Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/084B8A68DC0511EFB110AF57762E951A.roa
File: 084B8A68DC0511EFB110AF57762E951A.roa (raw, json)
Hash identifier: ajAVI/UIeovcZbWr8gR4HOd8j07Lta33zKX3hAL+iSY=
Subject key identifier: 57:B6:C1:98:CC:A8:01:31:47:5C:25:A0:EC:25:38:67:C5:BC:E7:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01140E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/084B8A68DC0511EFB110AF57762E951A.roa
Signing time: Sun 26 Jan 2025 16:46:04 +0000
ROA not before: Sun 26 Jan 2025 16:46:01 +0000
ROA not after: Sun 23 Mar 2025 16:46:01 +0000
asID: 63139
IP address blocks: 156.225.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70670 (0x1140e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 16:46:01 2025 GMT
Not After : Mar 23 16:46:01 2025 GMT
Subject: CN=679666cc-db19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:76:aa:fc:5d:b3:95:ec:ad:9a:49:4c:3b:
e5:6e:fd:17:a2:51:56:6e:0d:34:f0:54:9f:c0:ea:
ba:db:6e:1a:21:0f:e5:12:88:85:ad:98:b3:f7:b1:
f3:10:f6:67:35:c5:a6:72:21:00:29:62:f5:eb:d9:
72:64:d4:78:45:8b:db:cf:35:7a:86:3e:7d:ce:85:
94:42:7f:3f:da:12:1f:25:34:87:6a:8f:f8:f2:9e:
44:49:65:70:c8:80:54:10:df:84:39:76:35:2b:00:
1e:3c:11:52:c8:b7:08:ec:a6:44:21:b0:35:21:b2:
a3:8a:eb:51:98:b0:44:96:cc:9a:ad:51:29:f2:23:
6a:d5:95:c8:7e:c1:d4:98:02:73:6c:53:8f:44:e2:
06:18:78:c0:12:d4:66:47:44:5b:7c:bc:65:27:4e:
a7:eb:c2:33:4d:2a:a1:2e:8c:0f:a5:86:0f:92:58:
2d:98:cf:8b:5f:c1:03:0e:b6:89:00:c0:df:26:f7:
cc:bc:6b:04:b6:8f:e9:f3:68:f8:eb:0f:c6:87:b8:
e4:6a:a7:19:e2:72:67:01:cd:fc:4c:a6:5c:7a:07:
6a:21:c4:e0:52:61:b0:0f:e8:0e:41:11:fb:25:7a:
4a:8c:01:21:89:d0:4d:95:77:d6:cf:8a:81:6d:58:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B6:C1:98:CC:A8:01:31:47:5C:25:A0:EC:25:38:67:C5:BC:E7:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/084B8A68DC0511EFB110AF57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.124.0/24
Signature Algorithm: sha256WithRSAEncryption
04:5e:77:17:16:10:b0:58:33:99:ee:e4:a9:f7:a4:a7:d9:26:
e0:54:aa:1a:70:2f:3e:68:1d:b2:b9:82:21:ef:24:72:ca:49:
df:09:e5:bf:78:40:e7:28:87:7c:40:e3:09:79:78:ba:b9:90:
98:84:5a:a8:98:75:d1:27:f8:2c:8b:93:cb:a8:f7:7f:5c:78:
8d:8f:a3:09:7a:21:fb:d3:e6:e6:d3:0f:10:30:c5:1e:2d:d4:
8b:d1:d2:51:dc:43:5a:d7:0c:43:d2:ec:74:cf:a7:86:33:f6:
b3:84:ed:47:b1:e4:a3:d9:19:37:0d:65:63:31:3c:0c:16:59:
b5:0e:79:43:7e:dd:9b:01:b4:53:25:92:ed:4f:d6:65:21:eb:
08:4e:9f:69:41:a1:6a:cc:3b:4f:45:b2:fb:84:53:db:8d:14:
a8:9c:df:01:14:9d:cd:c5:b9:e7:d4:9b:0f:82:f6:7a:67:fa:
0f:ad:3f:5c:19:8a:0e:6b:62:70:a3:ea:9c:6d:6f:fc:64:45:
84:1f:85:e3:f4:51:41:3e:a0:40:d1:a4:c7:bb:a1:5e:12:55:
13:00:87:7e:c9:8a:2a:8f:e6:47:9d:4b:98:b8:f1:0e:9d:73:
2c:9b:69:11:d9:d4:4b:a6:8a:1f:cd:d5:a9:15:8b:7e:76:7e:
19:68:26:b9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARQOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI2MTY0NjAxWhcNMjUwMzIzMTY0NjAxWjAYMRYw
FAYDVQQDEw02Nzk2NjZjYy1kYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzzN2qvxds5XsrZpJTDvlbv0XolFWbg008FSfwOq6224aIQ/lEoiFrZiz
97HzEPZnNcWmciEAKWL169lyZNR4RYvbzzV6hj59zoWUQn8/2hIfJTSHao/48p5E
SWVwyIBUEN+EOXY1KwAePBFSyLcI7KZEIbA1IbKjiutRmLBElsyarVEp8iNq1ZXI
fsHUmAJzbFOPROIGGHjAEtRmR0RbfLxlJ06n68IzTSqhLowPpYYPklgtmM+LX8ED
DraJAMDfJvfMvGsEto/p82j46w/Gh7jkaqcZ4nJnAc38TKZcegdqIcTgUmGwD+gO
QRH7JXpKjAEhidBNlXfWz4qBbVjfgwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFe2
wZjMqAExR1wloOwlOGfFvOdbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wODRCOEE2OERDMDUxMUVGQjExMEFGNTc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOF8MA0GCSqGSIb3DQEBCwUA
A4IBAQAEXncXFhCwWDOZ7uSp96Sn2SbgVKoacC8+aB2yuYIh7yRyyknfCeW/eEDn
KId8QOMJeXi6uZCYhFqomHXRJ/gsi5PLqPd/XHiNj6MJeiH70+bm0w8QMMUeLdSL
0dJR3ENa1wxD0ux0z6eGM/azhO1HseSj2Rk3DWVjMTwMFlm1DnlDft2bAbRTJZLt
T9ZlIesITp9pQaFqzDtPRbL7hFPbjRSonN8BFJ3Nxbnn1JsPgvZ6Z/oPrT9cGYoO
a2Jwo+qcbW/8ZEWEH4Xj9FFBPqBA0aTHu6FeElUTAId+yYoqj+ZHnUuYuPEOnXMs
m2kR2dRLpoofzdWpFYt+dn4ZaCa5
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:58:50 2025 by rpki-client