:55:35:98:f5:1a:50:e3:e9:7b:77:
33:d5:36:38:71:27:ca:45:bf:aa:1b:eb:ca:1f:36:
ef:b5:a6:c6:52:74:0a:10:be:be:12:22:a8:7b:0e:
49:5d:13:e3:aa:a6:ac:73:32:6b:cf:95:02:02:d3:
20:fc:b6:cd:c2:f7:36:b3:8e:12:1a:4c:c5:c7:b2:
d0:86:44:c1:98:7e:af:be:8f:b2:c4:e0:be:29:63:
a3:20:03:d3:d3:84:8d:63:1e:e8:ea:ec:90:71:b9:
cb:e4:1f:27:db:17:5e:bf:1e:7e:dd:b6:af:09:0f:
1a:20:0b:07:d1:98:d8:a6:6b:6a:f8:67:e0:70:9c:
23:77:8d:84:ca:e8:6e:9a:96:6b:4e:c0:60:c7:db:
5c:30:56:3a:8d:27:24:d6:ed:6f:25:5a:7b:4c:aa:
c3:01:ff:06:78:df:ae:e6:b4:1d:ae:51:db:5f:bd:
7f:b1:1e:f5:43:a3:7a:64:1f:89:dc:a9:9a:a5:09:
6d:2c:cd:f2:64:72:20:3a:09:c0:6f:1f:38:0e:86:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2E:BC:D1:FA:E2:BE:19:F9:0E:D5:A8:5D:DF:AA:4E:B6:20:60:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF3AAB56D8EA11EFB21E6D64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c5:aa:00:86:56:de:ac:4c:33:ed:e5:f1:66:db:9a:c5:73:
61:9b:28:3d:f0:50:0d:95:6e:38:b2:66:08:9e:9b:40:5f:ea:
3e:21:9d:3b:71:ee:3c:f3:00:d8:8f:c6:ff:3e:b6:84:f2:fb:
e2:14:0e:0a:8f:95:6b:7d:9d:ef:7f:5a:a5:55:9e:ec:db:b3:
02:4a:35:b4:59:e9:00:0c:99:47:64:e7:54:b5:9d:c3:bc:ca:
01:89:6a:8e:ac:a3:fb:c6:08:0f:4a:74:85:26:db:69:b8:7c:
27:5c:e6:10:52:18:cb:71:4b:bb:a0:a4:ae:75:e7:64:a7:c5:
d1:0d:94:53:ae:10:18:3a:7b:6e:6a:f8:c3:1f:1c:27:f8:61:
e7:09:92:8f:5e:72:2b:d9:be:71:e5:0e:88:ea:d4:f1:47:ff:
4f:23:f4:d0:94:0a:5c:7d:e3:c2:83:f4:f8:1c:cc:44:e2:9b:
eb:3f:77:d8:eb:4a:12:3b:b0:6d:6b:46:cb:c7:b6:84:5c:95:
82:6c:21:70:44:70:59:10:a4:a0:a0:9f:a0:dd:60:fd:e8:f4:
d9:87:b9:43:34:5b:01:eb:42:95:b1:29:f0:f3:33:84:60:80:
2c:65:88:4f:70:67:8c:fe:c7:54:50:65:74:13:f8:d8:a7:cb:
c8:e5:31:51
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ6CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIyMTc1OTUxWhcNMjUwMzE1MTc1OTUxWjAYMRYw
FAYDVQQDEw02NzkxMzIxYS1kM2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5kJfvuQmLuo7M1a9MPkEd7TaQAjN+y2mvuuOUOw1ldx29Gn3jLgytdyf
p33/3PuYnlU1mPUaUOPpe3cz1TY4cSfKRb+qG+vKHzbvtabGUnQKEL6+EiKoew5J
XRPjqqasczJrz5UCAtMg/LbNwvc2s44SGkzFx7LQhkTBmH6vvo+yxOC+KWOjIAPT
04SNYx7o6uyQcbnL5B8n2xdevx5+3bavCQ8aIAsH0ZjYpmtq+GfgcJwjd42Eyuhu
mpZrTsBgx9tcMFY6jSck1u1vJVp7TKrDAf8GeN+u5rQdrlHbX71/sR71Q6N6ZB+J
3KmapQltLM3yZHIgOgnAbx84Doby1wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFIu
vNH64r4Z+Q7VqF3fqk62IGAkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRjNBQUI1NkQ4RUExMUVGQjIxRTZENjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQXMA0GCSqGSIb3DQEBCwUA
A4IBAQA5xaoAhlberEwz7eXxZtuaxXNhmyg98FANlW44smYInptAX+o+IZ07ce48
8wDYj8b/PraE8vviFA4Kj5VrfZ3vf1qlVZ7s27MCSjW0WekADJlHZOdUtZ3DvMoB
iWqOrKP7xggPSnSFJttpuHwnXOYQUhjLcUu7oKSudedkp8XRDZRTrhAYOntuavjD
Hxwn+GHnCZKPXnIr2b5x5Q6I6tTxR/9PI/TQlApcfePCg/T4HMxE4pvrP3fY60oS
O7Bta0bLx7aEXJWCbCFwRHBZEKSgoJ+g3WD96PTZh7lDNFsB60KVsSnw8zOEYIAs
ZYhPcGeM/sdUUGV0E/jYp8vI5TFR
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:04:24 2025 by rpki-client