Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C31924C0DA9A11EFB72FBC49762E951A.roa
File: C31924C0DA9A11EFB72FBC49762E951A.roa (raw, json)
Hash identifier: 5aE3neIRenT71nJKRtmAiyOI464G04tUioHDPtpTcos=
Subject key identifier: 8B:E7:F6:7C:24:E5:0A:ED:C7:6E:09:2D:39:17:3D:98:29:AD:CF:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C31924C0DA9A11EFB72FBC49762E951A.roa
Signing time: Fri 24 Jan 2025 21:32:50 +0000
ROA not before: Fri 24 Jan 2025 21:32:47 +0000
ROA not after: Tue 25 Feb 2025 21:32:47 +0000
asID: 44559
IP address blocks: 156.246.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69814 (0x110b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:32:47 2025 GMT
Not After : Feb 25 21:32:47 2025 GMT
Subject: CN=67940702-fe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1a:b5:fe:0b:e0:3a:ab:34:06:04:cb:55:24:
cf:ec:7e:b4:a2:2e:44:1f:a6:ba:d0:01:bf:ef:40:
54:be:72:ae:cd:cc:be:14:05:21:ee:44:07:e9:54:
27:f6:67:49:52:75:ab:0c:91:37:c3:f0:da:24:8f:
b4:e9:24:8a:de:ce:ec:d8:db:c6:ed:75:94:a3:0c:
a4:47:04:6a:34:92:f8:8c:cd:97:fe:f0:03:33:fb:
8c:1f:48:b3:c0:d2:ce:f5:98:f4:8e:b1:38:e8:c0:
ca:74:b6:0a:4c:77:b7:b4:a8:11:e9:4d:bd:e8:27:
33:34:76:a1:f0:78:d9:fc:3f:36:8b:87:40:92:a6:
7c:9d:8d:73:86:b8:ed:66:64:ee:1d:b8:14:4a:b2:
05:c5:02:17:3a:63:1d:2e:f6:39:11:6c:98:1e:79:
23:0a:91:4d:e1:44:eb:7c:c5:b3:b6:72:74:ae:b3:
6a:6f:ba:83:ee:47:c3:82:1a:6a:6e:a4:70:5a:c2:
ce:a6:bb:1a:4b:ed:d4:79:ac:73:09:73:b5:e9:03:
4d:74:5e:54:d7:01:aa:2d:a6:23:3a:89:4c:06:4e:
46:f7:b0:18:a4:07:6f:d5:e1:ea:7b:7f:60:e7:1e:
a4:38:c8:26:df:d6:eb:e0:a4:4d:9f:3a:fb:cf:87:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E7:F6:7C:24:E5:0A:ED:C7:6E:09:2D:39:17:3D:98:29:AD:CF:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C31924C0DA9A11EFB72FBC49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c5:b0:f3:40:62:b6:c0:ec:b1:79:0d:6a:6f:2a:75:9a:42:
23:54:be:37:0f:75:e0:da:17:d6:2e:1b:76:46:42:2e:e5:3a:
b7:cb:5f:c5:38:91:bc:d1:46:92:e1:b1:3e:2c:92:91:c7:46:
a4:73:01:0e:49:b8:f5:ec:95:6a:23:85:03:97:85:b4:3f:07:
1a:da:b2:c4:15:ad:bc:69:68:7e:07:c7:3a:4d:d2:c4:0c:50:
9f:54:b6:08:a8:c1:b5:c3:15:9f:43:99:0f:6e:ea:1e:58:17:
b8:fd:68:c7:ac:e0:10:f9:4e:d4:a5:a9:97:68:fe:2b:6a:7c:
c1:5a:2e:72:37:d3:a7:6d:09:17:ef:12:68:e6:ac:2a:f1:42:
3f:e5:7f:c5:82:b2:f1:ae:be:da:91:41:63:26:1e:80:62:a4:
f9:67:15:b6:44:0c:6f:1b:5a:97:b0:f1:92:b9:fc:7e:a5:65:
73:8e:85:9e:0e:f5:08:09:d6:5f:ae:eb:51:04:e7:70:b7:87:
4b:d8:61:c1:87:87:60:1d:ee:78:de:97:e3:a0:be:12:26:60:
fd:1e:cb:91:f4:d6:da:da:81:59:cf:78:88:08:4f:7f:59:bd:
83:96:87:84:d0:e0:1e:9f:74:79:f7:f3:89:01:57:99:1c:57:
28:83:13:1c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARC2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MjEzMjQ3WhcNMjUwMjI1MjEzMjQ3WjAYMRYw
FAYDVQQDEw02Nzk0MDcwMi1mZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5xq1/gvgOqs0BgTLVSTP7H60oi5EH6a60AG/70BUvnKuzcy+FAUh7kQH
6VQn9mdJUnWrDJE3w/DaJI+06SSK3s7s2NvG7XWUowykRwRqNJL4jM2X/vADM/uM
H0izwNLO9Zj0jrE46MDKdLYKTHe3tKgR6U296CczNHah8HjZ/D82i4dAkqZ8nY1z
hrjtZmTuHbgUSrIFxQIXOmMdLvY5EWyYHnkjCpFN4UTrfMWztnJ0rrNqb7qD7kfD
ghpqbqRwWsLOprsaS+3UeaxzCXO16QNNdF5U1wGqLaYjOolMBk5G97AYpAdv1eHq
e39g5x6kOMgm39br4KRNnzr7z4cC0wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIvn
9nwk5Qrtx24JLTkXPZgprc/wMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMzE5MjRDMERBOUExMUVGQjcyRkJDNDk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPbfMA0GCSqGSIb3DQEBCwUA
A4IBAQCLxbDzQGK2wOyxeQ1qbyp1mkIjVL43D3Xg2hfWLht2RkIu5Tq3y1/FOJG8
0UaS4bE+LJKRx0akcwEOSbj17JVqI4UDl4W0Pwca2rLEFa28aWh+B8c6TdLEDFCf
VLYIqMG1wxWfQ5kPbuoeWBe4/WjHrOAQ+U7UpamXaP4ranzBWi5yN9OnbQkX7xJo
5qwq8UI/5X/FgrLxrr7akUFjJh6AYqT5ZxW2RAxvG1qXsPGSufx+pWVzjoWeDvUI
CdZfrutRBOdwt4dL2GHBh4dgHe543pfjoL4SJmD9HsuR9Nba2oFZz3iICE9/Wb2D
loeE0OAen3R59/OJAVeZHFcogxMc
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:55 2025 by rpki-client