Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC97A70250CC11EFA1CB275A762E951A.roa
File: EC97A70250CC11EFA1CB275A762E951A.roa (raw, json)
Hash identifier: iL5sqYx8Aa28SrwggMIyOoCm0eJG8GsKpDVWuqkwtiY=
Subject key identifier: 34:77:2F:F9:10:0D:91:00:F8:7F:C8:C5:63:04:CC:D0:C8:59:38:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A2EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC97A70250CC11EFA1CB275A762E951A.roa
Signing time: Fri 02 Aug 2024 12:44:15 +0000
ROA not before: Fri 02 Aug 2024 12:44:11 +0000
ROA not after: Mon 04 Aug 2025 12:44:11 +0000
asID: 262167
IP address blocks: 156.235.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41706 (0xa2ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Aug 2 12:44:11 2024 GMT
Not After : Aug 4 12:44:11 2025 GMT
Subject: CN=66acd49e-24df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:93:de:1e:58:a7:8a:05:d8:f0:61:e3:64:
42:54:3f:20:c1:9b:21:51:a4:fb:7e:f2:3b:9f:3e:
85:d1:07:35:74:d8:21:bb:c0:d4:31:76:bc:da:7b:
b5:87:66:04:a8:d8:00:8f:c3:c6:ec:93:af:a1:4a:
9c:ec:10:f0:6c:c9:6d:4b:0c:42:cc:2b:1e:89:89:
e2:3f:61:a1:5a:00:18:ee:7a:bf:ba:27:07:95:ef:
04:9a:e4:67:51:ed:25:7f:3a:1c:46:1c:09:10:9a:
2d:28:4e:17:79:66:c1:a5:3d:e3:96:ce:93:36:e2:
89:29:38:fe:3a:43:5b:e4:60:e9:0e:75:2f:48:e1:
33:e4:80:6f:3d:4c:96:b2:8f:77:1e:0d:03:a7:1a:
d2:79:5d:db:9f:e9:92:41:00:a7:6b:22:f7:3b:96:
8b:c6:0b:7f:dc:5f:82:39:a2:c8:cc:19:03:d9:0c:
c0:7c:89:08:bf:0b:8a:df:7d:7b:1c:77:dd:01:1f:
14:c6:fb:88:ff:a1:42:7d:98:1e:44:a6:8f:9c:36:
5b:2b:fe:5f:bf:86:f9:29:d3:71:99:c3:b8:01:f8:
44:cb:e9:67:7e:e8:6b:55:ae:67:e2:4f:f5:45:7c:
b2:a9:cd:32:f5:f1:d7:c9:fc:1b:b4:a7:18:ee:ea:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:77:2F:F9:10:0D:91:00:F8:7F:C8:C5:63:04:CC:D0:C8:59:38:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC97A70250CC11EFA1CB275A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:86:a3:13:4c:b3:6b:e4:1e:bc:cc:b2:4e:e6:c5:09:5b:04:
1a:f4:9d:fb:49:c8:17:77:aa:a0:ed:32:d6:da:29:28:b3:27:
a7:b2:d7:c8:28:af:82:fa:1a:73:d3:36:7b:21:13:4a:41:13:
d7:d1:1b:db:3b:f2:42:96:9e:4a:e0:ed:3e:5b:35:d6:75:93:
c9:ed:fc:d4:e7:74:8b:35:95:cf:6a:f6:31:f2:cd:45:3f:d6:
2d:c9:8d:fa:81:6e:29:ce:f1:4b:d0:cb:81:8f:40:1e:f2:54:
3e:4b:e3:02:7d:19:a2:20:21:d7:ed:61:c6:9f:04:ac:1d:30:
87:36:37:8a:c3:47:20:6c:c9:90:ad:2f:81:b6:36:50:77:6a:
c9:b6:24:58:c8:df:93:cb:33:16:ce:b6:88:79:c5:a6:dc:a9:
0b:fd:09:c0:23:eb:76:97:7f:da:77:c4:c1:ee:0a:ae:0d:67:
fc:66:c0:f7:12:62:58:0f:f4:24:4c:17:3c:0f:78:6c:ea:0e:
3e:7b:9f:2e:39:ab:b2:e0:b9:f6:46:12:9c:46:0c:ee:96:94:
01:30:df:89:d4:c1:84:bb:fb:d3:1e:7d:0b:d8:e7:3d:2f:01:
9d:ba:9f:f5:41:97:37:a3:00:bd:c9:8f:9f:be:03:56:79:be:
81:83:df:61
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKLqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwODAyMTI0NDExWhcNMjUwODA0MTI0NDExWjAYMRYw
FAYDVQQDEw02NmFjZDQ5ZS0yNGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1caT3h5Yp4oF2PBh42RCVD8gwZshUaT7fvI7nz6F0Qc1dNghu8DUMXa8
2nu1h2YEqNgAj8PG7JOvoUqc7BDwbMltSwxCzCseiYniP2GhWgAY7nq/uicHle8E
muRnUe0lfzocRhwJEJotKE4XeWbBpT3jls6TNuKJKTj+OkNb5GDpDnUvSOEz5IBv
PUyWso93Hg0DpxrSeV3bn+mSQQCnayL3O5aLxgt/3F+COaLIzBkD2QzAfIkIvwuK
3317HHfdAR8UxvuI/6FCfZgeRKaPnDZbK/5fv4b5KdNxmcO4AfhEy+lnfuhrVa5n
4k/1RXyyqc0y9fHXyfwbtKcY7uptJQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDR3
L/kQDZEA+H/IxWMEzNDIWTiXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQzk3QTcwMjUwQ0MxMUVGQTFDQjI3NUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOtOMA0GCSqGSIb3DQEBCwUA
A4IBAQC1hqMTTLNr5B68zLJO5sUJWwQa9J37ScgXd6qg7TLW2ikosyenstfIKK+C
+hpz0zZ7IRNKQRPX0RvbO/JClp5K4O0+WzXWdZPJ7fzU53SLNZXPavYx8s1FP9Yt
yY36gW4pzvFL0MuBj0Ae8lQ+S+MCfRmiICHX7WHGnwSsHTCHNjeKw0cgbMmQrS+B
tjZQd2rJtiRYyN+TyzMWzraIecWm3KkL/QnAI+t2l3/ad8TB7gquDWf8ZsD3EmJY
D/QkTBc8D3hs6g4+e58uOauy4Ln2RhKcRgzulpQBMN+J1MGEu/vTHn0L2Oc9LwGd
up/1QZc3owC9yY+fvgNWeb6Bg99h
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:01 2025 by rpki-client