Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D69ED686DFE311EFBA50F073762E951A.roa
File: D69ED686DFE311EFBA50F073762E951A.roa (raw, json)
Hash identifier: y16Lc0N2ldEZKDVZAYkeiqnthwwIPPTTdruJH+mDV/I=
Subject key identifier: BF:9D:AD:9E:C2:F6:64:AC:90:8A:AA:30:37:23:D6:C2:55:6A:74:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011608
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D69ED686DFE311EFBA50F073762E951A.roa
Signing time: Fri 31 Jan 2025 14:58:33 +0000
ROA not before: Fri 31 Jan 2025 14:58:28 +0000
ROA not after: Mon 12 Jan 2026 14:58:28 +0000
asID: 209242
IP address blocks: 156.238.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71176 (0x11608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 14:58:28 2025 GMT
Not After : Jan 12 14:58:28 2026 GMT
Subject: CN=679ce518-bb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:31:7e:30:a9:37:1f:9a:00:7e:aa:4b:e2:
f9:1b:ec:96:04:3c:b0:4f:d8:29:54:94:bd:12:47:
6a:b0:14:73:44:6b:fc:cc:bd:d4:c7:fe:f7:34:8d:
57:ea:79:24:44:09:7d:2c:c1:a2:ad:a9:17:df:b9:
15:f6:90:6c:50:a6:a6:6d:04:cf:d4:60:f2:42:a2:
4d:a3:79:df:0a:49:1e:83:6c:3f:8f:69:27:20:5a:
6e:03:17:e4:46:04:98:cd:93:82:2e:7d:39:21:79:
b8:59:64:7c:1a:04:c8:fb:57:90:e0:7b:38:06:f1:
e6:ee:40:0f:c0:f8:b0:3f:2e:72:77:e3:3d:ff:20:
d6:a9:1c:2e:7c:29:b2:af:7b:7c:4c:f5:96:17:cb:
df:09:10:36:a4:05:18:3f:8b:ed:fd:21:94:b5:f5:
b3:56:85:e5:60:a9:f0:61:9c:36:9d:8e:dc:4b:56:
58:8c:9c:9a:8a:af:cf:a7:76:4a:2d:b0:57:ed:23:
65:64:f7:ff:35:0b:47:1a:0a:e2:5d:f9:ef:d5:b6:
39:22:e6:0c:0d:bb:d3:ee:25:f2:72:08:9e:0d:06:
ee:c8:48:37:ed:55:5c:8d:0a:db:8f:6f:7a:bd:e5:
39:10:94:93:2a:1d:23:84:90:70:6f:35:b7:1f:74:
d3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9D:AD:9E:C2:F6:64:AC:90:8A:AA:30:37:23:D6:C2:55:6A:74:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D69ED686DFE311EFBA50F073762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.15.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b7:0e:a1:c2:23:17:e0:9f:53:2f:40:3a:b8:00:df:b1:3e:
f6:c9:a5:5e:40:0a:5c:23:c4:fb:92:5a:01:8a:66:29:d7:96:
0a:a1:1d:e1:3a:a3:58:38:fe:cb:82:49:fb:44:58:89:de:ce:
0c:6a:6c:bb:f1:83:e9:28:51:1e:c8:07:a6:37:88:8d:38:79:
c5:b9:de:7e:c7:88:c2:54:ac:25:ee:64:0c:4a:5c:fa:c4:ea:
e3:56:97:29:93:85:44:5f:b0:bb:e2:90:29:36:56:2f:44:1a:
67:ee:48:77:54:ea:12:12:55:95:b3:ae:c7:56:0d:e3:2f:73:
ea:2d:a1:ba:8f:13:e6:4c:f0:8e:2f:b8:05:bc:73:48:56:41:
5d:27:43:30:99:18:2e:44:d1:b6:cd:da:9a:2c:ec:85:9e:af:
42:e9:27:5f:dd:c7:d9:08:32:c0:58:5b:a5:dc:1f:a1:94:e9:
a6:f4:a7:f8:d5:68:19:64:90:58:fb:89:30:bf:72:cc:33:0e:
b8:3b:dc:f7:49:06:49:19:64:a9:09:38:89:69:2c:76:8e:88:
f9:b7:0b:13:9a:14:1b:ca:fd:16:c0:69:83:45:3a:9f:95:ac:
39:0c:99:74:79:59:e4:2f:fb:72:2a:f2:71:49:1d:c6:ea:9d:
c1:96:26:3e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARYIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTMxMTQ1ODI4WhcNMjYwMTEyMTQ1ODI4WjAYMRYw
FAYDVQQDEw02NzljZTUxOC1iYjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsKQxfjCpNx+aAH6qS+L5G+yWBDywT9gpVJS9EkdqsBRzRGv8zL3Ux/73
NI1X6nkkRAl9LMGirakX37kV9pBsUKambQTP1GDyQqJNo3nfCkkeg2w/j2knIFpu
AxfkRgSYzZOCLn05IXm4WWR8GgTI+1eQ4Hs4BvHm7kAPwPiwPy5yd+M9/yDWqRwu
fCmyr3t8TPWWF8vfCRA2pAUYP4vt/SGUtfWzVoXlYKnwYZw2nY7cS1ZYjJyaiq/P
p3ZKLbBX7SNlZPf/NQtHGgriXfnv1bY5IuYMDbvT7iXycgieDQbuyEg37VVcjQrb
j296veU5EJSTKh0jhJBwbzW3H3TTjQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL+d
rZ7C9mSskIqqMDcj1sJVanTsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENjlFRDY4NkRGRTMxMUVGQkE1MEYwNzM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO4PMA0GCSqGSIb3DQEBCwUA
A4IBAQA4tw6hwiMX4J9TL0A6uADfsT72yaVeQApcI8T7kloBimYp15YKoR3hOqNY
OP7Lgkn7RFiJ3s4Mamy78YPpKFEeyAemN4iNOHnFud5+x4jCVKwl7mQMSlz6xOrj
Vpcpk4VEX7C74pApNlYvRBpn7kh3VOoSElWVs67HVg3jL3PqLaG6jxPmTPCOL7gF
vHNIVkFdJ0MwmRguRNG2zdqaLOyFnq9C6Sdf3cfZCDLAWFul3B+hlOmm9Kf41WgZ
ZJBY+4kwv3LMMw64O9z3SQZJGWSpCTiJaSx2joj5twsTmhQbyv0WwGmDRTqflaw5
DJl0eVnkL/tyKvJxSR3G6p3BliY+
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:09 2025 by rpki-client