Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9BEC062F42211EF9C434A77762E951A.roa
File: D9BEC062F42211EF9C434A77762E951A.roa (raw, json)
Hash identifier: Jj2UKjTvDC9aB7GdX5u37Bp8/5KeMWwG9wK8RSbyfGY=
Subject key identifier: B2:53:97:17:2C:62:40:D5:2B:68:60:C1:EB:00:3B:F7:B4:DE:7F:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013062
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9BEC062F42211EF9C434A77762E951A.roa
Signing time: Wed 26 Feb 2025 09:19:59 +0000
ROA not before: Wed 26 Feb 2025 09:19:55 +0000
ROA not after: Thu 19 Feb 2026 09:19:55 +0000
asID: 984
IP address blocks: 156.252.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77922 (0x13062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:19:55 2025 GMT
Not After : Feb 19 09:19:55 2026 GMT
Subject: CN=67bedcbf-604a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:c3:04:66:c4:64:68:52:e2:bc:90:9a:60:
b2:5d:11:f4:45:b9:a8:a4:50:28:a0:36:ef:00:47:
4d:4c:3f:20:2b:dd:48:b7:4f:30:1b:37:1c:cc:a1:
9b:ee:b9:94:98:86:0c:0c:5e:8a:3d:14:9c:29:d3:
01:09:5b:7c:a5:4f:c4:eb:27:e3:f5:c3:65:8e:24:
45:02:56:71:fb:a4:eb:1a:11:43:b5:f2:de:06:30:
d4:71:b3:04:f1:ef:76:02:db:49:3c:6e:b6:03:91:
e5:54:23:80:89:e4:dc:76:90:c1:7b:68:b0:dd:09:
0a:89:b3:e0:71:db:03:f5:1d:e8:0a:c3:1c:14:10:
f7:5c:de:7d:ff:35:63:83:36:f6:aa:ca:55:58:60:
19:4a:4c:9c:b6:03:05:81:bd:5c:82:cd:c7:5c:e2:
b2:6c:e4:44:e8:12:82:1d:bb:d5:fa:1f:26:53:36:
76:2d:0b:92:47:29:e5:52:c6:aa:88:e0:28:1c:50:
e1:27:12:84:cf:71:73:f2:b8:db:c6:08:8e:a2:60:
2b:d0:11:99:6b:7d:d3:d6:6f:05:a8:c3:89:01:72:
5d:a5:c5:e4:01:af:a9:5b:47:5f:14:f1:20:63:82:
ed:94:a4:3e:61:f7:4b:17:4a:36:fb:b1:b8:f6:80:
61:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:53:97:17:2C:62:40:D5:2B:68:60:C1:EB:00:3B:F7:B4:DE:7F:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9BEC062F42211EF9C434A77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.53.0/24
Signature Algorithm: sha256WithRSAEncryption
49:84:14:14:18:78:95:30:b5:ab:f0:96:4e:9c:c1:55:66:09:
2c:03:ee:56:52:d2:3f:7f:86:0a:a2:e7:7b:0d:71:c8:ea:26:
3c:85:3c:27:df:e3:b3:5d:83:60:42:ad:7c:d2:9f:e1:22:d2:
b7:e5:c4:d0:e3:ca:a9:50:94:4e:c7:6a:20:f6:3c:57:a2:07:
58:38:0a:f1:9d:b1:00:dc:4e:77:b4:d7:e9:9e:b1:2d:16:8a:
2d:c6:fd:a2:f8:4f:7e:eb:74:9d:48:45:bc:d2:2b:8a:88:89:
34:19:96:c1:f9:a5:ff:8a:47:7e:d9:a1:bf:21:7c:a3:97:66:
17:ed:2b:a4:6a:cb:d2:bb:81:11:a2:00:16:b5:8d:ec:9f:8e:
03:2d:4a:23:70:88:87:96:57:e9:c1:d1:86:1b:37:59:d4:04:
c9:2a:d7:8c:f9:bc:26:cf:53:1a:01:c4:99:97:99:03:87:22:
af:53:89:ae:c4:dc:e6:8f:b7:cb:75:ac:78:42:8d:4f:4c:09:
8a:5f:f9:56:03:63:24:dd:90:7f:eb:3e:40:73:01:8b:2b:4e:
ec:b9:43:48:a8:7c:9f:13:98:96:41:7e:f2:e9:db:c3:c3:51:
0f:7f:76:bd:58:77:62:d0:98:8c:f0:0f:61:36:e1:24:38:a7:
a1:14:bd:69
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATBiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MDkxOTU1WhcNMjYwMjE5MDkxOTU1WjAYMRYw
FAYDVQQDEw02N2JlZGNiZi02MDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt5PDBGbEZGhS4ryQmmCyXRH0RbmopFAooDbvAEdNTD8gK91It08wGzcc
zKGb7rmUmIYMDF6KPRScKdMBCVt8pU/E6yfj9cNljiRFAlZx+6TrGhFDtfLeBjDU
cbME8e92AttJPG62A5HlVCOAieTcdpDBe2iw3QkKibPgcdsD9R3oCsMcFBD3XN59
/zVjgzb2qspVWGAZSkyctgMFgb1cgs3HXOKybORE6BKCHbvV+h8mUzZ2LQuSRynl
UsaqiOAoHFDhJxKEz3Fz8rjbxgiOomAr0BGZa33T1m8FqMOJAXJdpcXkAa+pW0df
FPEgY4LtlKQ+YfdLF0o2+7G49oBh6QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLJT
lxcsYkDVK2hgwesAO/e03n9gMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EOUJFQzA2MkY0MjIxMUVGOUM0MzRBNzc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPw1MA0GCSqGSIb3DQEBCwUA
A4IBAQBJhBQUGHiVMLWr8JZOnMFVZgksA+5WUtI/f4YKoud7DXHI6iY8hTwn3+Oz
XYNgQq180p/hItK35cTQ48qpUJROx2og9jxXogdYOArxnbEA3E53tNfpnrEtFoot
xv2i+E9+63SdSEW80iuKiIk0GZbB+aX/ikd+2aG/IXyjl2YX7SukasvSu4ERogAW
tY3sn44DLUojcIiHllfpwdGGGzdZ1ATJKteM+bwmz1MaAcSZl5kDhyKvU4muxNzm
j7fLdax4Qo1PTAmKX/lWA2Mk3ZB/6z5AcwGLK07suUNIqHyfE5iWQX7y6dvDw1EP
f3a9WHdi0JiM8A9hNuEkOKehFL1p
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:09 2025 by rpki-client