Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFCAAA3EDBF711EF909B9F7F762E951A.roa
File: AFCAAA3EDBF711EF909B9F7F762E951A.roa (raw, json)
Hash identifier: xGoOKKyZ3LsjZ1wi8CcyrN04VYGeV4UP1SaquP0Yqwg=
Subject key identifier: AA:D5:C8:03:E3:E8:1E:40:63:1F:40:F3:14:D9:47:60:35:60:D6:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFCAAA3EDBF711EF909B9F7F762E951A.roa
Signing time: Sun 26 Jan 2025 15:10:32 +0000
ROA not before: Sun 26 Jan 2025 15:10:28 +0000
ROA not after: Sun 23 Mar 2025 15:10:28 +0000
asID: 63139
IP address blocks: 156.229.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70602 (0x113ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 15:10:28 2025 GMT
Not After : Mar 23 15:10:28 2025 GMT
Subject: CN=67965068-7671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:e0:97:4e:3e:3f:d9:1d:62:26:b3:57:6b:
bf:95:fb:7c:e2:fb:f9:09:6b:4c:00:da:89:a5:1a:
41:a9:1f:f4:20:78:c9:dc:18:3e:cb:48:c4:62:98:
a5:0b:1a:2e:e1:f4:61:34:f0:94:e7:c0:12:06:38:
e5:84:03:ee:52:35:1e:98:f4:41:88:19:71:a9:9e:
61:52:62:fe:d7:fa:38:f1:58:ae:93:46:3a:31:5e:
e5:be:28:0c:9c:0a:be:5f:01:48:9a:00:8f:de:70:
a8:ee:4b:0d:19:33:10:ba:12:d9:9e:65:a1:5d:09:
30:1a:89:aa:71:0e:56:dc:ec:81:e3:d6:1d:5a:47:
fe:b5:6e:16:92:47:78:44:3e:15:db:c9:b4:a4:bf:
66:8b:21:7c:a2:48:3e:bd:a7:5e:17:ff:68:6e:a4:
68:87:90:cf:cc:cb:bb:d1:a9:ee:40:7f:4a:bd:e1:
e6:dc:0c:31:51:95:71:fd:cd:42:5e:12:ed:96:96:
8d:62:68:05:fc:da:43:fb:3d:83:f1:bf:7b:b0:e7:
17:66:f9:73:e6:78:3c:4c:19:ea:8a:e0:f7:4b:65:
97:e5:2b:70:98:ef:00:34:6c:b6:de:11:f8:ad:18:
15:dc:80:af:bb:9f:85:6f:20:ed:fa:73:92:f5:72:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D5:C8:03:E3:E8:1E:40:63:1F:40:F3:14:D9:47:60:35:60:D6:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFCAAA3EDBF711EF909B9F7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.40.0/23
Signature Algorithm: sha256WithRSAEncryption
69:e0:69:c6:d5:fa:8c:23:06:54:a1:11:19:0d:26:f6:43:87:
59:eb:ca:cb:37:58:40:d1:11:89:a4:e6:79:67:67:a2:59:ae:
a7:32:e0:4a:09:78:03:cf:fd:f7:39:36:32:0c:06:18:96:7a:
43:61:ba:a7:fa:e6:04:ad:9e:e0:ca:ae:d7:4e:e6:46:1b:b5:
fb:bf:ae:ae:b1:f7:e7:cd:fa:39:2e:e0:a0:00:2d:91:27:94:
a1:6e:6f:5d:f6:46:e2:01:75:fd:67:b0:83:ff:a4:51:ae:27:
86:4f:3c:28:f3:e2:60:fb:3a:95:7a:e4:48:3f:05:f3:77:19:
61:bc:41:59:f4:f3:e5:29:ec:7c:e0:0b:a4:55:12:62:29:c3:
d5:94:e7:f4:40:a4:df:20:8a:0c:c8:ac:be:b7:79:6d:c8:36:
17:ac:31:9d:72:ec:c9:03:e3:57:cd:fb:59:f7:d2:31:e8:9e:
a6:ec:f6:76:99:81:72:ba:2d:09:51:47:af:7e:b9:55:61:30:
b6:dc:3a:f4:c2:22:67:ef:65:fb:18:0a:f1:3b:ef:01:b0:6b:
14:1c:3d:fe:ae:f4:d1:48:86:cb:4e:2d:07:7f:06:6c:cb:7e:
71:94:8a:21:10:4b:06:24:ae:f2:ee:06:d4:9f:26:23:5d:86:
da:5e:8b:f2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARPKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI2MTUxMDI4WhcNMjUwMzIzMTUxMDI4WjAYMRYw
FAYDVQQDEw02Nzk2NTA2OC03NjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwATgl04+P9kdYiazV2u/lft84vv5CWtMANqJpRpBqR/0IHjJ3Bg+y0jE
YpilCxou4fRhNPCU58ASBjjlhAPuUjUemPRBiBlxqZ5hUmL+1/o48Viuk0Y6MV7l
vigMnAq+XwFImgCP3nCo7ksNGTMQuhLZnmWhXQkwGomqcQ5W3OyB49YdWkf+tW4W
kkd4RD4V28m0pL9miyF8okg+vadeF/9obqRoh5DPzMu70anuQH9KveHm3AwxUZVx
/c1CXhLtlpaNYmgF/NpD+z2D8b97sOcXZvlz5ng8TBnqiuD3S2WX5StwmO8ANGy2
3hH4rRgV3ICvu5+FbyDt+nOS9XL5IQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKrV
yAPj6B5AYx9A8xTZR2A1YNbkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRkNBQUEzRURCRjcxMUVGOTA5QjlGN0Y3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOUoMA0GCSqGSIb3DQEBCwUA
A4IBAQBp4GnG1fqMIwZUoREZDSb2Q4dZ68rLN1hA0RGJpOZ5Z2eiWa6nMuBKCXgD
z/33OTYyDAYYlnpDYbqn+uYErZ7gyq7XTuZGG7X7v66usffnzfo5LuCgAC2RJ5Sh
bm9d9kbiAXX9Z7CD/6RRrieGTzwo8+Jg+zqVeuRIPwXzdxlhvEFZ9PPlKex84Auk
VRJiKcPVlOf0QKTfIIoMyKy+t3ltyDYXrDGdcuzJA+NXzftZ99Ix6J6m7PZ2mYFy
ui0JUUevfrlVYTC23Dr0wiJn72X7GArxO+8BsGsUHD3+rvTRSIbLTi0HfwZsy35x
lIohEEsGJK7y7gbUnyYjXYbaXovy
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:24:05 2025 by rpki-client