Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1414AD8AD56511EFB6251E50762E951A.roa
File: 1414AD8AD56511EFB6251E50762E951A.roa (raw, json)
Hash identifier: AluOQga7IxKsy9+SJvYyukb9vC4w7NE1MzPaL2iHl8o=
Subject key identifier: 86:D0:02:1E:57:95:1E:7A:67:47:A2:D8:CE:00:AB:EB:D3:1D:17:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010AF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1414AD8AD56511EFB6251E50762E951A.roa
Signing time: Sat 18 Jan 2025 06:25:58 +0000
ROA not before: Sat 18 Jan 2025 06:25:54 +0000
ROA not after: Sat 22 Feb 2025 06:25:54 +0000
asID: 395886
IP address blocks: 156.239.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68345 (0x10af9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 06:25:54 2025 GMT
Not After : Feb 22 06:25:54 2025 GMT
Subject: CN=678b4976-89c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:34:ca:8c:94:20:04:be:c9:11:36:68:e3:
85:30:5b:8f:37:8e:6f:31:5d:24:d7:68:91:d7:5d:
2b:0c:7f:00:e1:06:77:a3:c8:d2:fd:3a:6a:74:25:
e4:c3:cf:6f:8a:2d:56:a1:6a:18:d9:63:d8:fc:8b:
8d:36:77:44:56:f8:36:ac:79:45:12:fa:51:17:4d:
e7:1f:4b:30:63:cf:2d:ca:ba:9e:b2:33:c2:86:ee:
3e:4d:99:30:59:50:72:9e:e5:db:8c:d2:62:91:73:
65:2b:81:9c:ba:66:a8:b4:d4:41:52:5b:bf:da:f2:
98:54:4c:e2:b5:08:95:a9:0e:82:20:e9:d6:b2:ba:
c3:c5:65:73:e3:b7:d0:89:c5:50:fb:27:33:32:e7:
19:bf:55:2e:21:16:5f:67:2a:11:11:74:66:8f:e5:
5b:85:82:dd:fc:c2:d5:76:b1:9b:b4:ae:d5:6a:d2:
36:6b:7e:8c:56:ea:3d:75:91:6a:26:80:71:0c:44:
66:0c:fe:a9:f3:31:c6:dd:d5:b7:a4:26:a1:c3:7f:
ab:ee:6b:1f:6f:25:52:ba:ec:fe:4e:b8:97:b7:5e:
f9:9c:49:56:24:c2:4b:49:aa:08:2b:22:27:53:91:
3e:dd:b4:8b:ec:e4:f5:ca:21:fe:21:fb:07:9c:2d:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:02:1E:57:95:1E:7A:67:47:A2:D8:CE:00:AB:EB:D3:1D:17:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1414AD8AD56511EFB6251E50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.32.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:0c:6c:1d:22:ea:73:ed:91:5e:a2:ca:8e:7c:65:d5:37:f9:
f1:e5:24:c0:83:23:1a:e4:d2:e0:b9:c2:70:7b:f5:06:57:1c:
f9:72:62:91:d2:01:8b:70:0a:42:a9:b2:f9:96:b2:7f:69:b8:
8b:0f:6d:a8:59:19:ca:e1:d4:12:df:ab:5a:f7:59:35:63:fa:
93:a1:0b:6e:8c:6b:b0:49:44:16:12:41:bc:35:8d:b1:fc:c9:
be:c9:44:1c:64:f2:50:ca:92:ce:a4:d1:ed:e5:96:3f:74:e8:
59:09:d9:25:bb:c0:08:07:1a:bb:87:c7:c5:1f:83:78:80:6d:
db:5a:02:d9:bb:c0:8f:92:27:97:fd:9b:e9:db:e4:ec:44:d5:
13:c9:15:cf:86:2b:93:3f:03:7c:c6:f6:45:c8:be:c8:f0:b7:
c8:51:6e:02:12:a6:f4:4d:10:3b:5b:39:f9:36:9b:3e:2c:ae:
6d:56:f6:bf:15:68:35:a9:40:6f:26:59:91:de:09:1a:25:43:
65:23:cf:18:9d:05:70:f1:2b:08:1d:83:7f:63:01:40:17:dd:
a6:45:f0:42:45:56:53:56:cc:e3:3c:15:5a:27:60:05:6f:97:
be:85:5a:50:f0:7e:de:c7:59:1b:58:7a:3c:e9:46:06:73:1a:
54:b2:07:04
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQr5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE4MDYyNTU0WhcNMjUwMjIyMDYyNTU0WjAYMRYw
FAYDVQQDEw02NzhiNDk3Ni04OWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsec0yoyUIAS+yRE2aOOFMFuPN45vMV0k12iR110rDH8A4QZ3o8jS/Tpq
dCXkw89vii1WoWoY2WPY/IuNNndEVvg2rHlFEvpRF03nH0swY88tyrqesjPChu4+
TZkwWVBynuXbjNJikXNlK4GcumaotNRBUlu/2vKYVEzitQiVqQ6CIOnWsrrDxWVz
47fQicVQ+yczMucZv1UuIRZfZyoREXRmj+VbhYLd/MLVdrGbtK7VatI2a36MVuo9
dZFqJoBxDERmDP6p8zHG3dW3pCahw3+r7msfbyVSuuz+TriXt175nElWJMJLSaoI
KyInU5E+3bSL7OT1yiH+IfsHnC0YfQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIbQ
Ah5XlR56Z0ei2M4Aq+vTHRdUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNDE0QUQ4QUQ1NjUxMUVGQjYyNTFFNTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnO8gMA0GCSqGSIb3DQEBCwUA
A4IBAQBLDGwdIupz7ZFeosqOfGXVN/nx5STAgyMa5NLgucJwe/UGVxz5cmKR0gGL
cApCqbL5lrJ/abiLD22oWRnK4dQS36ta91k1Y/qToQtujGuwSUQWEkG8NY2x/Mm+
yUQcZPJQypLOpNHt5ZY/dOhZCdklu8AIBxq7h8fFH4N4gG3bWgLZu8CPkieX/Zvp
2+TsRNUTyRXPhiuTPwN8xvZFyL7I8LfIUW4CEqb0TRA7Wzn5Nps+LK5tVva/FWg1
qUBvJlmR3gkaJUNlI88YnQVw8SsIHYN/YwFAF92mRfBCRVZTVszjPBVaJ2AFb5e+
hVpQ8H7ex1kbWHo86UYGcxpUsgcE
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:18:45 2025 by rpki-client