Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/959F391AF46911EF9BCED566762E951A.roa
File: 959F391AF46911EF9BCED566762E951A.roa (raw, json)
Hash identifier: xpDvbC0X6otI0dZKE3yb0xY1QxTDwCfOHjD9LhdFooQ=
Subject key identifier: 62:82:00:0A:FC:87:89:86:2A:30:BE:05:55:08:3C:5A:D1:E8:FB:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/959F391AF46911EF9BCED566762E951A.roa
Signing time: Wed 26 Feb 2025 17:46:19 +0000
ROA not before: Wed 26 Feb 2025 17:46:15 +0000
ROA not after: Thu 19 Feb 2026 17:46:15 +0000
asID: 984
IP address blocks: 156.245.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79319 (0x135d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:46:15 2025 GMT
Not After : Feb 19 17:46:15 2026 GMT
Subject: CN=67bf536b-df90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:f7:45:15:f8:50:c7:6e:34:3c:9e:06:ca:
42:bc:f0:66:1b:75:3a:42:a0:ee:d9:b1:39:c9:d7:
74:7f:cd:75:ec:ae:1e:bc:41:ec:62:f8:c0:b4:83:
e8:f4:34:ef:e8:e9:a2:4f:50:4a:b8:11:0d:9d:5e:
78:7c:ea:6d:73:0e:a7:1a:f6:27:ac:19:ec:6e:cb:
0a:f0:6c:ae:e2:3a:98:15:f5:14:6f:fb:a2:61:76:
ce:e9:b6:c8:82:6a:70:e1:dd:d4:15:4f:74:90:08:
95:82:f7:7c:f6:dc:2e:d6:79:b0:db:58:75:c5:b9:
1b:01:bb:11:44:68:c6:6e:ad:19:25:27:b2:d8:46:
89:2c:32:d9:5f:97:38:af:d5:e9:67:45:00:ef:23:
ae:3e:e9:58:e1:f4:97:c5:56:d2:3d:d2:c3:d4:b2:
47:75:9f:2e:1c:58:90:94:c0:0d:f9:41:21:28:70:
19:23:55:2d:af:a7:8a:46:5f:8d:3a:7f:6c:79:69:
98:bd:3a:59:78:2f:cf:fd:8b:77:fa:7e:ad:91:87:
2b:7a:71:40:91:0a:86:93:8a:6b:00:bb:54:51:a8:
6c:88:01:7d:7b:4b:7f:b6:04:e1:76:28:55:be:c1:
a3:9b:00:b1:df:c7:71:91:7b:40:b4:b6:c3:82:92:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:82:00:0A:FC:87:89:86:2A:30:BE:05:55:08:3C:5A:D1:E8:FB:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/959F391AF46911EF9BCED566762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.93.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4c:d6:9d:92:b3:0a:b8:86:cc:21:a8:6b:02:f5:14:e7:4d:
67:bb:66:ba:33:40:d2:ea:c0:eb:d7:67:05:72:5a:52:98:fb:
39:7c:53:9c:a9:69:0b:aa:01:b3:04:64:91:ad:ae:21:68:4b:
f2:4d:5e:6d:07:ac:b0:8c:dc:46:ff:de:28:61:6f:a7:7c:72:
ce:44:b3:e9:0a:e6:7b:83:ba:0d:27:0b:cc:20:83:23:b9:b0:
1d:40:97:a4:50:4e:a5:13:22:8b:ca:2e:58:95:c9:71:1d:0b:
db:7f:2e:29:8a:a2:5e:9a:19:79:6a:7e:e0:cc:c5:69:32:cd:
13:0e:43:de:2e:05:1b:cc:7f:0f:67:b6:2c:6c:9b:14:34:e8:
9c:93:99:f9:f3:ec:6a:30:20:97:39:d2:5e:dd:ff:c1:f3:e8:
21:b2:9f:a7:1a:29:53:9a:e5:82:4f:ad:28:d5:26:29:d3:4b:
af:5c:2d:37:e3:fb:ff:c7:f4:68:40:19:c0:74:d0:6d:83:47:
5a:5f:9b:1a:34:47:28:c1:15:7e:66:4c:ff:33:13:2b:73:8f:
76:f3:8f:9c:da:e0:da:32:f6:3e:4a:2c:19:ad:d2:7c:81:d4:
ad:f1:6f:76:e0:8c:cb:33:d9:c5:84:13:30:91:b3:6a:7b:e7:
6a:95:ad:c2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATXXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTc0NjE1WhcNMjYwMjE5MTc0NjE1WjAYMRYw
FAYDVQQDEw02N2JmNTM2Yi1kZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu1X3RRX4UMduNDyeBspCvPBmG3U6QqDu2bE5ydd0f8117K4evEHsYvjA
tIPo9DTv6OmiT1BKuBENnV54fOptcw6nGvYnrBnsbssK8Gyu4jqYFfUUb/uiYXbO
6bbIgmpw4d3UFU90kAiVgvd89twu1nmw21h1xbkbAbsRRGjGbq0ZJSey2EaJLDLZ
X5c4r9XpZ0UA7yOuPulY4fSXxVbSPdLD1LJHdZ8uHFiQlMAN+UEhKHAZI1Utr6eK
Rl+NOn9seWmYvTpZeC/P/Yt3+n6tkYcrenFAkQqGk4prALtUUahsiAF9e0t/tgTh
dihVvsGjmwCx38dxkXtAtLbDgpKGuQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGKC
AAr8h4mGKjC+BVUIPFrR6Ps3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NTlGMzkxQUY0NjkxMUVGOUJDRUQ1NjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPVdMA0GCSqGSIb3DQEBCwUA
A4IBAQA/TNadkrMKuIbMIahrAvUU501nu2a6M0DS6sDr12cFclpSmPs5fFOcqWkL
qgGzBGSRra4haEvyTV5tB6ywjNxG/94oYW+nfHLORLPpCuZ7g7oNJwvMIIMjubAd
QJekUE6lEyKLyi5YlclxHQvbfy4piqJemhl5an7gzMVpMs0TDkPeLgUbzH8PZ7Ys
bJsUNOick5n58+xqMCCXOdJe3f/B8+ghsp+nGilTmuWCT60o1SYp00uvXC034/v/
x/RoQBnAdNBtg0daX5saNEcowRV+Zkz/MxMrc49284+c2uDaMvY+SiwZrdJ8gdSt
8W924IzLM9nFhBMwkbNqe+dqla3C
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:56 2025 by rpki-client