Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CBDC84ADA6511EF8B37BB63762E951A.roa
File: 1CBDC84ADA6511EF8B37BB63762E951A.roa (raw, json)
Hash identifier: 85ZCOndv94oNaLUuNLtUdXagTMe+gmy77YQ9xZomE3I=
Subject key identifier: F1:F1:B6:BF:38:A2:24:17:94:CB:EF:6F:0A:E2:9C:B9:96:C0:90:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CBDC84ADA6511EF8B37BB63762E951A.roa
Signing time: Fri 24 Jan 2025 15:08:48 +0000
ROA not before: Fri 24 Jan 2025 15:08:44 +0000
ROA not after: Sat 01 Mar 2025 15:08:44 +0000
asID: 61112
IP address blocks: 156.231.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69502 (0x10f7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 15:08:44 2025 GMT
Not After : Mar 1 15:08:44 2025 GMT
Subject: CN=6793ad00-7eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:62:f1:17:24:db:28:62:7d:4d:42:09:a6:
13:df:b7:c5:14:60:22:92:e8:81:9f:d0:4e:7e:89:
47:7b:bd:07:64:b3:8b:76:5f:b1:f5:a0:fa:3e:b3:
05:68:78:79:47:f3:72:68:38:b0:36:27:ca:5b:e9:
df:3c:56:44:e2:e9:6b:f5:02:35:dd:39:6b:bc:9b:
a0:5e:37:43:21:b9:4f:69:44:47:62:f9:18:65:44:
63:df:ac:f3:b2:5c:68:f7:12:df:74:67:df:9e:80:
a5:70:7b:60:36:04:21:e7:d0:3b:18:93:bc:19:cc:
63:82:7e:c5:b0:72:0c:7f:22:ea:6f:2b:c9:0c:eb:
82:ed:d3:12:2b:c1:ff:a6:b2:50:50:91:72:28:a7:
29:42:17:a1:7d:af:81:e9:cc:7a:63:c8:01:cb:f1:
39:9a:20:e2:f2:49:4a:c2:65:2b:33:cc:74:d8:49:
67:57:de:06:25:c1:6f:47:57:a8:15:6a:9f:4e:86:
d4:16:e3:20:03:45:95:b6:08:54:6f:c8:33:a9:f1:
8d:f4:cc:2f:5f:8d:c8:46:15:e1:d1:62:2e:e1:e9:
81:12:00:67:66:0a:85:ea:66:98:e6:08:32:e5:36:
8f:81:50:5f:09:93:ea:49:37:23:3d:a1:7c:08:b9:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F1:B6:BF:38:A2:24:17:94:CB:EF:6F:0A:E2:9C:B9:96:C0:90:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CBDC84ADA6511EF8B37BB63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0b:5e:b0:89:5c:56:fc:3a:fa:7b:f4:45:79:04:c0:ea:ba:
20:82:0f:f7:6c:a4:df:d3:8d:94:bc:ad:9a:e6:b7:fd:42:13:
93:c9:31:aa:8f:5c:41:dc:43:0b:9e:e0:eb:b4:40:55:df:71:
7e:5e:75:4d:97:d7:69:2e:6a:ab:81:7f:5a:6f:42:fb:7f:dc:
a9:b7:3e:73:f5:fb:83:e1:9d:6e:b0:10:08:29:e5:b3:ac:ff:
69:80:a6:d6:ab:cf:d8:47:52:1b:fb:87:78:4b:54:5c:53:e3:
a5:d8:5b:c5:a6:06:f3:15:24:c0:59:aa:2c:9f:24:b6:b5:21:
ea:91:33:80:24:5d:e8:24:64:65:e2:ad:05:27:42:54:e1:e5:
18:7b:6d:ce:bc:dc:38:f3:89:4a:19:2d:f4:52:b8:a6:e4:c4:
31:bf:b9:07:91:f3:52:57:4d:a6:94:20:86:92:ea:58:6a:3d:
dc:01:62:d1:f7:9b:a0:1d:6c:7d:1a:1c:7f:2f:c5:04:5b:cb:
e9:11:2b:9a:59:04:28:7b:f8:10:ae:53:b0:9e:ae:d6:d1:14:
90:47:aa:c0:b9:6d:6b:74:21:76:8c:82:c2:af:09:fc:28:86:
fa:a6:f9:aa:eb:2b:dc:eb:79:79:f9:f5:0b:92:9e:27:57:c9:
f0:36:5a:2e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ9+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MTUwODQ0WhcNMjUwMzAxMTUwODQ0WjAYMRYw
FAYDVQQDEw02NzkzYWQwMC03ZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxUZi8Rck2yhifU1CCaYT37fFFGAikuiBn9BOfolHe70HZLOLdl+x9aD6
PrMFaHh5R/NyaDiwNifKW+nfPFZE4ulr9QI13TlrvJugXjdDIblPaURHYvkYZURj
36zzslxo9xLfdGffnoClcHtgNgQh59A7GJO8Gcxjgn7FsHIMfyLqbyvJDOuC7dMS
K8H/prJQUJFyKKcpQhehfa+B6cx6Y8gBy/E5miDi8klKwmUrM8x02ElnV94GJcFv
R1eoFWqfTobUFuMgA0WVtghUb8gzqfGN9MwvX43IRhXh0WIu4emBEgBnZgqF6maY
5ggy5TaPgVBfCZPqSTcjPaF8CLkXWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPHx
tr84oiQXlMvvbwrinLmWwJDaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQ0JEQzg0QURBNjUxMUVGOEIzN0JCNjM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOdvMA0GCSqGSIb3DQEBCwUA
A4IBAQAMC16wiVxW/Dr6e/RFeQTA6roggg/3bKTf042UvK2a5rf9QhOTyTGqj1xB
3EMLnuDrtEBV33F+XnVNl9dpLmqrgX9ab0L7f9yptz5z9fuD4Z1usBAIKeWzrP9p
gKbWq8/YR1Ib+4d4S1RcU+Ol2FvFpgbzFSTAWaosnyS2tSHqkTOAJF3oJGRl4q0F
J0JU4eUYe23OvNw484lKGS30Urim5MQxv7kHkfNSV02mlCCGkupYaj3cAWLR95ug
HWx9Ghx/L8UEW8vpESuaWQQoe/gQrlOwnq7W0RSQR6rAuW1rdCF2jILCrwn8KIb6
pvmq6yvc63l5+fULkp4nV8nwNlou
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:53:39 2025 by rpki-client