Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99E5CCBCE00211EF876F4043762E951A.roa
File: 99E5CCBCE00211EF876F4043762E951A.roa (raw, json)
Hash identifier: Ww/0DEXz4Mfu3gm/Va7T+O3mDVmd16c5gNwx+rU4esQ=
Subject key identifier: 3C:CA:E9:08:EC:66:39:5F:53:9C:3A:E5:3E:5B:A1:11:77:8E:C5:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99E5CCBCE00211EF876F4043762E951A.roa
Signing time: Fri 31 Jan 2025 18:38:45 +0000
ROA not before: Fri 31 Jan 2025 18:38:41 +0000
ROA not after: Sun 11 Jan 2026 18:38:41 +0000
asID: 399077
IP address blocks: 156.248.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71417 (0x116f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 18:38:41 2025 GMT
Not After : Jan 11 18:38:41 2026 GMT
Subject: CN=679d18b5-4e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:96:d3:37:f2:29:0f:b4:0f:a0:8f:ff:7a:
09:6f:92:9a:a6:fe:d1:d6:1a:a0:14:56:aa:f9:34:
23:98:ad:fb:92:3c:31:40:64:02:9b:37:2c:64:64:
b0:f7:ef:78:89:f7:1c:44:1a:0c:e7:63:c9:27:7d:
10:48:52:3b:04:f1:9d:e2:99:3c:5b:69:4f:93:56:
6b:53:3d:bd:12:ee:b7:f2:2b:70:2c:2a:6a:9c:f1:
3a:62:cd:01:e3:91:75:ae:2c:1e:f5:ea:bd:98:04:
3d:9c:65:a7:d1:75:e3:88:2a:b8:7f:48:00:e3:c5:
32:00:ac:06:e7:6c:18:fc:bb:e3:de:c2:8f:c1:ac:
80:2c:8d:5f:45:2c:67:8a:3a:89:6d:4a:5c:f5:0f:
e5:a2:58:9b:ef:71:4c:1a:bb:f9:0c:fb:63:1d:5a:
70:5c:64:6a:f3:3b:54:70:1d:68:77:9a:c0:08:c3:
08:15:3d:04:db:8a:ea:0e:9e:8d:61:ae:7b:df:d1:
dd:71:d6:86:ef:21:30:0d:5c:c6:b5:95:07:20:6b:
ed:13:9f:d4:c4:f0:df:85:19:f1:e1:04:eb:82:3e:
c5:93:83:87:aa:9c:fe:72:81:2e:09:43:62:89:f0:
c6:ed:2f:6c:33:00:0f:96:be:ec:de:1a:3f:f0:ba:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CA:E9:08:EC:66:39:5F:53:9C:3A:E5:3E:5B:A1:11:77:8E:C5:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99E5CCBCE00211EF876F4043762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.74.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a7:fe:24:79:c1:0d:31:7b:27:b6:f6:cc:46:bf:41:72:01:
37:60:26:0c:2d:e1:d5:1f:e1:22:ce:00:ac:59:7e:32:3d:b5:
bd:6f:1d:0d:52:ec:95:9f:52:0c:d0:b9:7b:14:7e:22:54:d8:
cc:5a:91:73:67:e8:ff:1a:b2:52:8b:a5:2a:70:20:2e:b5:b1:
29:89:be:b2:2e:99:57:15:6f:63:6a:36:03:8b:8c:5f:c5:0c:
71:c8:a8:33:f9:88:d6:0d:72:41:83:fb:63:1c:98:d3:74:c3:
24:bf:87:cf:eb:89:29:ba:08:a1:1a:0b:f5:1d:0b:78:c4:bb:
29:d7:78:5d:41:2a:90:2b:76:68:fd:cd:b1:b0:ae:ba:3d:a0:
a1:28:e2:66:1c:41:2e:dc:c3:3d:f6:b1:fa:9f:18:0e:b8:5c:
d5:ac:f8:71:23:99:bd:e8:2c:39:a1:a7:f2:b6:59:b5:44:5f:
eb:30:30:c8:dd:a2:b3:45:46:05:b6:ee:5f:13:b0:61:1c:cf:
c6:c2:5b:35:2e:91:36:ee:b0:1e:3e:a0:0a:29:a6:9f:df:e7:
fb:ee:75:ee:80:b7:b2:c1:8a:ca:f7:28:e1:18:0a:a3:b0:8d:
b7:2c:c2:48:7c:1a:41:32:73:b3:48:16:49:49:24:54:1d:9d:
a3:25:e2:16
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARb5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTMxMTgzODQxWhcNMjYwMTExMTgzODQxWjAYMRYw
FAYDVQQDEw02NzlkMThiNS00ZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2g6W0zfyKQ+0D6CP/3oJb5Kapv7R1hqgFFaq+TQjmK37kjwxQGQCmzcs
ZGSw9+94ifccRBoM52PJJ30QSFI7BPGd4pk8W2lPk1ZrUz29Eu638itwLCpqnPE6
Ys0B45F1riwe9eq9mAQ9nGWn0XXjiCq4f0gA48UyAKwG52wY/Lvj3sKPwayALI1f
RSxnijqJbUpc9Q/lolib73FMGrv5DPtjHVpwXGRq8ztUcB1od5rACMMIFT0E24rq
Dp6NYa5739HdcdaG7yEwDVzGtZUHIGvtE5/UxPDfhRnx4QTrgj7Fk4OHqpz+coEu
CUNiifDG7S9sMwAPlr7s3ho/8Lr20wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDzK
6QjsZjlfU5w65T5boRF3jsWUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85OUU1Q0NCQ0UwMDIxMUVGODc2RjQwNDM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPhKMA0GCSqGSIb3DQEBCwUA
A4IBAQALp/4kecENMXsntvbMRr9BcgE3YCYMLeHVH+EizgCsWX4yPbW9bx0NUuyV
n1IM0Ll7FH4iVNjMWpFzZ+j/GrJSi6UqcCAutbEpib6yLplXFW9jajYDi4xfxQxx
yKgz+YjWDXJBg/tjHJjTdMMkv4fP64kpugihGgv1HQt4xLsp13hdQSqQK3Zo/c2x
sK66PaChKOJmHEEu3MM99rH6nxgOuFzVrPhxI5m96Cw5oafytlm1RF/rMDDI3aKz
RUYFtu5fE7BhHM/Gwls1LpE27rAePqAKKaaf3+f77nXugLeywYrK9yjhGAqjsI23
LMJIfBpBMnOzSBZJSSRUHZ2jJeIW
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:38 2025 by rpki-client