Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1314628CDCB711EF8541CB89762E951A.roa
File: 1314628CDCB711EF8541CB89762E951A.roa (raw, json)
Hash identifier: 9Y+I9QbZxjbYd7iM3DtmI8RWOYI4tampboaggbqxw/k=
Subject key identifier: BF:99:B9:AF:3F:8F:27:10:3F:91:C3:62:E2:A2:CF:D9:3B:F7:1E:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01152D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1314628CDCB711EF8541CB89762E951A.roa
Signing time: Mon 27 Jan 2025 14:00:33 +0000
ROA not before: Mon 27 Jan 2025 14:00:29 +0000
ROA not after: Sat 08 Feb 2025 14:00:29 +0000
asID: 22773
IP address blocks: 156.246.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70957 (0x1152d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 14:00:29 2025 GMT
Not After : Feb 8 14:00:29 2025 GMT
Subject: CN=67979181-0a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:47:e5:37:5f:66:ed:4e:4d:e4:4f:64:27:
b2:c8:ab:64:79:b1:6a:4d:3f:cb:9b:72:2f:1c:fd:
d6:55:a6:c1:f4:b3:88:e3:5c:0c:39:1c:12:45:c4:
31:12:7e:de:e0:23:48:7e:6a:03:de:c6:e6:22:58:
3b:47:59:1a:4e:3b:14:f8:c5:c4:d1:14:0d:2d:4c:
6c:f6:8f:f4:2f:1a:d8:a5:2f:bd:a9:c3:ad:7b:45:
07:4f:4c:3f:96:0b:54:26:01:67:ac:91:8a:17:a5:
85:ee:e6:f2:e9:48:db:74:b1:18:86:ab:7b:d6:21:
42:4d:e9:03:d4:ac:f8:fb:fb:ae:65:41:e8:00:b8:
f1:f3:1e:52:f8:44:a3:d6:16:00:9f:e7:ce:23:d5:
f9:07:f2:fd:91:fb:e5:cc:4d:f4:b5:95:6d:00:49:
6b:6d:26:49:00:ac:92:47:ef:18:98:04:2f:0e:a2:
0f:12:c9:55:a0:26:93:c5:08:a2:3b:29:a6:4e:af:
d9:08:a6:c8:3c:93:ef:c5:33:ea:3e:90:5e:31:fa:
0b:f5:3a:b2:23:ba:00:a6:83:fc:57:72:a0:a4:31:
74:5d:fd:04:4d:f4:1e:62:b2:a3:57:ff:45:62:8b:
ec:2c:21:e5:be:e5:b0:3e:3d:90:51:02:91:0f:b9:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:99:B9:AF:3F:8F:27:10:3F:91:C3:62:E2:A2:CF:D9:3B:F7:1E:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1314628CDCB711EF8541CB89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.84.0/23
Signature Algorithm: sha256WithRSAEncryption
58:6f:ae:2d:7d:22:8c:80:9a:b9:0d:69:5d:0f:1a:26:7f:1e:
59:87:4d:27:93:4b:64:88:d2:35:98:e2:26:3d:71:2d:6d:3d:
19:d3:16:6a:21:fa:73:65:fd:9b:a4:5b:55:52:ab:e1:70:b0:
56:14:c8:c9:92:f6:03:e5:05:41:c9:5e:8e:d0:bb:49:58:d1:
32:de:7e:c7:6f:58:7f:05:55:90:a7:b8:82:7b:ef:db:6b:fe:
1d:6b:33:0e:94:d1:fb:d4:10:bb:62:c6:48:8f:64:88:f6:a9:
8f:9e:e4:84:60:15:a7:e1:31:d0:24:ac:5b:a4:c2:5e:9b:6f:
85:f1:e7:ce:36:0d:62:2d:4b:25:a7:90:7a:54:c9:fa:76:d0:
ed:60:8e:23:27:0b:27:c1:cb:0f:27:21:8a:b4:22:9b:ec:0e:
71:d6:8e:48:c2:e6:78:92:a6:2c:bc:b8:b2:ba:88:4c:48:b9:
fb:db:4c:a3:a5:8c:aa:5e:42:69:8a:a1:f8:76:57:0e:69:cd:
9d:fd:55:1c:91:24:eb:7c:b5:2e:d2:e1:45:f4:eb:57:e0:81:
51:ba:8f:63:5e:9c:2a:dd:10:ed:7f:97:a7:e4:54:25:5b:8b:
46:8d:08:96:40:06:ed:c3:af:e1:58:ba:ee:3f:4a:e1:3a:e3:
89:d3:04:f2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARUtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MTQwMDI5WhcNMjUwMjA4MTQwMDI5WjAYMRYw
FAYDVQQDEw02Nzk3OTE4MS0wYTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA20JH5TdfZu1OTeRPZCeyyKtkebFqTT/Lm3IvHP3WVabB9LOI41wMORwS
RcQxEn7e4CNIfmoD3sbmIlg7R1kaTjsU+MXE0RQNLUxs9o/0LxrYpS+9qcOte0UH
T0w/lgtUJgFnrJGKF6WF7uby6UjbdLEYhqt71iFCTekD1Kz4+/uuZUHoALjx8x5S
+ESj1hYAn+fOI9X5B/L9kfvlzE30tZVtAElrbSZJAKySR+8YmAQvDqIPEslVoCaT
xQiiOymmTq/ZCKbIPJPvxTPqPpBeMfoL9TqyI7oApoP8V3KgpDF0Xf0ETfQeYrKj
V/9FYovsLCHlvuWwPj2QUQKRD7n+DwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL+Z
ua8/jycQP5HDYuKiz9k79x4GMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMzE0NjI4Q0RDQjcxMUVGODU0MUNCODk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPZUMA0GCSqGSIb3DQEBCwUA
A4IBAQBYb64tfSKMgJq5DWldDxomfx5Zh00nk0tkiNI1mOImPXEtbT0Z0xZqIfpz
Zf2bpFtVUqvhcLBWFMjJkvYD5QVByV6O0LtJWNEy3n7Hb1h/BVWQp7iCe+/ba/4d
azMOlNH71BC7YsZIj2SI9qmPnuSEYBWn4THQJKxbpMJem2+F8efONg1iLUslp5B6
VMn6dtDtYI4jJwsnwcsPJyGKtCKb7A5x1o5IwuZ4kqYsvLiyuohMSLn720yjpYyq
XkJpiqH4dlcOac2d/VUckSTrfLUu0uFF9OtX4IFRuo9jXpwq3RDtf5en5FQlW4tG
jQiWQAbtw6/hWLruP0rhOuOJ0wTy
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:10:20 2025 by rpki-client