Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C684A33AD4A711EFBE52546F762E951A.roa
File: C684A33AD4A711EFBE52546F762E951A.roa (raw, json)
Hash identifier: 9WwxLXUzw+1qr1mTytARNQ3QTU0v3d9B0NinF51/4SE=
Subject key identifier: 52:89:57:8C:09:E3:2C:57:2A:DC:00:29:D8:2E:64:7E:6F:B6:C2:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010929
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C684A33AD4A711EFBE52546F762E951A.roa
Signing time: Fri 17 Jan 2025 07:50:53 +0000
ROA not before: Fri 17 Jan 2025 07:50:49 +0000
ROA not after: Wed 19 Feb 2025 07:50:49 +0000
asID: 7018
IP address blocks: 156.243.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67881 (0x10929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 07:50:49 2025 GMT
Not After : Feb 19 07:50:49 2025 GMT
Subject: CN=678a0bdd-c40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:90:5a:9f:d8:42:f0:09:f9:28:a4:f6:25:31:
71:6b:40:5e:38:ce:19:8e:e2:47:56:f9:13:34:ca:
ec:e8:79:cd:55:2a:de:d9:38:fb:2e:85:4c:8c:03:
05:47:f1:b6:f7:5a:2a:c1:c0:29:6a:69:4b:6b:e1:
67:f8:ee:cd:a4:42:42:fe:e1:dc:c1:42:1d:42:37:
83:d4:4b:5e:4c:d4:b3:e2:ce:07:22:0f:1e:9c:bc:
bc:0f:68:f6:b5:63:25:d2:c5:a6:48:8a:09:c8:d6:
2e:54:80:4a:08:5e:9a:44:1d:2f:85:de:65:b7:10:
f5:80:f1:1b:dd:e0:5e:d2:d7:fa:9f:5f:c4:e1:bc:
a3:10:92:20:4a:05:11:89:32:9e:19:80:20:58:d6:
b8:a3:6a:20:5a:5f:f8:3e:c3:74:5b:0d:53:0a:cd:
f4:e6:13:ed:36:03:de:f2:b7:16:5a:4a:8b:7b:9d:
3a:98:7b:43:ed:d7:0b:22:22:e0:a8:20:f4:a7:3a:
3b:87:99:b8:48:94:b6:1b:e9:97:77:fc:47:7c:16:
9d:2b:3e:92:37:32:72:6d:cc:5f:d2:b1:0c:02:ec:
f7:ba:d3:bb:20:44:67:2f:2f:fb:73:ab:fd:44:ab:
82:73:81:13:fb:a6:27:ee:67:c5:76:16:52:84:99:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:89:57:8C:09:E3:2C:57:2A:DC:00:29:D8:2E:64:7E:6F:B6:C2:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C684A33AD4A711EFBE52546F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.117.0/24
Signature Algorithm: sha256WithRSAEncryption
04:fb:7a:f1:55:e9:88:54:11:1b:a8:a0:28:88:66:94:54:4d:
5c:a3:d0:24:6a:83:3f:bc:71:2b:74:94:88:42:a1:9e:16:f9:
9a:50:75:41:45:0d:f6:af:19:41:bc:15:c2:c2:e0:b3:16:c3:
e2:95:54:b6:0f:e1:04:81:e7:9a:f7:4c:a7:75:b1:4b:07:98:
58:31:2e:ef:ba:8b:80:89:b8:7a:d2:88:ae:65:8e:e2:53:2f:
99:34:c1:cb:58:cf:6d:2f:19:90:1a:37:8f:b3:94:c7:c2:65:
e6:ff:cf:ae:66:1d:dd:c7:a7:5b:ac:06:9e:3e:14:55:aa:75:
5e:7b:88:d7:2a:6a:ae:e1:e2:d3:a4:f5:9e:b2:57:77:65:9e:
4c:22:61:33:9a:c2:39:06:77:5b:64:b2:44:12:d4:90:b6:93:
a4:0e:cc:f7:00:3b:49:bf:34:cd:b9:48:66:85:fb:8a:42:b4:
7e:65:94:25:b4:ac:fe:e0:64:cd:b7:67:90:c3:09:36:68:61:
42:f8:e9:44:1a:bb:ff:bf:db:02:44:a2:ba:8f:c2:38:cb:2b:
90:09:ff:00:03:c5:5a:ed:f4:08:88:f0:bb:47:92:ab:4a:e4:
61:66:b7:de:ab:7c:18:3f:e0:66:1d:29:48:92:55:4c:df:e0:
e2:52:17:e5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQkpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MDc1MDQ5WhcNMjUwMjE5MDc1MDQ5WjAYMRYw
FAYDVQQDEw02NzhhMGJkZC1jNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA65Ban9hC8An5KKT2JTFxa0BeOM4ZjuJHVvkTNMrs6HnNVSre2Tj7LoVM
jAMFR/G291oqwcApamlLa+Fn+O7NpEJC/uHcwUIdQjeD1EteTNSz4s4HIg8enLy8
D2j2tWMl0sWmSIoJyNYuVIBKCF6aRB0vhd5ltxD1gPEb3eBe0tf6n1/E4byjEJIg
SgURiTKeGYAgWNa4o2ogWl/4PsN0Ww1TCs305hPtNgPe8rcWWkqLe506mHtD7dcL
IiLgqCD0pzo7h5m4SJS2G+mXd/xHfBadKz6SNzJybcxf0rEMAuz3utO7IERnLy/7
c6v9RKuCc4ET+6Yn7mfFdhZShJkElQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFKJ
V4wJ4yxXKtwAKdguZH5vtsJLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNjg0QTMzQUQ0QTcxMUVGQkU1MjU0NkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPN1MA0GCSqGSIb3DQEBCwUA
A4IBAQAE+3rxVemIVBEbqKAoiGaUVE1co9AkaoM/vHErdJSIQqGeFvmaUHVBRQ32
rxlBvBXCwuCzFsPilVS2D+EEgeea90yndbFLB5hYMS7vuouAibh60oiuZY7iUy+Z
NMHLWM9tLxmQGjePs5THwmXm/8+uZh3dx6dbrAaePhRVqnVee4jXKmqu4eLTpPWe
sld3ZZ5MImEzmsI5BndbZLJEEtSQtpOkDsz3ADtJvzTNuUhmhfuKQrR+ZZQltKz+
4GTNt2eQwwk2aGFC+OlEGrv/v9sCRKK6j8I4yyuQCf8AA8Va7fQIiPC7R5KrSuRh
Zrfeq3wYP+BmHSlIklVM3+DiUhfl
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:40 2025 by rpki-client