Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4012D166F49E11EFB1B9FF4F762E951A.roa
File: 4012D166F49E11EFB1B9FF4F762E951A.roa (raw, json)
Hash identifier: lEpYW0R2Cf8G9HJWsBxhU1lMC7lsPX6mFBEgQ/ArrBs=
Subject key identifier: 76:7D:A2:AF:42:67:99:C6:61:65:D9:E8:37:CB:4B:0E:7C:A8:2B:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01384F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4012D166F49E11EFB1B9FF4F762E951A.roa
Signing time: Thu 27 Feb 2025 00:03:19 +0000
ROA not before: Thu 27 Feb 2025 00:00:15 +0000
ROA not after: Thu 19 Feb 2026 00:00:15 +0000
asID: 984
IP address blocks: 156.232.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79951 (0x1384f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:15 2025 GMT
Not After : Feb 19 00:00:15 2026 GMT
Subject: CN=67bfabc7-c5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:66:2d:d5:72:5d:32:36:19:07:07:9a:8f:
b0:68:a5:1e:43:b1:ba:6c:a3:cc:30:ad:15:20:76:
65:07:e5:20:38:34:74:d8:da:0e:47:02:91:7b:63:
e4:55:78:74:d8:c6:ea:fb:97:50:24:b9:39:1a:4d:
94:e8:bc:4b:95:c4:7a:b6:36:e5:5e:66:11:2f:3b:
59:ee:1a:8d:89:2b:05:63:76:28:ad:68:c9:a0:10:
c2:0f:f4:3c:2f:00:f0:f6:e9:d6:7a:95:0c:d3:a6:
b5:7c:f1:ea:87:f2:bc:40:4c:06:75:0e:1f:49:3f:
d6:47:f0:f7:7e:d6:88:95:08:a1:bc:ae:09:20:5a:
e4:99:71:43:d1:19:d1:1a:84:4d:2d:07:59:10:82:
74:88:8e:1e:cc:4a:d7:42:f3:08:e4:8e:00:0a:5d:
15:e8:a4:b9:8e:ab:b1:27:04:8a:40:4d:94:4c:c3:
06:51:ab:fb:9b:47:f9:6a:bd:cd:c2:b6:e7:2d:a2:
e0:76:c5:5f:7f:62:a0:bf:1c:b7:75:0e:ab:79:cd:
6d:1b:cc:90:44:f0:49:44:23:05:64:03:df:a0:aa:
17:b1:73:55:eb:64:01:1d:62:0a:91:15:d7:65:11:
19:3a:6f:9e:9c:e9:87:52:ec:e0:c2:10:72:41:0c:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7D:A2:AF:42:67:99:C6:61:65:D9:E8:37:CB:4B:0E:7C:A8:2B:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4012D166F49E11EFB1B9FF4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.55.0/24
Signature Algorithm: sha256WithRSAEncryption
63:4d:db:1d:7e:3d:95:50:7c:08:ac:99:ce:92:82:e6:94:c5:
5c:5f:c5:e4:0d:ad:5f:18:9f:47:6d:b6:29:bb:1a:bc:19:ff:
3c:bb:50:66:e1:80:1d:91:ed:ac:72:db:d0:c7:dc:dc:de:52:
49:df:91:cc:f1:6d:05:d9:62:3a:c3:a5:3d:6b:f8:56:2f:7f:
b8:f4:4d:fd:d2:6f:18:4b:b3:6e:be:ed:38:3b:73:21:c8:eb:
8c:49:c4:a7:c3:09:cd:0a:a7:65:23:1c:1d:b0:bf:4e:79:13:
ff:73:5d:5f:c7:3b:58:77:80:8e:b0:08:d5:23:1a:67:c9:45:
98:20:f2:7c:07:99:6d:f7:62:81:a9:b3:53:72:80:55:90:1a:
67:c7:7c:11:47:0a:eb:b4:55:c5:8e:a1:c4:d9:5b:3a:1a:4d:
c3:64:2a:50:12:19:69:f5:ee:a5:e6:a2:ad:5e:15:9e:13:02:
b9:c0:4c:b8:14:a3:ad:fc:f7:12:c4:ec:b7:4e:c3:25:57:a4:
fb:80:39:da:f6:8a:83:5c:f3:17:77:2d:f8:ea:a2:87:59:36:
52:80:0c:c0:91:93:d4:ea:7d:fa:a5:00:61:66:f9:de:e1:36:
d9:4c:bb:69:c5:6e:79:60:a1:b1:7d:d0:1f:da:c0:1d:e7:03:
54:04:3d:09
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAThPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI3MDAwMDE1WhcNMjYwMjE5MDAwMDE1WjAYMRYw
FAYDVQQDEw02N2JmYWJjNy1jNWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyE1mLdVyXTI2GQcHmo+waKUeQ7G6bKPMMK0VIHZlB+UgODR02NoORwKR
e2PkVXh02Mbq+5dQJLk5Gk2U6LxLlcR6tjblXmYRLztZ7hqNiSsFY3YorWjJoBDC
D/Q8LwDw9unWepUM06a1fPHqh/K8QEwGdQ4fST/WR/D3ftaIlQihvK4JIFrkmXFD
0RnRGoRNLQdZEIJ0iI4ezErXQvMI5I4ACl0V6KS5jquxJwSKQE2UTMMGUav7m0f5
ar3NwrbnLaLgdsVff2Kgvxy3dQ6rec1tG8yQRPBJRCMFZAPfoKoXsXNV62QBHWIK
kRXXZREZOm+enOmHUuzgwhByQQxCVQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHZ9
oq9CZ5nGYWXZ6DfLSw58qCuYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MDEyRDE2NkY0OUUxMUVGQjFCOUZGNEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOg3MA0GCSqGSIb3DQEBCwUA
A4IBAQBjTdsdfj2VUHwIrJnOkoLmlMVcX8XkDa1fGJ9HbbYpuxq8Gf88u1Bm4YAd
ke2sctvQx9zc3lJJ35HM8W0F2WI6w6U9a/hWL3+49E390m8YS7Nuvu04O3MhyOuM
ScSnwwnNCqdlIxwdsL9OeRP/c11fxztYd4COsAjVIxpnyUWYIPJ8B5lt92KBqbNT
coBVkBpnx3wRRwrrtFXFjqHE2Vs6Gk3DZCpQEhlp9e6l5qKtXhWeEwK5wEy4FKOt
/PcSxOy3TsMlV6T7gDna9oqDXPMXdy346qKHWTZSgAzAkZPU6n36pQBhZvne4TbZ
TLtpxW55YKGxfdAf2sAd5wNUBD0J
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:57 2025 by rpki-client