Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C97DAAECD7E411EFAED078A6762E951A.roa
File: C97DAAECD7E411EFAED078A6762E951A.roa (raw, json)
Hash identifier: Gs6DBQK8rHL+KpC3psF/PE63UnMNj/9lHLxpbih+Q5w=
Subject key identifier: B8:B3:7A:C5:2C:C2:2E:9A:8C:A2:6C:DF:AE:D1:2F:F2:F0:3E:D5:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D42
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C97DAAECD7E411EFAED078A6762E951A.roa
Signing time: Tue 21 Jan 2025 10:45:11 +0000
ROA not before: Tue 21 Jan 2025 10:45:07 +0000
ROA not after: Sat 01 Feb 2025 10:45:07 +0000
asID: 44559
IP address blocks: 156.246.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68930 (0x10d42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 10:45:07 2025 GMT
Not After : Feb 1 10:45:07 2025 GMT
Subject: CN=678f7ab6-3af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:82:bd:5b:e7:56:18:4b:ad:76:74:d1:5b:
5a:30:f5:58:bb:dd:62:0e:9f:16:81:28:ad:4a:a7:
8c:df:1b:26:03:9b:9b:6d:ee:54:41:06:82:5d:52:
d6:bb:89:1d:ec:41:e8:cf:02:f3:3c:f5:db:11:d9:
6e:d7:f1:cf:19:ed:d4:9d:c2:14:8a:cb:10:25:82:
bb:a7:86:f0:e4:4e:1c:ea:78:ee:1d:d0:94:21:b2:
e9:48:23:84:86:cc:41:9b:95:1d:51:0c:cf:9d:00:
da:60:92:02:9d:e4:f0:5a:c9:35:5b:76:97:7e:2a:
ae:9d:46:7d:1b:68:7d:47:bf:c8:bb:a6:a0:2f:ab:
65:d4:52:db:d8:53:d5:52:e4:3a:54:1e:5a:e7:b0:
22:df:07:e9:de:f1:b9:4b:c1:33:d2:a1:4e:d1:30:
c6:05:00:54:d9:45:49:68:a6:48:aa:16:84:23:c3:
65:b8:13:34:5a:49:bf:cb:d9:08:70:56:1c:58:86:
18:1a:4d:25:f7:ef:2c:02:c6:95:b1:d8:9e:64:91:
85:dd:40:ff:61:1c:f6:3f:4e:63:b7:68:3e:06:a2:
eb:14:47:16:8d:84:66:b7:42:ec:8b:5e:91:55:4a:
45:8d:71:9b:bb:65:ec:bf:79:ff:4c:4c:af:6a:6f:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B3:7A:C5:2C:C2:2E:9A:8C:A2:6C:DF:AE:D1:2F:F2:F0:3E:D5:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C97DAAECD7E411EFAED078A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.195.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a9:25:ad:dc:18:1d:2a:59:5a:fe:0a:04:0c:80:7e:4e:25:
23:d2:f1:5c:a0:6f:04:2b:72:28:ef:63:4e:34:34:eb:b5:4e:
4f:a2:2c:21:e4:8f:2b:79:b7:f7:a6:29:ab:c0:43:a9:22:93:
41:9b:77:bc:76:60:e0:67:83:3d:2c:03:40:64:37:55:c1:41:
9e:83:6f:8e:2f:bc:50:37:a2:a0:c6:d3:b5:44:98:08:b4:d0:
79:a6:11:1a:93:d7:ea:77:02:5b:5c:a8:41:25:33:7b:7e:e3:
9c:86:e4:41:9a:6d:9a:44:36:7c:91:7a:83:7c:65:42:1c:1e:
5d:74:46:2f:c4:bf:dd:27:27:23:a0:36:43:cb:35:bb:b7:15:
e3:7a:f5:bf:07:cb:ee:9a:0a:dc:f8:fe:65:a8:12:fe:e5:0d:
8d:f3:52:81:09:04:83:10:18:1e:56:24:4f:5b:3c:65:e6:00:
d2:d6:44:b9:6b:92:b6:88:9a:68:f1:d3:25:f6:f9:ec:9d:31:
80:82:d1:74:59:bb:65:61:5b:ff:14:de:24:12:66:23:33:11:
1e:b6:35:38:5b:ed:88:e8:db:dc:46:c4:86:8f:6b:ae:c3:2e:
0c:ac:45:52:34:47:87:da:25:c7:b5:58:09:66:b0:13:b1:06:
6e:99:3a:b7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ1CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTA0NTA3WhcNMjUwMjAxMTA0NTA3WjAYMRYw
FAYDVQQDEw02NzhmN2FiNi0zYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzC2CvVvnVhhLrXZ00VtaMPVYu91iDp8WgSitSqeM3xsmA5ubbe5UQQaC
XVLWu4kd7EHozwLzPPXbEdlu1/HPGe3UncIUissQJYK7p4bw5E4c6njuHdCUIbLp
SCOEhsxBm5UdUQzPnQDaYJICneTwWsk1W3aXfiqunUZ9G2h9R7/Iu6agL6tl1FLb
2FPVUuQ6VB5a57Ai3wfp3vG5S8Ez0qFO0TDGBQBU2UVJaKZIqhaEI8NluBM0Wkm/
y9kIcFYcWIYYGk0l9+8sAsaVsdieZJGF3UD/YRz2P05jt2g+BqLrFEcWjYRmt0Ls
i16RVUpFjXGbu2Xsv3n/TEyvam+wNwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLiz
esUswi6ajKJs367RL/LwPtXoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DOTdEQUFFQ0Q3RTQxMUVGQUVEMDc4QTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPbDMA0GCSqGSIb3DQEBCwUA
A4IBAQCLqSWt3BgdKlla/goEDIB+TiUj0vFcoG8EK3Io72NONDTrtU5Poiwh5I8r
ebf3pimrwEOpIpNBm3e8dmDgZ4M9LANAZDdVwUGeg2+OL7xQN6KgxtO1RJgItNB5
phEak9fqdwJbXKhBJTN7fuOchuRBmm2aRDZ8kXqDfGVCHB5ddEYvxL/dJycjoDZD
yzW7txXjevW/B8vumgrc+P5lqBL+5Q2N81KBCQSDEBgeViRPWzxl5gDS1kS5a5K2
iJpo8dMl9vnsnTGAgtF0WbtlYVv/FN4kEmYjMxEetjU4W+2I6NvcRsSGj2uuwy4M
rEVSNEeH2iXHtVgJZrATsQZumTq3
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:34:28 2025 by rpki-client