Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B72E383ACE7911EFA08F669C762E951A.roa
File: B72E383ACE7911EFA08F669C762E951A.roa (raw, json)
Hash identifier: Xz05xM0qGPWv2DTbjt0BAtoEHEP3q7iTGcltNB3c0oU=
Subject key identifier: FD:08:44:66:CF:CF:A4:E3:F4:F4:2C:B9:19:C7:6D:F5:FD:06:23:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010338
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B72E383ACE7911EFA08F669C762E951A.roa
Signing time: Thu 09 Jan 2025 11:06:03 +0000
ROA not before: Thu 09 Jan 2025 11:06:00 +0000
ROA not after: Sat 01 Feb 2025 11:06:00 +0000
asID: 17561
IP address blocks: 156.236.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66360 (0x10338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 9 11:06:00 2025 GMT
Not After : Feb 1 11:06:00 2025 GMT
Subject: CN=677fad9b-2d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:a3:4b:d8:39:9f:84:86:45:03:e0:91:ce:
24:10:22:5c:36:f4:2b:9d:e3:cd:86:4b:ee:e2:54:
39:82:d6:6f:7b:ca:85:00:4c:c6:69:5c:b1:fc:0f:
6d:76:3c:ac:50:7d:55:98:ec:e9:c5:ff:46:ad:07:
da:16:fe:11:de:1e:a3:df:a5:cb:8d:89:aa:55:e5:
5c:bf:4a:51:fd:66:70:5d:c4:84:1c:db:23:e3:57:
c7:d5:cc:ee:d6:0b:63:be:92:db:4c:9c:86:d4:bf:
d4:cc:95:25:5f:a6:49:b2:fd:51:0d:dc:bc:5a:67:
a5:71:41:60:62:25:cf:1f:01:a0:ba:d9:3a:98:48:
89:d9:d0:c5:70:5f:26:b2:61:85:fa:ac:5a:87:58:
34:d7:92:00:27:7c:a3:e7:d7:62:9a:e9:97:7c:77:
a1:ca:6c:96:d2:74:0d:68:a3:c3:fe:f3:86:db:b6:
32:fa:43:81:1b:a1:06:94:cb:c2:04:bd:60:26:30:
b3:e1:b8:7b:3d:dc:13:d8:cc:c5:a4:12:2f:f5:1d:
e9:13:c8:b4:53:7e:6a:f2:de:cd:ca:d1:db:4f:88:
cf:6e:b4:2f:32:10:45:66:84:5c:73:da:c2:df:35:
53:f9:a8:3d:1d:50:89:43:1d:5d:a1:c1:87:59:bb:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:08:44:66:CF:CF:A4:E3:F4:F4:2C:B9:19:C7:6D:F5:FD:06:23:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B72E383ACE7911EFA08F669C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.35.0/24
Signature Algorithm: sha256WithRSAEncryption
62:54:a5:d1:2b:d0:92:63:5f:e8:4e:0e:39:3a:9e:af:9b:41:
7a:c6:60:f1:9a:2a:36:62:ed:ca:c5:79:1d:02:71:19:d4:8e:
b1:29:24:c7:9a:e8:bb:83:33:ae:fd:fa:41:76:f3:7a:c8:d4:
d8:05:79:09:fe:94:7a:61:e4:04:21:e1:20:08:cc:ed:0e:21:
3b:ff:db:47:c6:0c:7a:7d:fb:f6:3a:47:99:83:eb:52:4d:5d:
34:30:bc:42:86:e8:74:e0:b4:be:d7:6c:cc:66:0d:04:3a:e4:
9f:5a:80:ee:9e:bd:ca:fd:a9:49:c8:3a:d9:7c:31:b7:f0:9f:
3d:89:b4:90:30:2b:c8:b7:4d:2e:1f:a9:31:a2:88:b7:23:84:
88:0f:74:f8:02:31:6e:86:57:5e:f4:57:15:d2:6c:aa:68:ed:
c1:12:30:bc:f8:48:35:9d:7d:5f:29:d9:f3:e2:07:ed:80:96:
99:0c:ee:50:c7:12:d1:13:b3:53:81:a9:8f:27:3e:72:2c:b3:
c9:42:cb:e3:b4:ae:78:fb:3d:4e:aa:cc:f2:1d:b3:95:6c:80:
36:f4:1a:9e:f8:9e:99:53:d7:c8:03:0a:29:56:92:7d:07:10:
50:4c:c8:55:1a:67:f2:c6:b9:28:9b:6c:ff:0b:b1:e4:34:56:
7c:cf:2e:35
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQM4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MTEwNjAwWhcNMjUwMjAxMTEwNjAwWjAYMRYw
FAYDVQQDEw02NzdmYWQ5Yi0yZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA01mjS9g5n4SGRQPgkc4kECJcNvQrnePNhkvu4lQ5gtZve8qFAEzGaVyx
/A9tdjysUH1VmOzpxf9GrQfaFv4R3h6j36XLjYmqVeVcv0pR/WZwXcSEHNsj41fH
1czu1gtjvpLbTJyG1L/UzJUlX6ZJsv1RDdy8WmelcUFgYiXPHwGgutk6mEiJ2dDF
cF8msmGF+qxah1g015IAJ3yj59dimumXfHehymyW0nQNaKPD/vOG27Yy+kOBG6EG
lMvCBL1gJjCz4bh7PdwT2MzFpBIv9R3pE8i0U35q8t7NytHbT4jPbrQvMhBFZoRc
c9rC3zVT+ag9HVCJQx1docGHWbuMzQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP0I
RGbPz6Tj9PQsuRnHbfX9BiOiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNzJFMzgzQUNFNzkxMUVGQTA4RjY2OUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOwjMA0GCSqGSIb3DQEBCwUA
A4IBAQBiVKXRK9CSY1/oTg45Op6vm0F6xmDxmio2Yu3KxXkdAnEZ1I6xKSTHmui7
gzOu/fpBdvN6yNTYBXkJ/pR6YeQEIeEgCMztDiE7/9tHxgx6ffv2OkeZg+tSTV00
MLxChuh04LS+12zMZg0EOuSfWoDunr3K/alJyDrZfDG38J89ibSQMCvIt00uH6kx
ooi3I4SID3T4AjFuhlde9FcV0myqaO3BEjC8+Eg1nX1fKdnz4gftgJaZDO5QxxLR
E7NTgamPJz5yLLPJQsvjtK54+z1OqszyHbOVbIA29Bqe+J6ZU9fIAwopVpJ9BxBQ
TMhVGmfyxrkom2z/C7HkNFZ8zy41
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:34 2025 by rpki-client