Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EED96E7ADB1D11EF83B68846762E951A.roa
File: EED96E7ADB1D11EF83B68846762E951A.roa (raw, json)
Hash identifier: CUSMxrk0e0fnXQ6So88UUZhsFXmAnJhx0MuC2/s9vQE=
Subject key identifier: 57:87:28:52:05:B9:FF:F7:9B:12:91:6E:3E:ED:59:13:0C:F1:A9:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01126B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EED96E7ADB1D11EF83B68846762E951A.roa
Signing time: Sat 25 Jan 2025 13:11:48 +0000
ROA not before: Sat 25 Jan 2025 13:11:44 +0000
ROA not after: Sat 01 Feb 2025 13:11:44 +0000
asID: 62468
IP address blocks: 156.245.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70251 (0x1126b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 13:11:44 2025 GMT
Not After : Feb 1 13:11:44 2025 GMT
Subject: CN=6794e314-dedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:d5:93:83:46:22:0b:b2:f6:7f:1c:a2:f5:
c5:9c:d4:82:fd:9e:85:01:6a:25:2a:3d:6b:9b:82:
cc:2f:79:84:97:01:8a:04:dc:c6:2b:ca:b6:37:09:
3b:ce:33:5c:ed:08:47:84:05:d3:bc:77:1b:22:eb:
51:b4:fb:1e:82:5b:a2:e2:51:10:b5:ab:45:85:60:
fb:a4:cd:56:20:58:49:16:fe:88:3a:42:e5:f8:ae:
42:44:85:06:fe:0e:05:52:a1:f6:6d:ad:a4:e4:b2:
82:46:69:c4:1f:b2:45:2a:68:68:f4:89:fc:d2:de:
37:f7:e5:d9:06:48:72:58:da:06:0b:5e:b0:ea:c3:
24:ef:b6:f5:9a:cf:cb:4b:fc:1a:04:2f:6a:2e:d1:
23:7e:4b:16:f7:e5:0a:ec:77:46:8a:d4:ec:07:cd:
38:84:08:79:f2:76:da:97:df:22:62:35:5a:27:8a:
cc:06:9d:ca:55:e8:ed:8c:97:45:28:02:88:34:f5:
53:a5:da:dd:cc:fb:c9:cd:b3:cd:6b:31:6e:8d:ec:
0f:ab:9b:f5:d3:da:e0:ab:5b:75:89:36:0d:33:e9:
a5:5a:d2:41:4c:b7:d0:90:7b:2c:bd:dd:1f:b0:3c:
66:24:83:12:db:31:3d:73:bf:7f:2b:7d:46:40:d8:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:87:28:52:05:B9:FF:F7:9B:12:91:6E:3E:ED:59:13:0C:F1:A9:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EED96E7ADB1D11EF83B68846762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:03:53:95:54:d9:77:7c:54:56:5a:a9:49:f9:86:58:e3:7e:
44:22:6d:1a:3f:71:24:cc:8d:cb:b2:36:60:72:64:46:78:82:
c4:52:e2:6b:29:99:d4:cf:64:07:d0:4e:26:11:22:51:e1:8a:
0c:c4:d3:22:5c:06:16:45:b4:14:ac:6f:64:8b:a7:11:0f:c6:
d5:4c:76:32:72:13:85:12:b4:62:ce:8e:17:91:b2:1c:5c:20:
b0:c1:c4:ea:e3:ab:35:e8:eb:cd:6f:81:b0:78:e3:ce:01:59:
57:c2:13:3d:0d:50:47:18:88:d7:9d:76:e8:4e:7a:59:32:69:
85:d9:ee:d0:e8:88:33:4a:91:3d:8c:0f:0a:a6:09:13:45:21:
42:ac:f6:fe:be:b3:c2:4b:4c:32:31:b1:fc:75:9f:19:3b:81:
a3:bb:8e:7b:b3:f2:ef:37:bb:6e:99:81:ef:54:2e:78:23:35:
2b:1e:3b:76:aa:df:42:78:e6:3e:b9:30:fe:31:e5:16:9a:8d:
a0:7d:05:3f:2e:f3:65:d9:1d:a2:8d:e9:72:dc:0c:fa:a7:0c:
c1:a3:d1:36:e1:c3:e6:f3:92:3f:16:65:8c:6e:b8:90:93:62:
9b:54:3c:2d:22:33:83:7a:be:84:f0:27:58:c1:3b:92:52:1f:
68:89:da:69
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARJrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTMxMTQ0WhcNMjUwMjAxMTMxMTQ0WjAYMRYw
FAYDVQQDEw02Nzk0ZTMxNC1kZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzVvVk4NGIguy9n8covXFnNSC/Z6FAWolKj1rm4LML3mElwGKBNzGK8q2
Nwk7zjNc7QhHhAXTvHcbIutRtPseglui4lEQtatFhWD7pM1WIFhJFv6IOkLl+K5C
RIUG/g4FUqH2ba2k5LKCRmnEH7JFKmho9In80t439+XZBkhyWNoGC16w6sMk77b1
ms/LS/waBC9qLtEjfksW9+UK7HdGitTsB804hAh58nbal98iYjVaJ4rMBp3KVejt
jJdFKAKINPVTpdrdzPvJzbPNazFujewPq5v109rgq1t1iTYNM+mlWtJBTLfQkHss
vd0fsDxmJIMS2zE9c79/K31GQNhNWQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFeH
KFIFuf/3mxKRbj7tWRMM8almMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRUQ5NkU3QURCMUQxMUVGODNCNjg4NDY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnPWAMA0GCSqGSIb3DQEBCwUA
A4IBAQC2A1OVVNl3fFRWWqlJ+YZY435EIm0aP3EkzI3LsjZgcmRGeILEUuJrKZnU
z2QH0E4mESJR4YoMxNMiXAYWRbQUrG9ki6cRD8bVTHYychOFErRizo4XkbIcXCCw
wcTq46s16OvNb4GweOPOAVlXwhM9DVBHGIjXnXboTnpZMmmF2e7Q6IgzSpE9jA8K
pgkTRSFCrPb+vrPCS0wyMbH8dZ8ZO4Gju457s/LvN7tumYHvVC54IzUrHjt2qt9C
eOY+uTD+MeUWmo2gfQU/LvNl2R2ijely3Az6pwzBo9E24cPm85I/FmWMbriQk2Kb
VDwtIjODer6E8CdYwTuSUh9oidpp
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:21:00 2025 by rpki-client