Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCC50954D51111EFAD463D9F762E951A.roa
File: DCC50954D51111EFAD463D9F762E951A.roa (raw, json)
Hash identifier: lx5ZMSYhU5lv4H5JGD+t5oAgFNTQjwS/LxuBhm6r01c=
Subject key identifier: 71:4D:3D:77:82:68:DF:4E:C2:CF:AD:A4:D0:8D:9B:45:7F:DA:5D:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCC50954D51111EFAD463D9F762E951A.roa
Signing time: Fri 17 Jan 2025 20:30:17 +0000
ROA not before: Fri 17 Jan 2025 20:30:13 +0000
ROA not after: Sat 22 Feb 2025 20:30:13 +0000
asID: 139646
IP address blocks: 156.246.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68258 (0x10aa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 20:30:13 2025 GMT
Not After : Feb 22 20:30:13 2025 GMT
Subject: CN=678abdd9-580c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:5a:33:44:9f:45:20:91:17:b1:66:1c:e6:
b8:24:62:56:c8:7c:a0:a6:43:f3:d6:07:a5:8f:8c:
de:5a:eb:b6:b4:cc:d9:30:3c:90:bc:d8:2d:d1:be:
3b:3b:96:e8:1b:97:10:54:18:4e:22:3b:96:78:b1:
09:87:01:b1:2c:e2:b8:33:fd:13:a2:49:20:c5:1e:
10:0d:9b:84:d7:b7:1e:52:ec:81:d8:2b:66:8a:ab:
6a:c1:96:03:5f:94:a2:95:1c:d2:c9:1a:eb:4d:93:
c0:01:4d:58:30:20:22:aa:7e:51:0a:bc:38:72:19:
0b:aa:50:5e:73:a2:d9:ec:7b:2f:c8:48:91:8f:36:
92:38:fe:23:45:35:55:07:be:cc:b9:24:64:bb:c8:
d8:c7:03:c6:5d:9a:7f:2e:2c:d2:16:9e:a3:d6:41:
d5:17:95:fa:4e:3a:1b:17:08:7c:34:e8:af:32:03:
4a:ea:cf:1a:af:3e:42:cb:88:34:cc:15:64:a8:af:
d6:8c:5e:af:fb:05:b3:4a:38:d6:5f:88:1c:a4:45:
24:7d:16:97:8f:a6:6b:79:e2:35:f7:86:ac:b0:50:
70:78:c0:3a:7d:89:b6:7f:7d:ee:9b:c0:9a:a5:d0:
ad:c6:c0:5b:a0:46:13:f3:6d:95:9e:85:32:9e:cc:
68:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4D:3D:77:82:68:DF:4E:C2:CF:AD:A4:D0:8D:9B:45:7F:DA:5D:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCC50954D51111EFAD463D9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.0.0/20
Signature Algorithm: sha256WithRSAEncryption
45:21:3b:28:d8:2d:2f:33:ab:9c:35:59:7e:b9:f8:1d:a8:a5:
af:4f:8f:46:89:b7:64:3f:34:3c:e4:2a:9f:4e:84:45:be:d4:
51:dc:59:12:73:33:bf:9c:8f:d8:44:23:7e:59:43:0a:1d:24:
77:b0:6d:2c:5d:bf:fa:b0:18:ab:a6:d2:e5:21:91:05:84:b6:
e5:54:54:61:a1:f9:cc:81:92:5d:1d:a6:de:e2:df:07:03:dc:
67:ae:66:0a:fb:88:64:41:5c:e5:bf:75:c7:22:90:95:57:50:
59:fa:41:7e:2a:d7:61:64:91:a6:c0:65:90:37:db:77:15:20:
f9:f5:2e:d4:40:6e:a6:48:33:62:8e:b2:94:2c:a0:cf:e0:25:
58:ee:e1:ed:b9:41:2e:67:60:8f:6d:28:d3:bf:93:03:b4:df:
4a:c0:b8:b3:c7:b1:c4:bc:61:1f:b1:e1:fe:1b:8c:cb:21:b7:
e2:5f:8c:48:47:9a:af:ee:ab:c8:5f:28:8c:df:6d:e2:30:7d:
10:51:64:4e:37:28:15:a6:fb:05:9e:32:62:7f:bb:aa:e3:6b:
2a:cf:80:b1:e6:9e:bd:73:c5:9d:5e:cf:27:78:34:67:e5:44:
d9:eb:12:33:ca:c2:e5:f5:9b:43:be:40:58:30:6d:ac:64:43:
60:35:6e:3e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQqiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MjAzMDEzWhcNMjUwMjIyMjAzMDEzWjAYMRYw
FAYDVQQDEw02NzhhYmRkOS01ODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsnZaM0SfRSCRF7FmHOa4JGJWyHygpkPz1gelj4zeWuu2tMzZMDyQvNgt
0b47O5boG5cQVBhOIjuWeLEJhwGxLOK4M/0TokkgxR4QDZuE17ceUuyB2Ctmiqtq
wZYDX5SilRzSyRrrTZPAAU1YMCAiqn5RCrw4chkLqlBec6LZ7HsvyEiRjzaSOP4j
RTVVB77MuSRku8jYxwPGXZp/LizSFp6j1kHVF5X6TjobFwh8NOivMgNK6s8arz5C
y4g0zBVkqK/WjF6v+wWzSjjWX4gcpEUkfRaXj6ZreeI194assFBweMA6fYm2f33u
m8CapdCtxsBboEYT822VnoUynsxolQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHFN
PXeCaN9Ows+tpNCNm0V/2l0yMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQ0M1MDk1NEQ1MTExMUVGQUQ0NjNEOUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnPYAMA0GCSqGSIb3DQEBCwUA
A4IBAQBFITso2C0vM6ucNVl+ufgdqKWvT49GibdkPzQ85CqfToRFvtRR3FkSczO/
nI/YRCN+WUMKHSR3sG0sXb/6sBirptLlIZEFhLblVFRhofnMgZJdHabe4t8HA9xn
rmYK+4hkQVzlv3XHIpCVV1BZ+kF+KtdhZJGmwGWQN9t3FSD59S7UQG6mSDNijrKU
LKDP4CVY7uHtuUEuZ2CPbSjTv5MDtN9KwLizx7HEvGEfseH+G4zLIbfiX4xIR5qv
7qvIXyiM323iMH0QUWRONygVpvsFnjJif7uq42sqz4Cx5p69c8WdXs8neDRn5UTZ
6xIzysLl9ZtDvkBYMG2sZENgNW4+
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:06:15 2025 by rpki-client