Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4E5E422DC9411EF8B1640A5762E951A.roa
File: C4E5E422DC9411EF8B1640A5762E951A.roa (raw, json)
Hash identifier: AKgX09k3rBg8jyYIKRk0M7KDnCQ8lCcc8q62sexq9ic=
Subject key identifier: 46:15:CB:09:A3:2D:D9:9B:E4:8E:D5:A1:26:8E:A9:C3:48:37:35:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4E5E422DC9411EF8B1640A5762E951A.roa
Signing time: Mon 27 Jan 2025 09:54:59 +0000
ROA not before: Mon 27 Jan 2025 09:54:55 +0000
ROA not after: Sat 08 Feb 2025 09:54:55 +0000
asID: 212238
IP address blocks: 156.232.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70859 (0x114cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 09:54:55 2025 GMT
Not After : Feb 8 09:54:55 2025 GMT
Subject: CN=679757f3-b2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:95:28:f5:a2:27:74:6e:63:97:03:b2:64:
8d:de:c3:85:50:34:38:88:91:ea:a9:f8:23:1e:4d:
4f:2d:10:e0:d4:a0:ad:fb:f7:67:36:c3:67:ce:70:
f7:5b:9c:29:8c:80:80:0b:eb:cc:7e:58:f1:bf:8e:
ab:bf:04:7f:58:85:47:96:51:18:c8:bd:ab:7d:0c:
a9:57:24:f4:2d:c6:93:f5:c3:40:49:a6:ab:ae:41:
7b:6f:b3:34:7c:0a:f8:14:f1:41:5b:a6:5e:79:95:
12:a8:ac:42:c2:d4:cb:96:dc:82:d9:c4:47:21:2f:
68:43:6c:39:a9:c6:dc:ac:bf:c0:48:c4:a7:29:52:
69:96:af:87:e5:04:9a:ce:16:d7:1d:7a:21:47:12:
c1:f1:48:31:28:87:7b:10:ad:3a:15:a4:c3:91:51:
54:72:61:57:37:87:4e:ed:53:e7:51:08:aa:0f:ff:
b4:a5:32:b1:3f:43:dd:7c:93:bb:d1:8a:f5:6c:c3:
a9:ed:98:b5:91:98:81:7a:fe:7e:a0:fd:c9:b8:1c:
53:c5:06:2e:5a:03:5d:60:70:f5:40:7c:89:ef:3a:
2e:dc:e8:fa:e1:32:56:30:73:3a:93:68:be:e0:0c:
79:fc:73:df:9b:ce:16:f3:b4:c4:35:19:80:dc:c1:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:15:CB:09:A3:2D:D9:9B:E4:8E:D5:A1:26:8E:A9:C3:48:37:35:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4E5E422DC9411EF8B1640A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:dd:bd:41:f9:74:78:28:78:07:6e:86:b0:7f:b0:df:85:77:
01:86:82:97:97:9d:4d:e3:e8:7d:cb:6e:58:76:75:ff:9f:f7:
14:57:ab:74:1a:f6:ca:ec:fc:b3:74:80:57:90:4b:3a:8e:b4:
d5:f6:0d:e9:24:cf:9e:47:c8:35:79:9d:dd:7a:63:9b:53:ab:
a5:7b:e4:a3:44:c6:da:ad:98:b6:26:7a:c3:c7:5b:c0:da:8a:
dc:69:65:5e:ce:72:f2:c4:40:95:83:5c:a7:2f:fb:7d:59:41:
64:30:ca:30:e1:9f:78:e0:c0:a0:2d:90:64:9a:ad:ae:88:ec:
c8:9c:3b:9c:2a:b7:e9:69:4b:c5:47:af:ae:64:f1:55:66:f1:
b4:5f:ba:92:94:36:4a:43:60:f9:79:be:49:32:00:87:c6:2e:
6b:a6:d9:18:25:45:d7:67:e1:ca:a4:8e:01:b9:7b:35:49:bf:
fa:63:98:b8:e6:c1:45:61:eb:85:fd:e9:09:5b:da:61:20:e2:
0b:f4:7b:7f:9b:b0:07:d5:e6:15:af:ec:9c:bd:e0:30:f9:5a:
f3:29:2f:43:3f:a1:bf:43:60:da:59:b4:b7:35:f0:63:dc:4d:
0c:a2:fc:3f:71:82:00:42:35:65:fd:ea:52:01:5f:e8:0c:14:
95:3c:04:4f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARTLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MDk1NDU1WhcNMjUwMjA4MDk1NDU1WjAYMRYw
FAYDVQQDEw02Nzk3NTdmMy1iMmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsCiVKPWiJ3RuY5cDsmSN3sOFUDQ4iJHqqfgjHk1PLRDg1KCt+/dnNsNn
znD3W5wpjICAC+vMfljxv46rvwR/WIVHllEYyL2rfQypVyT0LcaT9cNASaarrkF7
b7M0fAr4FPFBW6ZeeZUSqKxCwtTLltyC2cRHIS9oQ2w5qcbcrL/ASMSnKVJplq+H
5QSazhbXHXohRxLB8UgxKId7EK06FaTDkVFUcmFXN4dO7VPnUQiqD/+0pTKxP0Pd
fJO70Yr1bMOp7Zi1kZiBev5+oP3JuBxTxQYuWgNdYHD1QHyJ7zou3Oj64TJWMHM6
k2i+4Ax5/HPfm84W87TENRmA3MHHBwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEYV
ywmjLdmb5I7VoSaOqcNINzVwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNEU1RTQyMkRDOTQxMUVGOEIxNjQwQTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOgBMA0GCSqGSIb3DQEBCwUA
A4IBAQAd3b1B+XR4KHgHboawf7DfhXcBhoKXl51N4+h9y25YdnX/n/cUV6t0GvbK
7PyzdIBXkEs6jrTV9g3pJM+eR8g1eZ3demObU6ule+SjRMbarZi2JnrDx1vA2orc
aWVeznLyxECVg1ynL/t9WUFkMMow4Z944MCgLZBkmq2uiOzInDucKrfpaUvFR6+u
ZPFVZvG0X7qSlDZKQ2D5eb5JMgCHxi5rptkYJUXXZ+HKpI4BuXs1Sb/6Y5i45sFF
YeuF/ekJW9phIOIL9Ht/m7AH1eYVr+ycveAw+VrzKS9DP6G/Q2DaWbS3NfBj3E0M
ovw/cYIAQjVl/epSAV/oDBSVPARP
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:57:11 2025 by rpki-client