Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBEF24ECDA2111EF9E38FA9A762E951A.roa
File: CBEF24ECDA2111EF9E38FA9A762E951A.roa (raw, json)
Hash identifier: 6SlHiR+0Wpjpw2QD+4JwuvGG0gOA1jGX6vka7OLSxoc=
Subject key identifier: F5:FD:8F:60:3C:44:AB:2F:93:4C:51:0F:9A:27:79:5E:5F:FD:BA:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBEF24ECDA2111EF9E38FA9A762E951A.roa
Signing time: Fri 24 Jan 2025 07:06:56 +0000
ROA not before: Fri 24 Jan 2025 07:06:52 +0000
ROA not after: Sat 01 Mar 2025 07:06:52 +0000
asID: 44509
IP address blocks: 156.231.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69403 (0x10f1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 07:06:52 2025 GMT
Not After : Mar 1 07:06:52 2025 GMT
Subject: CN=67933c10-31ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:46:56:eb:5c:8a:d7:d3:f3:27:e7:c9:a9:8c:
0d:f0:79:97:93:fb:4b:86:57:01:c9:7e:9c:78:36:
5f:52:ed:84:8c:6c:a5:46:fd:a4:f1:fc:61:c5:c6:
87:a0:ee:08:68:b4:e5:fa:b5:1d:67:25:a5:67:2f:
d0:30:65:b6:7c:4c:d7:a0:41:a5:cc:0b:d5:d1:db:
2b:fd:99:90:56:35:18:20:52:6b:c5:00:6c:38:11:
99:bd:80:3f:8a:79:3c:21:f8:47:16:6a:30:a6:7e:
d5:60:31:9e:87:de:c9:17:14:c6:cd:9a:3b:4f:b9:
9f:ec:fa:44:c7:19:7e:ed:2f:67:42:aa:bd:60:3f:
14:a3:c8:31:8c:cb:6e:30:91:79:b2:3c:15:9a:89:
29:b0:8c:61:1f:49:fb:78:8b:73:01:f3:34:b9:5b:
50:d0:8f:99:0e:8a:a7:6f:94:29:47:71:f0:89:c8:
60:e2:b7:e4:98:48:90:a0:a1:8f:59:fc:be:51:34:
9f:b7:ee:78:8a:48:0b:90:02:af:a3:b5:16:47:1f:
f7:6e:9b:44:4a:60:af:1b:1e:29:dc:af:7a:1c:6e:
ac:68:81:e4:68:34:64:3f:95:dd:90:fc:70:4d:f6:
3a:f1:1e:90:80:30:61:91:e7:cc:93:34:53:13:08:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FD:8F:60:3C:44:AB:2F:93:4C:51:0F:9A:27:79:5E:5F:FD:BA:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBEF24ECDA2111EF9E38FA9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ad:e8:f8:da:4c:51:50:38:ab:f8:6c:da:d0:7d:4f:aa:66:
97:9f:06:10:97:9c:d1:e2:fb:aa:0d:69:43:86:25:ff:e8:70:
7e:f5:ed:29:60:da:f9:0e:0d:96:e5:db:39:af:c2:fa:8c:d3:
a9:9b:c0:08:ba:a5:4f:00:dd:c5:85:49:26:58:6f:67:2e:ea:
99:d4:9e:5c:ed:7a:ce:2c:8f:5c:17:52:02:e5:20:ba:60:f8:
29:08:87:54:b9:1b:b0:e1:3d:ce:3f:b7:86:8b:d9:b5:a2:4c:
09:6c:fa:90:5a:02:5f:08:d5:2c:26:76:b7:ee:a2:18:89:8c:
0b:50:c2:e6:16:c0:70:d2:a1:cf:25:85:c8:f5:50:85:5e:15:
aa:85:c3:84:56:42:f9:df:a8:8b:b1:30:eb:d5:5e:d0:2f:9f:
5a:70:bc:59:8b:2d:db:59:78:2c:90:bd:6b:ca:fc:e3:9b:fd:
ab:cc:da:34:b9:fe:e0:b6:00:2b:44:2e:4e:61:11:3c:48:44:
17:64:0d:58:74:30:b5:73:03:d3:94:83:2d:e3:56:f3:67:29:
e3:20:aa:45:66:91:af:64:bc:2f:04:dc:68:1f:e8:30:87:50:
64:c2:22:06:05:fb:09:b9:f4:10:5e:0d:52:ac:b1:5c:9e:a1:
5d:84:19:04
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ8bMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MDcwNjUyWhcNMjUwMzAxMDcwNjUyWjAYMRYw
FAYDVQQDEw02NzkzM2MxMC0zMWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAk0ZW61yK19PzJ+fJqYwN8HmXk/tLhlcByX6ceDZfUu2EjGylRv2k8fxh
xcaHoO4IaLTl+rUdZyWlZy/QMGW2fEzXoEGlzAvV0dsr/ZmQVjUYIFJrxQBsOBGZ
vYA/ink8IfhHFmowpn7VYDGeh97JFxTGzZo7T7mf7PpExxl+7S9nQqq9YD8Uo8gx
jMtuMJF5sjwVmokpsIxhH0n7eItzAfM0uVtQ0I+ZDoqnb5QpR3Hwichg4rfkmEiQ
oKGPWfy+UTSft+54ikgLkAKvo7UWRx/3bptESmCvGx4p3K96HG6saIHkaDRkP5Xd
kPxwTfY68R6QgDBhkefMkzRTEwjAVQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPX9
j2A8RKsvk0xRD5oneV5f/bqsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQkVGMjRFQ0RBMjExMUVGOUUzOEZBOUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOdvMA0GCSqGSIb3DQEBCwUA
A4IBAQCMrej42kxRUDir+Gza0H1PqmaXnwYQl5zR4vuqDWlDhiX/6HB+9e0pYNr5
Dg2W5ds5r8L6jNOpm8AIuqVPAN3FhUkmWG9nLuqZ1J5c7XrOLI9cF1IC5SC6YPgp
CIdUuRuw4T3OP7eGi9m1okwJbPqQWgJfCNUsJna37qIYiYwLUMLmFsBw0qHPJYXI
9VCFXhWqhcOEVkL536iLsTDr1V7QL59acLxZiy3bWXgskL1ryvzjm/2rzNo0uf7g
tgArRC5OYRE8SEQXZA1YdDC1cwPTlIMt41bzZynjIKpFZpGvZLwvBNxoH+gwh1Bk
wiIGBfsJufQQXg1SrLFcnqFdhBkE
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:24 2025 by rpki-client