Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/041A4464DFF411EF86C9A460762E951A.roa
File: 041A4464DFF411EF86C9A460762E951A.roa (raw, json)
Hash identifier: KvVmM2K4rmwYJtqqYwn1VPnE8StwS308bBsfoQra+qk=
Subject key identifier: 31:A7:78:C0:5F:68:1A:88:00:6D:13:E4:08:BA:45:FB:B3:EB:68:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01168D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/041A4464DFF411EF86C9A460762E951A.roa
Signing time: Fri 31 Jan 2025 16:54:21 +0000
ROA not before: Fri 31 Jan 2025 16:54:17 +0000
ROA not after: Tue 25 Feb 2025 16:54:17 +0000
asID: 62468
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71309 (0x1168d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 16:54:17 2025 GMT
Not After : Feb 25 16:54:17 2025 GMT
Subject: CN=679d003c-02b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:67:19:14:e1:e3:32:25:a9:19:4c:90:69:
2b:9b:47:1d:04:b8:f2:1f:46:01:70:2f:79:4d:09:
ee:50:0c:f5:86:93:f2:5c:34:56:4b:d2:76:c0:cd:
bb:a8:46:57:24:dd:54:cf:b6:c5:21:fa:d8:57:f8:
c1:c4:19:d4:6f:db:46:9c:71:77:8a:de:06:2a:cd:
64:89:38:76:14:55:b9:7c:2e:db:5b:a4:e6:d7:aa:
5f:00:19:87:26:c7:7c:1f:55:22:13:4e:ab:2d:ec:
0c:07:74:18:41:e6:82:8f:7b:50:d1:bc:fb:cc:75:
77:b7:c4:d7:fc:0c:b9:15:e8:6d:44:46:3b:3a:ed:
a0:d0:5f:47:95:c3:ac:ab:6a:5c:95:32:4e:a6:70:
a1:ba:65:cf:c5:aa:83:e3:a1:e8:c1:93:91:a3:6c:
c1:83:3c:04:26:60:d8:08:33:17:41:2c:ee:35:d7:
c0:e2:95:13:15:72:f6:24:98:d8:0c:fd:e3:5c:2f:
1d:a6:43:28:6e:e6:01:d3:fb:45:f9:1c:38:02:0f:
f6:36:16:88:e3:4e:d5:cd:39:e4:f1:8a:58:b9:ed:
90:f2:8b:8e:51:08:df:e3:95:2c:ac:78:db:78:9a:
c2:7d:6f:5c:69:67:0a:ed:3b:4e:01:25:35:99:9f:
f9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A7:78:C0:5F:68:1A:88:00:6D:13:E4:08:BA:45:FB:B3:EB:68:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/041A4464DFF411EF86C9A460762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
23:b7:33:bc:b4:69:33:22:f9:d2:a3:83:c6:a4:69:a4:40:ab:
20:12:8e:50:11:73:96:fe:4d:ac:7e:f9:b7:74:bb:56:10:51:
ae:87:1f:31:08:64:87:59:e1:0a:99:8c:31:bd:84:44:ec:32:
4f:18:f2:f6:7d:5b:4c:da:ae:15:86:1e:93:0c:3e:4a:15:99:
65:c8:82:60:e4:53:8a:c8:03:30:90:73:f7:7a:fa:a4:07:5f:
08:14:7b:e1:38:17:4a:2a:d1:36:cf:80:90:d4:aa:6b:f1:4b:
20:a1:69:7d:98:e6:19:96:c5:02:68:3e:6a:65:fe:bf:0d:e4:
f6:8b:22:07:a2:18:b0:29:98:b7:2e:e1:aa:35:6a:7f:51:5e:
51:ad:30:9a:1f:e7:2f:1f:51:12:b1:81:d4:40:fe:9d:08:c6:
ff:a7:5d:4c:56:d6:d0:96:6b:8d:42:9c:bd:51:c5:98:8a:8f:
63:b3:ec:72:c2:d4:29:09:94:4e:1c:6f:60:50:f7:29:c1:6c:
ae:96:ec:aa:ea:0f:b2:dd:61:89:d0:91:1b:5d:6c:a1:90:c6:
db:a3:ce:ef:93:b7:d3:14:67:25:e2:23:3e:a9:d7:04:83:76:
f9:8c:a9:ea:3c:f8:2c:a5:23:ba:7d:32:3e:d6:64:ef:2a:57:
6a:18:fb:07
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARaNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTMxMTY1NDE3WhcNMjUwMjI1MTY1NDE3WjAYMRYw
FAYDVQQDEw02NzlkMDAzYy0wMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnpJnGRTh4zIlqRlMkGkrm0cdBLjyH0YBcC95TQnuUAz1hpPyXDRWS9J2
wM27qEZXJN1Uz7bFIfrYV/jBxBnUb9tGnHF3it4GKs1kiTh2FFW5fC7bW6Tm16pf
ABmHJsd8H1UiE06rLewMB3QYQeaCj3tQ0bz7zHV3t8TX/Ay5FehtREY7Ou2g0F9H
lcOsq2pclTJOpnChumXPxaqD46HowZORo2zBgzwEJmDYCDMXQSzuNdfA4pUTFXL2
JJjYDP3jXC8dpkMobuYB0/tF+Rw4Ag/2NhaI407VzTnk8YpYue2Q8ouOUQjf45Us
rHjbeJrCfW9caWcK7TtOASU1mZ/5swIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDGn
eMBfaBqIAG0T5Ai6Rfuz62iMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNDFBNDQ2NERGRjQxMUVGODZDOUE0NjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPXIMA0GCSqGSIb3DQEBCwUA
A4IBAQAjtzO8tGkzIvnSo4PGpGmkQKsgEo5QEXOW/k2sfvm3dLtWEFGuhx8xCGSH
WeEKmYwxvYRE7DJPGPL2fVtM2q4Vhh6TDD5KFZllyIJg5FOKyAMwkHP3evqkB18I
FHvhOBdKKtE2z4CQ1Kpr8UsgoWl9mOYZlsUCaD5qZf6/DeT2iyIHohiwKZi3LuGq
NWp/UV5RrTCaH+cvH1ESsYHUQP6dCMb/p11MVtbQlmuNQpy9UcWYio9js+xywtQp
CZROHG9gUPcpwWyuluyq6g+y3WGJ0JEbXWyhkMbbo87vk7fTFGcl4iM+qdcEg3b5
jKnqPPgspSO6fTI+1mTvKldqGPsH
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:01:41 2025 by rpki-client