Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D96F87DCD95511EF9CD563BB762E951A.roa
File: D96F87DCD95511EF9CD563BB762E951A.roa (raw, json)
Hash identifier: 3R35b9mJ99AIolenQTGZfs7Un+8TUroEf7IRylHvJtQ=
Subject key identifier: 9F:BF:3E:69:1E:98:C6:57:DC:1E:66:81:C7:4E:8D:ED:3E:87:3A:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010EA1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D96F87DCD95511EF9CD563BB762E951A.roa
Signing time: Thu 23 Jan 2025 06:47:01 +0000
ROA not before: Thu 23 Jan 2025 06:46:58 +0000
ROA not after: Sat 15 Mar 2025 06:46:58 +0000
asID: 138915
IP address blocks: 156.244.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69281 (0x10ea1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 06:46:58 2025 GMT
Not After : Mar 15 06:46:58 2025 GMT
Subject: CN=6791e5e5-11a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:f7:42:08:13:32:8f:04:9f:aa:19:14:38:
80:9e:b9:f6:1f:37:d0:c6:16:37:7d:bd:eb:35:2c:
44:58:41:01:88:5d:9e:9a:f8:c3:28:cc:0d:72:b8:
5e:7c:dc:1a:9c:53:cd:70:a6:77:d2:ea:c4:0e:61:
88:78:21:67:e2:6b:4a:d3:15:4e:d3:d8:1e:c5:ff:
bf:9f:3e:f4:2f:04:fa:02:9b:83:a0:48:d5:75:1d:
49:4e:90:80:cf:46:07:4c:cd:de:8d:f7:df:7d:2a:
0a:1f:05:c7:16:7a:9c:82:59:2b:13:58:d6:6e:ee:
3c:cc:d6:55:7c:c0:2f:ef:f5:02:fb:7e:4d:9d:98:
8a:ad:17:95:ef:22:7c:15:7f:a0:be:88:3d:2e:f0:
b4:c5:dd:dc:7c:60:9d:37:48:b0:b3:ae:f4:7f:98:
d0:4a:02:a7:f5:48:1a:e4:6a:b3:52:39:a2:63:ef:
51:9d:b6:cf:36:88:66:7a:37:af:97:e5:aa:89:02:
5a:9d:07:50:a3:1a:fd:8a:6d:f6:82:69:64:c0:98:
4c:15:68:7f:35:d6:d0:7c:83:2a:cb:f7:8f:d6:55:
f0:96:27:f4:52:96:6a:0c:bb:b4:42:f0:50:73:2e:
c7:89:37:df:da:47:eb:cc:28:31:95:5b:be:85:9a:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:3E:69:1E:98:C6:57:DC:1E:66:81:C7:4E:8D:ED:3E:87:3A:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D96F87DCD95511EF9CD563BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.35.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:50:21:20:3e:61:56:6c:8f:99:3a:1b:72:c0:5a:75:a4:45:
d2:d2:ac:63:e0:52:7e:e3:be:a7:c7:18:98:04:63:76:ad:ed:
17:ca:7d:fd:1b:05:3b:d1:a1:3c:8f:2c:ca:4f:1c:c0:d1:ae:
fb:38:66:98:f1:4a:84:b7:4d:79:dd:ef:25:ac:4c:fd:4c:47:
75:3a:6a:80:4c:d1:8b:29:71:2a:02:14:d1:d2:c9:2c:6b:a0:
98:c9:e3:47:1a:70:64:76:4d:cc:ae:a4:a5:a4:cd:58:0e:8e:
3f:1b:bd:17:f5:fe:58:4e:74:62:14:b9:a3:3c:64:6c:c7:b7:
e8:ae:77:31:68:d6:7e:7c:26:d7:9e:7e:4f:ff:38:4b:01:ec:
9d:74:9e:f3:f7:e4:c6:19:75:3c:70:76:07:3a:32:3a:0a:5e:
34:14:bc:06:fc:ac:f8:5f:95:7b:36:4e:c3:08:a4:0b:f3:70:
f3:c1:2f:1f:38:eb:b8:ba:ed:66:34:5d:17:28:c9:e3:76:b6:
b4:eb:3b:d9:b3:93:57:bd:96:b5:3f:80:22:7f:56:ed:e5:52:
2a:a3:59:ca:03:fe:3c:b7:72:8d:e8:c6:5d:80:fc:33:09:53:
fd:87:72:e9:8d:07:9e:c2:03:9a:34:ce:29:3a:02:17:b0:67:
18:a8:20:cb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ6hMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIzMDY0NjU4WhcNMjUwMzE1MDY0NjU4WjAYMRYw
FAYDVQQDEw02NzkxZTVlNS0xMWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs9L3QggTMo8En6oZFDiAnrn2HzfQxhY3fb3rNSxEWEEBiF2emvjDKMwN
crhefNwanFPNcKZ30urEDmGIeCFn4mtK0xVO09gexf+/nz70LwT6ApuDoEjVdR1J
TpCAz0YHTM3ejffffSoKHwXHFnqcglkrE1jWbu48zNZVfMAv7/UC+35NnZiKrReV
7yJ8FX+gvog9LvC0xd3cfGCdN0iws670f5jQSgKn9Uga5GqzUjmiY+9RnbbPNohm
ejevl+WqiQJanQdQoxr9im32gmlkwJhMFWh/NdbQfIMqy/eP1lXwlif0UpZqDLu0
QvBQcy7HiTff2kfrzCgxlVu+hZp1VwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ+/
PmkemMZX3B5mgcdOje0+hzpSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EOTZGODdEQ0Q5NTUxMUVGOUNENTYzQkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQjMA0GCSqGSIb3DQEBCwUA
A4IBAQA9UCEgPmFWbI+ZOhtywFp1pEXS0qxj4FJ+476nxxiYBGN2re0Xyn39GwU7
0aE8jyzKTxzA0a77OGaY8UqEt0153e8lrEz9TEd1OmqATNGLKXEqAhTR0sksa6CY
yeNHGnBkdk3MrqSlpM1YDo4/G70X9f5YTnRiFLmjPGRsx7forncxaNZ+fCbXnn5P
/zhLAeyddJ7z9+TGGXU8cHYHOjI6Cl40FLwG/Kz4X5V7Nk7DCKQL83DzwS8fOOu4
uu1mNF0XKMnjdra06zvZs5NXvZa1P4Aif1bt5VIqo1nKA/48t3KN6MZdgPwzCVP9
h3LpjQeewgOaNM4pOgIXsGcYqCDL
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:19:13 2025 by rpki-client