Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3EBF6DAF46111EFBE17DAB0762E951A.roa
File: C3EBF6DAF46111EFBE17DAB0762E951A.roa (raw, json)
Hash identifier: UbV3bC6jl/IsXzDeHZigTUl09Ug72YHGe2E6RLv7tlY=
Subject key identifier: BA:7E:FC:00:D8:08:D5:11:1D:F7:48:19:27:72:36:F8:25:74:66:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013520
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3EBF6DAF46111EFBE17DAB0762E951A.roa
Signing time: Wed 26 Feb 2025 16:50:21 +0000
ROA not before: Wed 26 Feb 2025 16:50:17 +0000
ROA not after: Sat 19 Feb 2028 16:50:17 +0000
asID: 17561
IP address blocks: 156.233.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79136 (0x13520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:50:17 2025 GMT
Not After : Feb 19 16:50:17 2028 GMT
Subject: CN=67bf464d-7b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:f6:15:8f:7d:da:5c:b1:79:74:a2:b2:c8:
8b:19:72:3d:bb:0c:5d:89:9b:12:a6:98:c0:b0:a9:
ce:98:88:68:2f:37:7b:8f:43:c3:7a:ff:f4:50:9d:
fb:aa:1f:a5:4f:d4:1f:42:ff:78:2b:5c:98:e4:05:
5a:39:db:de:65:ba:83:81:15:d7:76:cb:05:1b:9f:
e1:1a:cd:f1:db:be:87:ac:ac:a8:50:01:86:e7:0c:
00:df:7b:7e:1b:7b:cb:17:88:cd:9b:b9:4c:25:8e:
6a:6a:e6:42:9e:eb:4f:96:dd:35:68:72:1e:91:0f:
81:80:68:fe:a0:5b:5c:6d:68:5a:2a:e8:88:cf:31:
0a:c0:6e:c9:e8:89:ed:47:4b:3e:b4:5a:02:80:c4:
5d:eb:32:3d:a3:4f:db:76:3f:a0:e4:94:ee:16:bb:
46:cf:72:6f:ae:76:88:f0:65:da:52:24:f1:1e:d2:
77:d2:ab:63:a4:d5:f1:ca:56:fb:20:fc:b5:26:e1:
50:79:49:6d:03:77:76:4c:c0:da:62:e4:82:9a:26:
34:3e:a7:3a:b8:17:0d:db:3f:e3:6e:e9:5e:91:93:
0b:58:3e:a8:b8:6a:2e:e4:df:ed:f1:57:ef:8b:2a:
97:f7:d0:96:dc:98:60:f3:63:9f:f8:42:00:94:b0:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7E:FC:00:D8:08:D5:11:1D:F7:48:19:27:72:36:F8:25:74:66:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3EBF6DAF46111EFBE17DAB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:23:93:39:a9:46:3d:67:60:c5:9c:99:b5:ea:d0:a4:a6:65:
8e:28:8c:80:ef:3b:bc:26:69:a2:5c:11:be:e9:02:40:40:f2:
4d:51:06:74:c6:52:8f:2e:7e:b1:bb:77:01:b8:59:4f:ac:2e:
f1:ac:00:95:19:d4:77:8e:b7:c7:c9:0d:80:ba:66:86:8d:57:
e3:8f:98:82:53:db:87:ea:23:7a:84:79:da:60:45:3b:e5:41:
42:49:c9:74:a9:85:25:70:2f:ea:d3:ed:47:7c:c0:e2:ef:75:
4d:5b:9f:bc:03:97:bf:c9:c8:18:42:0d:dd:bd:db:e3:a6:fa:
2a:81:a3:09:f8:ef:bd:04:f0:1e:9c:55:05:29:d7:c3:a6:86:
4e:29:74:9c:ff:0a:da:13:f6:7d:2a:15:ad:6a:01:f8:ad:33:
88:14:a0:e8:23:4b:ba:8d:9b:1f:16:b4:55:e0:f2:ee:7f:15:
c6:73:af:2f:03:c1:8d:fd:fe:12:18:f7:fe:02:0a:c3:12:30:
f5:26:5a:e6:10:c2:5b:bd:6b:95:11:f6:11:67:40:58:01:10:
be:b7:c2:67:24:8b:3c:29:75:67:76:0a:a7:11:0a:22:97:46:
db:de:a1:37:e9:b5:7b:0d:ee:f7:20:6b:17:78:a0:cd:89:93:
2a:3b:c0:be
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATUgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTY1MDE3WhcNMjgwMjE5MTY1MDE3WjAYMRYw
FAYDVQQDEw02N2JmNDY0ZC03Yjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnm72FY992lyxeXSissiLGXI9uwxdiZsSppjAsKnOmIhoLzd7j0PDev/0
UJ37qh+lT9QfQv94K1yY5AVaOdveZbqDgRXXdssFG5/hGs3x276HrKyoUAGG5wwA
33t+G3vLF4jNm7lMJY5qauZCnutPlt01aHIekQ+BgGj+oFtcbWhaKuiIzzEKwG7J
6IntR0s+tFoCgMRd6zI9o0/bdj+g5JTuFrtGz3JvrnaI8GXaUiTxHtJ30qtjpNXx
ylb7IPy1JuFQeUltA3d2TMDaYuSCmiY0Pqc6uBcN2z/jbulekZMLWD6ouGou5N/t
8VfviyqX99CW3Jhg82Of+EIAlLCzyQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLp+
/ADYCNURHfdIGSdyNvgldGZKMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DM0VCRjZEQUY0NjExMUVGQkUxN0RBQjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOknMA0GCSqGSIb3DQEBCwUA
A4IBAQAeI5M5qUY9Z2DFnJm16tCkpmWOKIyA7zu8JmmiXBG+6QJAQPJNUQZ0xlKP
Ln6xu3cBuFlPrC7xrACVGdR3jrfHyQ2AumaGjVfjj5iCU9uH6iN6hHnaYEU75UFC
Scl0qYUlcC/q0+1HfMDi73VNW5+8A5e/ycgYQg3dvdvjpvoqgaMJ+O+9BPAenFUF
KdfDpoZOKXSc/wraE/Z9KhWtagH4rTOIFKDoI0u6jZsfFrRV4PLufxXGc68vA8GN
/f4SGPf+AgrDEjD1JlrmEMJbvWuVEfYRZ0BYARC+t8JnJIs8KXVndgqnEQoil0bb
3qE36bV7De73IGsXeKDNiZMqO8C+
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:07 2025 by rpki-client