Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51DA2EB4F2D011EF84966170762E951A.roa
File: 51DA2EB4F2D011EF84966170762E951A.roa (raw, json)
Hash identifier: Hox5Loqq+vsX/JGJfGWsVuOdKJQPIS1qqGQF5D94SP0=
Subject key identifier: 57:E0:4C:66:B5:BC:CC:FF:A2:55:64:C1:33:4D:D3:DA:E0:6B:66:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012CA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51DA2EB4F2D011EF84966170762E951A.roa
Signing time: Mon 24 Feb 2025 16:56:41 +0000
ROA not before: Mon 24 Feb 2025 16:56:38 +0000
ROA not after: Fri 04 Apr 2025 16:56:38 +0000
asID: 21859
IP address blocks: 156.225.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76963 (0x12ca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 16:56:38 2025 GMT
Not After : Apr 4 16:56:38 2025 GMT
Subject: CN=67bca4c9-f02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:3c:f6:86:32:73:90:f5:85:26:ce:5a:47:
28:34:e1:6c:f7:79:fb:81:5d:92:c1:59:85:56:b0:
eb:69:90:76:fc:0f:95:8a:cc:24:d0:f0:05:ce:ac:
08:7c:8a:e6:81:34:74:6a:0f:e9:e7:7c:5b:fa:27:
60:2a:d7:3f:45:a6:20:1b:f8:0f:37:eb:4c:0a:f4:
15:ad:93:93:f1:ef:7e:16:64:97:b0:36:af:63:a6:
a0:50:40:c8:75:c9:5e:15:d3:a2:08:2a:1f:1f:c5:
ae:0a:5a:78:0f:cd:a0:87:5e:bf:dc:44:5f:27:a5:
e2:53:d8:26:a7:e9:b1:58:cc:6c:41:87:4b:20:9a:
69:c8:5b:f1:1d:58:1f:c1:6a:ff:92:5f:80:0b:4b:
e7:af:b9:a3:09:53:99:37:93:08:85:41:8e:98:02:
b6:e8:90:4d:f3:b4:1d:8d:27:59:4f:22:9d:a9:4b:
cc:c1:89:90:3d:88:16:25:0e:b4:93:c8:93:92:18:
6f:34:91:8c:42:02:08:b2:6f:33:34:b3:ae:4a:fb:
e7:7e:54:ec:4f:a0:d8:16:df:ac:cf:ac:ef:96:fb:
0a:b4:08:0f:8a:cf:f7:7c:f9:d1:e7:bf:5a:8b:93:
28:23:00:c4:c4:41:c9:6a:ec:c1:01:86:94:33:13:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E0:4C:66:B5:BC:CC:FF:A2:55:64:C1:33:4D:D3:DA:E0:6B:66:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51DA2EB4F2D011EF84966170762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.11.0/24
Signature Algorithm: sha256WithRSAEncryption
42:84:8f:70:bc:c2:10:21:f2:9f:a9:c9:3c:64:f1:a4:dd:7e:
a5:b7:9b:6b:58:9a:14:ef:f8:9e:2e:97:ee:7f:80:6e:c7:8b:
c9:b0:81:e2:68:e2:8a:61:68:2f:a8:03:f3:68:8e:c5:ac:54:
fe:e0:d7:ca:e9:c0:10:3a:f8:fa:0e:ec:98:53:97:6c:76:8d:
5f:de:07:d5:63:d3:14:c8:e5:7e:a7:39:65:87:72:c5:04:21:
41:1c:aa:2a:f6:e6:e4:8c:ce:c1:ce:2d:56:77:a1:c2:9b:3b:
84:24:96:d1:b4:e3:af:38:78:d6:6e:4b:b1:91:e6:7e:cc:26:
a0:22:d1:63:76:e6:26:39:fc:cc:53:c6:ec:b7:c1:82:58:8f:
32:13:4b:cd:22:f3:2d:82:21:2b:02:53:27:82:d7:bd:27:ab:
dd:3d:a6:74:25:85:62:8b:44:d9:88:91:e7:5c:99:fe:f9:ca:
67:55:14:6d:e9:f8:f7:bd:55:c2:6f:77:e9:17:56:cb:3d:d7:
08:51:ea:f2:fd:6c:81:05:80:53:eb:b4:e4:08:66:a6:d1:50:
83:79:34:47:87:12:cd:ab:28:d6:ca:bf:af:95:1f:61:4f:69:
01:91:8c:5b:fa:d7:7b:39:a3:2d:17:64:de:db:f2:3c:92:ac:
ce:92:0a:3f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASyjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI0MTY1NjM4WhcNMjUwNDA0MTY1NjM4WjAYMRYw
FAYDVQQDEw02N2JjYTRjOS1mMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs3k89oYyc5D1hSbOWkcoNOFs93n7gV2SwVmFVrDraZB2/A+Viswk0PAF
zqwIfIrmgTR0ag/p53xb+idgKtc/RaYgG/gPN+tMCvQVrZOT8e9+FmSXsDavY6ag
UEDIdcleFdOiCCofH8WuClp4D82gh16/3ERfJ6XiU9gmp+mxWMxsQYdLIJppyFvx
HVgfwWr/kl+AC0vnr7mjCVOZN5MIhUGOmAK26JBN87QdjSdZTyKdqUvMwYmQPYgW
JQ60k8iTkhhvNJGMQgIIsm8zNLOuSvvnflTsT6DYFt+sz6zvlvsKtAgPis/3fPnR
579ai5MoIwDExEHJauzBAYaUMxMYXwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFfg
TGa1vMz/olVkwTNN09rga2YeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MURBMkVCNEYyRDAxMUVGODQ5NjYxNzA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOELMA0GCSqGSIb3DQEBCwUA
A4IBAQBChI9wvMIQIfKfqck8ZPGk3X6lt5trWJoU7/ieLpfuf4Bux4vJsIHiaOKK
YWgvqAPzaI7FrFT+4NfK6cAQOvj6DuyYU5dsdo1f3gfVY9MUyOV+pzllh3LFBCFB
HKoq9ubkjM7Bzi1Wd6HCmzuEJJbRtOOvOHjWbkuxkeZ+zCagItFjduYmOfzMU8bs
t8GCWI8yE0vNIvMtgiErAlMngte9J6vdPaZ0JYVii0TZiJHnXJn++cpnVRRt6fj3
vVXCb3fpF1bLPdcIUery/WyBBYBT67TkCGam0VCDeTRHhxLNqyjWyr+vlR9hT2kB
kYxb+td7OaMtF2Te2/I8kqzOkgo/
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:32 2025 by rpki-client