Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A5CABACDBFA11EF9D3FD290762E951A.roa
File: 1A5CABACDBFA11EF9D3FD290762E951A.roa (raw, json)
Hash identifier: kkuSuGJ3PfzRpOMmb3+q2TTMxHFdn0GkSYyVfEDVvYA=
Subject key identifier: 42:B0:4C:97:B6:8E:A7:45:90:EC:79:92:4A:8B:FE:9E:96:0C:81:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A5CABACDBFA11EF9D3FD290762E951A.roa
Signing time: Sun 26 Jan 2025 15:27:50 +0000
ROA not before: Sun 26 Jan 2025 15:27:47 +0000
ROA not after: Sun 23 Mar 2025 15:27:47 +0000
asID: 138915
IP address blocks: 156.225.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70618 (0x113da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 15:27:47 2025 GMT
Not After : Mar 23 15:27:47 2025 GMT
Subject: CN=67965476-2f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:01:07:03:d7:c9:da:c3:3c:b1:fc:60:e5:
bb:c3:19:48:c9:cb:03:d8:f9:60:3b:f9:8b:6a:f9:
56:87:94:95:45:b9:d9:71:a0:84:96:ee:fc:2f:94:
db:11:5d:34:de:b4:41:62:4d:9e:d4:f2:30:9f:73:
f4:59:24:d2:6d:df:5f:95:ed:db:63:32:ca:13:81:
1c:a5:20:c1:bf:54:a9:71:02:86:4b:27:79:8c:2d:
b3:26:a1:54:50:f8:c7:72:21:dc:ce:d6:93:2e:98:
3f:5b:bd:a7:6e:9c:d7:01:a0:5c:f9:56:76:45:7c:
4b:cf:4b:15:e5:40:da:70:23:43:45:6b:07:ff:4f:
33:6d:0f:14:f8:43:7d:56:b4:59:95:6e:45:48:12:
90:62:1c:37:5b:4a:d6:68:68:73:ee:74:57:4a:8a:
3e:f9:5a:07:93:c2:62:2a:5f:90:fc:05:68:fa:a6:
c2:7e:ca:0f:61:af:d9:21:0e:9b:a8:40:41:d8:c4:
d3:0c:87:d2:13:3e:48:76:12:07:d4:2c:56:f2:7e:
39:5e:c3:e1:75:08:ea:7c:32:5b:fe:15:a6:d9:a6:
dd:8f:16:70:93:87:6f:cb:fe:eb:da:e0:11:f9:6b:
e3:ec:01:b3:04:d4:d6:02:bf:2c:86:dc:9e:74:4a:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B0:4C:97:B6:8E:A7:45:90:EC:79:92:4A:8B:FE:9E:96:0C:81:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A5CABACDBFA11EF9D3FD290762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.117.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ed:67:7e:05:1f:89:9a:70:1b:50:c8:9a:d9:04:a5:b6:91:
42:d5:97:b2:6b:0b:5f:e9:2f:3a:73:70:2b:f3:16:d5:de:12:
4c:5d:89:06:5a:13:56:20:2f:b1:72:17:cd:63:e1:e2:92:9d:
35:77:66:92:50:c7:e0:ac:46:4c:d9:31:15:ca:68:54:72:c2:
69:b6:43:25:5f:14:2b:f7:5a:30:9c:17:72:e7:7e:3f:81:fd:
63:2a:c8:5a:b3:a5:22:82:2f:f8:05:9f:a6:d2:3c:97:47:26:
bb:46:72:dd:c3:c6:81:b4:15:d3:e5:cd:b2:79:74:7a:dd:85:
aa:40:93:04:d4:2e:39:76:b4:5d:35:17:bf:e5:0a:22:e1:b0:
ff:18:b6:fd:9c:40:fd:ef:62:2e:01:8f:75:7b:44:3c:ea:c6:
c7:fc:bc:f7:98:b5:97:d6:11:0c:b4:97:9f:02:e7:92:4d:a4:
3e:2a:b0:cf:a1:02:fb:30:2d:2c:b1:a0:52:26:6c:18:22:99:
cb:1c:ae:c6:42:1e:b6:db:c1:fc:ed:1b:ba:d7:7a:30:32:71:
fe:68:d4:48:2b:36:03:f6:45:5d:f3:b6:2e:c4:62:bf:46:d6:
06:8a:24:44:3e:e2:b2:78:1c:ba:e4:7c:96:2e:21:f1:77:ef:
f2:32:20:10
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARPaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI2MTUyNzQ3WhcNMjUwMzIzMTUyNzQ3WjAYMRYw
FAYDVQQDEw02Nzk2NTQ3Ni0yZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyqoBBwPXydrDPLH8YOW7wxlIycsD2PlgO/mLavlWh5SVRbnZcaCElu78
L5TbEV003rRBYk2e1PIwn3P0WSTSbd9fle3bYzLKE4EcpSDBv1SpcQKGSyd5jC2z
JqFUUPjHciHcztaTLpg/W72nbpzXAaBc+VZ2RXxLz0sV5UDacCNDRWsH/08zbQ8U
+EN9VrRZlW5FSBKQYhw3W0rWaGhz7nRXSoo++VoHk8JiKl+Q/AVo+qbCfsoPYa/Z
IQ6bqEBB2MTTDIfSEz5IdhIH1CxW8n45XsPhdQjqfDJb/hWm2abdjxZwk4dvy/7r
2uAR+Wvj7AGzBNTWAr8shtyedEpkzQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEKw
TJe2jqdFkOx5kkqL/p6WDIF+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQTVDQUJBQ0RCRkExMUVGOUQzRkQyOTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOF1MA0GCSqGSIb3DQEBCwUA
A4IBAQBZ7Wd+BR+JmnAbUMia2QSltpFC1Zeyawtf6S86c3Ar8xbV3hJMXYkGWhNW
IC+xchfNY+Hikp01d2aSUMfgrEZM2TEVymhUcsJptkMlXxQr91ownBdy534/gf1j
Kshas6Uigi/4BZ+m0jyXRya7RnLdw8aBtBXT5c2yeXR63YWqQJME1C45drRdNRe/
5Qoi4bD/GLb9nED972IuAY91e0Q86sbH/Lz3mLWX1hEMtJefAueSTaQ+KrDPoQL7
MC0ssaBSJmwYIpnLHK7GQh6228H87Ru613owMnH+aNRIKzYD9kVd87YuxGK/RtYG
iiREPuKyeBy65HyWLiHxd+/yMiAQ
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:40:35 2025 by rpki-client