Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35938AE4F61211EFA9BEC94D762E951A.roa
File: 35938AE4F61211EFA9BEC94D762E951A.roa (raw, json)
Hash identifier: ZlDHgPlB2AIVHzCvvgu3BNf3Ppdn4jMXrA7pqAIQXxo=
Subject key identifier: 79:CB:2D:CB:73:FA:E3:9F:1C:4F:0A:1B:75:1B:DE:64:F0:2A:0C:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35938AE4F61211EFA9BEC94D762E951A.roa
Signing time: Fri 28 Feb 2025 20:25:54 +0000
ROA not before: Fri 28 Feb 2025 20:25:50 +0000
ROA not after: Sun 30 Mar 2025 20:25:50 +0000
asID: 203020
IP address blocks: 156.253.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81724 (0x13f3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 20:25:50 2025 GMT
Not After : Mar 30 20:25:50 2025 GMT
Subject: CN=67c21bd2-7b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:11:59:35:e1:9f:35:0f:93:a3:0b:57:f0:
40:1c:84:9c:68:37:6c:93:b6:89:50:fd:19:46:8d:
45:f9:d2:25:19:9e:4d:0f:7b:db:f4:c5:7c:35:a0:
e9:8c:f6:7e:85:8b:a2:05:65:14:79:5f:03:6f:7d:
4c:1c:29:79:87:c6:c1:a1:be:28:cb:93:71:d5:2d:
d6:4a:00:de:d9:a5:5d:e0:06:7f:7b:65:24:d2:4f:
f7:d1:8a:e7:c7:aa:2b:84:a2:08:5b:8e:4e:6f:ae:
bc:4b:33:b0:a3:93:b8:2c:10:1a:02:d9:ec:97:de:
79:0d:1e:a3:17:9a:be:a6:8e:7b:30:60:25:b1:57:
7a:b8:32:90:11:80:20:14:83:1b:47:48:74:5c:86:
5f:83:c7:cb:25:62:92:2e:a7:59:ad:77:c1:a8:16:
9e:24:dc:93:d3:e7:0b:55:68:9a:67:90:f2:e1:94:
c5:ac:37:7d:2a:57:89:66:67:bd:fc:d1:9d:c8:cb:
31:dc:d2:37:7e:e5:8f:77:e4:da:8f:59:e3:e2:f3:
86:03:f8:35:d4:90:b2:d9:74:97:07:a8:f1:a7:d1:
a4:7a:73:fc:e8:c6:46:0c:97:87:f1:48:13:90:c3:
a4:8d:05:db:ae:19:21:ab:cb:9a:1e:61:1a:07:fa:
48:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CB:2D:CB:73:FA:E3:9F:1C:4F:0A:1B:75:1B:DE:64:F0:2A:0C:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35938AE4F61211EFA9BEC94D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.196.0/23
Signature Algorithm: sha256WithRSAEncryption
35:4f:c0:30:08:f3:4b:88:a9:12:2e:84:44:19:c8:7a:42:9e:
dd:6a:e7:b5:b0:fb:e2:8d:7c:29:de:b4:f2:90:97:e2:bf:f3:
8b:c4:3c:d5:58:a9:f6:f8:a3:9e:21:78:fc:dd:7e:e5:d4:53:
fd:1c:36:a3:d0:7f:a4:02:93:47:18:7a:6d:de:11:7d:fb:cd:
bb:33:bf:2e:b6:32:6a:35:48:6b:5c:3b:8d:86:12:d0:41:20:
79:fb:34:05:e1:b7:63:45:1e:15:57:50:f5:7f:35:96:8a:9a:
f3:ce:5a:89:a4:90:40:b8:15:f7:d4:23:02:15:ac:b1:07:36:
33:93:59:1f:6e:70:16:7f:d2:e4:b4:05:5b:26:55:dd:b5:dd:
ae:32:32:0e:23:87:72:60:ac:e2:ee:b6:3f:48:cc:5f:77:cc:
95:6d:13:36:d6:e7:84:88:bc:44:d8:b8:a1:6c:38:f5:46:20:
50:64:82:e6:ff:d8:7e:45:ab:86:5a:77:72:76:bf:46:56:48:
41:14:a0:12:6c:b1:b5:7a:a6:c2:93:5e:9f:1b:d7:ea:f0:21:
12:d2:b9:3a:7e:df:57:fa:f0:6d:39:4e:0c:ab:4d:a7:d7:cb:
85:2f:7d:13:83:6a:76:b5:66:c8:ea:b7:1c:f3:50:dc:25:1f:
b5:2a:3b:d0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAT88MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI4MjAyNTUwWhcNMjUwMzMwMjAyNTUwWjAYMRYw
FAYDVQQDEw02N2MyMWJkMi03Yjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0P0RWTXhnzUPk6MLV/BAHIScaDdsk7aJUP0ZRo1F+dIlGZ5ND3vb9MV8
NaDpjPZ+hYuiBWUUeV8Db31MHCl5h8bBob4oy5Nx1S3WSgDe2aVd4AZ/e2Uk0k/3
0Yrnx6orhKIIW45Ob668SzOwo5O4LBAaAtnsl955DR6jF5q+po57MGAlsVd6uDKQ
EYAgFIMbR0h0XIZfg8fLJWKSLqdZrXfBqBaeJNyT0+cLVWiaZ5Dy4ZTFrDd9KleJ
Zme9/NGdyMsx3NI3fuWPd+Taj1nj4vOGA/g11JCy2XSXB6jxp9GkenP86MZGDJeH
8UgTkMOkjQXbrhkhq8uaHmEaB/pIywIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHnL
Lctz+uOfHE8KG3Ub3mTwKgwtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNTkzOEFFNEY2MTIxMUVGQTlCRUM5NEQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnP3EMA0GCSqGSIb3DQEBCwUA
A4IBAQA1T8AwCPNLiKkSLoREGch6Qp7daue1sPvijXwp3rTykJfiv/OLxDzVWKn2
+KOeIXj83X7l1FP9HDaj0H+kApNHGHpt3hF9+827M78utjJqNUhrXDuNhhLQQSB5
+zQF4bdjRR4VV1D1fzWWiprzzlqJpJBAuBX31CMCFayxBzYzk1kfbnAWf9LktAVb
JlXdtd2uMjIOI4dyYKzi7rY/SMxfd8yVbRM21ueEiLxE2LihbDj1RiBQZILm/9h+
RauGWndydr9GVkhBFKASbLG1eqbCk16fG9fq8CES0rk6ft9X+vBtOU4Mq02n18uF
L30Tg2p2tWbI6rcc81DcJR+1KjvQ
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:09:25 2025 by rpki-client