Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9B2EBEAD51911EF953AE951762E951A.roa
File: B9B2EBEAD51911EF953AE951762E951A.roa (raw, json)
Hash identifier: 1ppTzBKBB1H4XgkVTG/Kr0gVbNip9Kgg89dQhzEeBAk=
Subject key identifier: AE:E3:1C:E2:1D:2E:13:32:3B:3A:71:92:F6:8B:39:61:AC:DE:1A:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AC2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9B2EBEAD51911EF953AE951762E951A.roa
Signing time: Fri 17 Jan 2025 21:26:34 +0000
ROA not before: Fri 17 Jan 2025 21:26:30 +0000
ROA not after: Sat 22 Feb 2025 21:26:30 +0000
asID: 141883
IP address blocks: 156.249.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68290 (0x10ac2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 21:26:30 2025 GMT
Not After : Feb 22 21:26:30 2025 GMT
Subject: CN=678acb0a-2f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:4b:86:f9:2b:ac:69:82:61:52:4c:82:9e:
dd:cd:2e:ef:85:75:bb:33:fe:0d:40:75:63:fb:bf:
0b:38:dc:b8:03:c5:89:82:55:6f:4a:29:5e:f9:58:
b8:c9:d1:e6:5a:6e:50:7a:22:40:eb:1b:2a:37:a5:
0d:d5:6b:cd:e5:07:9d:b4:e3:db:c4:1d:9d:05:b9:
99:f6:34:43:3c:9a:ce:2e:dc:d0:4b:3b:b3:4e:cf:
83:ea:b8:6d:61:99:67:e9:de:99:35:e6:2f:56:e7:
a4:fc:a3:1d:aa:f5:10:e9:0a:d5:b2:7b:c0:52:7d:
be:e3:d0:f1:a6:87:07:31:83:c0:0c:a6:7d:b0:fe:
87:df:44:e4:de:6c:2c:08:c8:bb:d8:44:bc:33:37:
1f:54:e5:37:da:4f:e1:f4:3c:a0:d0:48:db:bf:a9:
06:7c:53:dd:d6:c0:9f:07:59:8f:54:ee:1a:72:b4:
4a:3d:07:55:59:e1:34:52:84:e6:fb:89:76:e3:c8:
a1:60:83:51:f6:06:09:79:28:17:05:81:60:d7:77:
b2:35:61:fc:89:95:d9:6f:ce:4a:1f:9d:e7:64:f0:
0f:95:2c:ce:d7:1d:06:be:ae:14:95:0a:ad:ea:fe:
47:da:53:75:c6:98:25:3a:ee:3a:8f:01:72:8e:13:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E3:1C:E2:1D:2E:13:32:3B:3A:71:92:F6:8B:39:61:AC:DE:1A:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9B2EBEAD51911EF953AE951762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.28.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:6e:56:8e:6e:57:37:05:a7:62:df:3b:42:e1:5f:d9:14:e4:
c7:d9:2e:7d:18:f7:d9:51:4f:78:a5:d0:37:88:bc:6a:8b:2c:
9d:4f:4a:f0:e6:72:6d:ce:3e:23:b6:4b:af:20:4c:a3:12:d9:
3a:84:74:70:ab:82:e3:dc:a7:38:0d:3a:40:24:1c:ba:2e:8b:
38:81:cd:6c:6a:12:86:90:de:f9:bd:48:70:07:50:a2:a2:51:
16:17:09:91:d9:e0:56:fe:97:8c:2b:54:8a:c1:30:cf:0f:6e:
84:be:48:3d:3a:e2:15:cc:5b:d0:32:ea:9d:f1:02:f6:e4:d0:
77:0c:01:83:e4:ea:4b:20:93:35:33:70:98:9e:17:3b:bb:f3:
2a:f5:68:bb:26:a2:f2:df:6c:5c:8f:25:e6:b9:c8:fa:e5:a4:
a0:1e:02:9b:58:c5:81:27:90:12:58:50:f8:0b:91:ce:bc:22:
d3:96:6e:2f:e8:66:75:ca:9a:6c:69:3b:1c:f0:47:fc:ea:c3:
a5:9d:cd:04:ee:2f:e4:8d:57:66:ff:48:29:a6:b7:e8:ae:d3:
2e:55:4f:53:0c:33:a4:fc:a6:ed:ea:3c:1b:b5:c8:2a:f8:2f:
4c:c6:5c:c4:40:85:51:be:02:a9:73:14:90:ba:20:69:f1:52:
5a:59:7e:a3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQrCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MjEyNjMwWhcNMjUwMjIyMjEyNjMwWjAYMRYw
FAYDVQQDEw02NzhhY2IwYS0yZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0JlLhvkrrGmCYVJMgp7dzS7vhXW7M/4NQHVj+78LONy4A8WJglVvSile
+Vi4ydHmWm5QeiJA6xsqN6UN1WvN5QedtOPbxB2dBbmZ9jRDPJrOLtzQSzuzTs+D
6rhtYZln6d6ZNeYvVuek/KMdqvUQ6QrVsnvAUn2+49DxpocHMYPADKZ9sP6H30Tk
3mwsCMi72ES8MzcfVOU32k/h9Dyg0Ejbv6kGfFPd1sCfB1mPVO4acrRKPQdVWeE0
UoTm+4l248ihYINR9gYJeSgXBYFg13eyNWH8iZXZb85KH53nZPAPlSzO1x0Gvq4U
lQqt6v5H2lN1xpglOu46jwFyjhOCNQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFK7j
HOIdLhMyOzpxkvaLOWGs3hoFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9COUIyRUJFQUQ1MTkxMUVGOTUzQUU5NTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPkcMA0GCSqGSIb3DQEBCwUA
A4IBAQAcblaOblc3Badi3ztC4V/ZFOTH2S59GPfZUU94pdA3iLxqiyydT0rw5nJt
zj4jtkuvIEyjEtk6hHRwq4Lj3Kc4DTpAJBy6Los4gc1sahKGkN75vUhwB1CiolEW
FwmR2eBW/peMK1SKwTDPD26Evkg9OuIVzFvQMuqd8QL25NB3DAGD5OpLIJM1M3CY
nhc7u/Mq9Wi7JqLy32xcjyXmucj65aSgHgKbWMWBJ5ASWFD4C5HOvCLTlm4v6GZ1
yppsaTsc8Ef86sOlnc0E7i/kjVdm/0gpprfortMuVU9TDDOk/Kbt6jwbtcgq+C9M
xlzEQIVRvgKpcxSQuiBp8VJaWX6j
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:54:17 2025 by rpki-client