Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C950488DA7D11EF9E94CE82762E951A.roa
File: 1C950488DA7D11EF9E94CE82762E951A.roa (raw, json)
Hash identifier: P2MyplO6fPhj1qtw9eMcwtmbB7mY3xuntjTUU5bJb4M=
Subject key identifier: 53:B2:2D:48:C8:FC:58:6B:89:32:30:BB:66:51:29:5D:26:F4:DF:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FF6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C950488DA7D11EF9E94CE82762E951A.roa
Signing time: Fri 24 Jan 2025 18:00:36 +0000
ROA not before: Fri 24 Jan 2025 18:00:32 +0000
ROA not after: Tue 25 Feb 2025 18:00:32 +0000
asID: 44559
IP address blocks: 156.246.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69622 (0x10ff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 18:00:32 2025 GMT
Not After : Feb 25 18:00:32 2025 GMT
Subject: CN=6793d544-7a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:b7:41:5b:2d:d3:fa:0a:b2:91:9d:fb:68:
1b:ed:27:31:2c:81:07:28:55:d5:e6:8b:ad:39:77:
c1:8b:9e:d8:ee:e3:d9:77:09:e8:53:6d:1c:e3:5f:
96:8e:8e:f3:dd:2b:0a:df:89:3b:c8:98:73:f2:2c:
0a:26:e2:63:d0:b8:2f:af:f0:97:c5:99:1d:0a:8c:
df:6a:76:6b:7c:77:1f:7f:d5:f1:92:3c:02:41:94:
d5:e9:55:be:04:82:26:53:f2:da:5e:9f:41:f6:ab:
e5:7c:0a:19:e2:d7:14:36:ef:d2:18:e2:2a:5f:28:
61:a8:33:04:e3:22:fc:ab:c9:9c:7d:ce:4f:03:56:
a4:6a:32:b1:3d:32:b4:ec:de:b9:01:be:dc:09:3c:
73:69:e9:ad:c9:bd:0a:e6:4b:5c:79:35:25:9f:cb:
d0:4c:58:74:cf:61:37:fb:34:70:01:82:3c:98:01:
c0:42:02:73:a2:6f:10:fd:5f:39:f3:e6:67:2d:c1:
c8:48:bc:22:a3:3a:31:9f:12:26:cf:7f:4b:a5:2c:
d3:05:b9:07:91:e8:e3:f4:08:75:51:82:d3:ca:22:
c3:8a:ac:a9:d7:bc:96:d2:69:5b:2a:ae:dd:8d:d4:
19:87:cc:69:fe:38:37:b2:88:8e:a4:b4:2f:84:95:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B2:2D:48:C8:FC:58:6B:89:32:30:BB:66:51:29:5D:26:F4:DF:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C950488DA7D11EF9E94CE82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.152.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:16:f3:44:54:bf:51:18:a5:17:7f:e8:36:1a:23:8e:7c:32:
10:6c:53:51:33:ca:ce:67:e4:c1:0d:b8:71:74:a9:c5:28:50:
4f:7a:dd:d0:c5:89:02:35:a9:e2:49:91:b0:a1:d3:7e:81:3e:
5c:b6:db:7d:e1:97:6f:ae:b2:39:1e:79:c8:62:26:f7:5f:01:
d5:d6:22:e4:2e:0e:ea:b6:e2:e5:50:12:de:18:0f:f3:cd:2c:
c4:e0:05:eb:e3:c1:50:b1:c8:24:12:26:88:03:12:6a:34:92:
80:27:38:c7:64:50:77:69:44:2c:da:ad:80:b1:35:31:80:c1:
1b:cb:63:ab:9f:d7:29:53:09:04:88:52:4e:ba:7c:99:4a:90:
df:72:f0:f3:ee:5e:93:a3:2c:c2:2f:62:3c:5e:ca:6b:3f:74:
df:81:a3:4f:f4:e5:a1:09:40:77:68:35:bd:db:3a:10:6b:a5:
eb:72:dc:85:2a:4b:e5:cd:2b:bf:6a:d6:f5:c2:d0:df:9c:d5:
5c:b6:cb:a1:94:3c:fa:89:d6:ab:a2:1f:a6:89:a2:de:c1:5a:
f1:22:ad:bb:e1:18:9f:30:67:89:b9:c3:3b:69:86:8e:ab:a1:
01:0f:ec:67:72:7d:5f:5c:7b:8e:83:72:f8:0e:2a:f5:ca:c3:
44:16:4d:0a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ/2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MTgwMDMyWhcNMjUwMjI1MTgwMDMyWjAYMRYw
FAYDVQQDEw02NzkzZDU0NC03YThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp/q3QVst0/oKspGd+2gb7ScxLIEHKFXV5outOXfBi57Y7uPZdwnoU20c
41+Wjo7z3SsK34k7yJhz8iwKJuJj0Lgvr/CXxZkdCozfanZrfHcff9XxkjwCQZTV
6VW+BIImU/LaXp9B9qvlfAoZ4tcUNu/SGOIqXyhhqDME4yL8q8mcfc5PA1akajKx
PTK07N65Ab7cCTxzaemtyb0K5ktceTUln8vQTFh0z2E3+zRwAYI8mAHAQgJzom8Q
/V858+ZnLcHISLwiozoxnxImz39LpSzTBbkHkejj9Ah1UYLTyiLDiqyp17yW0mlb
Kq7djdQZh8xp/jg3soiOpLQvhJUAEwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFOy
LUjI/FhriTIwu2ZRKV0m9N8zMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQzk1MDQ4OERBN0QxMUVGOUU5NENFODI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPaYMA0GCSqGSIb3DQEBCwUA
A4IBAQAfFvNEVL9RGKUXf+g2GiOOfDIQbFNRM8rOZ+TBDbhxdKnFKFBPet3QxYkC
NaniSZGwodN+gT5cttt94ZdvrrI5HnnIYib3XwHV1iLkLg7qtuLlUBLeGA/zzSzE
4AXr48FQscgkEiaIAxJqNJKAJzjHZFB3aUQs2q2AsTUxgMEby2Orn9cpUwkEiFJO
unyZSpDfcvDz7l6ToyzCL2I8XsprP3TfgaNP9OWhCUB3aDW92zoQa6XrctyFKkvl
zSu/atb1wtDfnNVctsuhlDz6idaroh+miaLewVrxIq274RifMGeJucM7aYaOq6EB
D+xncn1fXHuOg3L4Dir1ysNEFk0K
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:55 2025 by rpki-client