Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1947F776DB1911EF800E7AA6762E951A.roa
File: 1947F776DB1911EF800E7AA6762E951A.roa (raw, json)
Hash identifier: wB3mi7P2USp/9hbsraesgvulPm6NmoiqqEP86+Lyf70=
Subject key identifier: 08:04:12:70:C5:46:18:6B:52:28:0E:C8:B9:5C:03:40:6E:53:62:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01124B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1947F776DB1911EF800E7AA6762E951A.roa
Signing time: Sat 25 Jan 2025 12:37:12 +0000
ROA not before: Sat 25 Jan 2025 12:37:08 +0000
ROA not after: Sat 01 Feb 2025 12:37:08 +0000
asID: 137547
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70219 (0x1124b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 12:37:08 2025 GMT
Not After : Feb 1 12:37:08 2025 GMT
Subject: CN=6794daf8-7bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:d2:7b:13:66:7b:98:60:02:63:ec:6c:d8:
8a:8e:89:73:e1:7c:d8:c0:6d:d8:e7:71:fa:2e:ff:
04:3b:ce:57:36:24:56:fc:fc:3b:51:33:da:db:2c:
aa:61:69:4f:f5:bd:c1:b0:c9:34:db:e3:0a:96:3e:
20:1f:5e:54:06:1a:87:43:59:9f:dc:f1:8e:4c:de:
76:9c:bf:f2:2f:d2:65:19:29:75:d6:44:9c:ff:4b:
c7:b6:19:40:b8:52:56:0b:fd:8f:fc:0b:74:8e:05:
98:cb:8c:da:cf:e6:60:43:dd:8d:73:2b:2f:40:53:
f7:cf:97:c6:f2:24:8d:97:29:0a:00:02:7b:99:e3:
07:5a:c1:81:cc:e6:d9:e9:21:84:80:10:f0:61:7e:
6a:e7:82:f8:b3:86:89:d5:59:4e:37:7d:bb:af:31:
e9:50:74:52:24:00:4a:74:92:2e:84:2a:4a:e0:bd:
b8:96:7a:ee:51:eb:cc:a4:8d:87:ee:00:0d:d7:e0:
4d:7f:d1:bf:32:32:ed:3e:35:db:13:92:c6:95:76:
07:39:db:d1:8b:11:a9:cb:81:4b:66:73:9b:2f:cf:
66:39:38:49:81:cc:e9:e2:cf:b1:5a:a2:7f:2c:8b:
04:69:95:df:07:8f:57:f4:e0:70:2a:37:48:b8:92:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:04:12:70:C5:46:18:6B:52:28:0E:C8:B9:5C:03:40:6E:53:62:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1947F776DB1911EF800E7AA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
58:9d:41:fa:6d:0e:4a:f7:dc:28:81:07:ab:1b:db:bd:81:03:
76:3b:44:af:9c:b3:20:00:04:ed:1a:1d:f6:9d:36:b6:f8:82:
38:e4:da:2a:7f:ae:10:ce:ee:0c:2e:44:48:47:7a:fb:34:91:
a1:0d:5f:1b:50:d6:af:23:1d:4d:be:c2:40:2e:e3:26:0a:b3:
1e:a6:9c:9f:b4:eb:14:e0:29:15:02:89:ed:c8:9f:ea:6f:de:
d5:e0:1f:c4:1b:2e:cb:43:07:5a:25:5e:4b:24:33:c0:6a:5f:
48:d3:22:c3:2c:5f:ab:5c:c1:b8:5b:48:9a:4d:75:29:89:8b:
75:fd:f8:a3:24:31:e6:20:1e:c6:4f:13:df:b7:6b:25:52:c4:
12:fe:e0:60:d6:49:60:40:9e:f3:c8:23:67:b2:58:bd:80:45:
77:38:39:c1:54:ed:ec:ac:03:e6:29:d0:c9:74:f1:31:b9:9d:
8b:89:4b:57:67:b3:e0:c3:dc:b7:d5:5b:5e:53:c9:33:ce:5f:
0a:6d:d9:ea:0b:69:11:6a:54:4c:74:ad:c1:2d:32:d2:90:27:
e6:11:5d:c5:09:da:e7:94:13:d6:93:f1:7f:d1:3a:bf:af:44:
68:6c:81:55:f1:e6:94:fe:17:db:1a:67:bc:2a:ac:59:7b:f9:
76:39:21:2e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARJLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTIzNzA4WhcNMjUwMjAxMTIzNzA4WjAYMRYw
FAYDVQQDEw02Nzk0ZGFmOC03YmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlzXSexNme5hgAmPsbNiKjolz4XzYwG3Y53H6Lv8EO85XNiRW/Pw7UTPa
2yyqYWlP9b3BsMk02+MKlj4gH15UBhqHQ1mf3PGOTN52nL/yL9JlGSl11kSc/0vH
thlAuFJWC/2P/At0jgWYy4zaz+ZgQ92NcysvQFP3z5fG8iSNlykKAAJ7meMHWsGB
zObZ6SGEgBDwYX5q54L4s4aJ1VlON327rzHpUHRSJABKdJIuhCpK4L24lnruUevM
pI2H7gAN1+BNf9G/MjLtPjXbE5LGlXYHOdvRixGpy4FLZnObL89mOThJgczp4s+x
WqJ/LIsEaZXfB49X9OBwKjdIuJJ5MwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAgE
EnDFRhhrUigOyLlcA0BuU2IPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xOTQ3Rjc3NkRCMTkxMUVGODAwRTdBQTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPXIMA0GCSqGSIb3DQEBCwUA
A4IBAQBYnUH6bQ5K99wogQerG9u9gQN2O0SvnLMgAATtGh32nTa2+II45Noqf64Q
zu4MLkRIR3r7NJGhDV8bUNavIx1NvsJALuMmCrMeppyftOsU4CkVAontyJ/qb97V
4B/EGy7LQwdaJV5LJDPAal9I0yLDLF+rXMG4W0iaTXUpiYt1/fijJDHmIB7GTxPf
t2slUsQS/uBg1klgQJ7zyCNnsli9gEV3ODnBVO3srAPmKdDJdPExuZ2LiUtXZ7Pg
w9y31VteU8kzzl8KbdnqC2kRalRMdK3BLTLSkCfmEV3FCdrnlBPWk/F/0Tq/r0Ro
bIFV8eaU/hfbGme8KqxZe/l2OSEu
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:47:49 2025 by rpki-client