Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EFB2DE0DA8411EF84382EB0762E951A.roa
File: 1EFB2DE0DA8411EF84382EB0762E951A.roa (raw, json)
Hash identifier: TA+25uQyXAy5lsgnw6ti6LINlUxKo02t3dAv/DX6dvY=
Subject key identifier: 6D:0B:75:E4:1E:CC:B3:65:6E:43:95:83:4F:A8:D9:92:8B:02:67:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011024
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EFB2DE0DA8411EF84382EB0762E951A.roa
Signing time: Fri 24 Jan 2025 18:50:46 +0000
ROA not before: Fri 24 Jan 2025 18:50:43 +0000
ROA not after: Tue 25 Feb 2025 18:50:43 +0000
asID: 44559
IP address blocks: 156.246.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69668 (0x11024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 18:50:43 2025 GMT
Not After : Feb 25 18:50:43 2025 GMT
Subject: CN=6793e106-b448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:90:fd:29:e5:b9:c2:37:e2:b2:4e:17:09:
5a:f0:c3:a4:51:a2:63:b4:0f:c3:ad:36:64:39:78:
ee:1c:7c:b9:f4:a4:e5:fe:e9:b0:7d:0c:b7:c8:1a:
3a:ae:f5:57:86:c5:1e:d1:d4:0d:3c:aa:eb:a9:ec:
a8:20:99:98:f8:9c:46:3e:26:4b:0e:39:7a:fa:5e:
52:6a:03:ca:27:2b:5e:77:80:53:90:8f:02:b0:28:
37:03:9c:5e:b4:a4:10:c3:9e:44:11:6b:dd:fa:43:
13:82:73:d5:27:32:e0:0f:a0:95:56:8d:6c:74:07:
be:01:3e:50:df:6f:a4:8d:59:e8:45:35:33:f7:8f:
b6:3b:4f:0c:17:46:76:98:6c:ec:ae:9f:c1:e5:a1:
c2:37:1a:25:de:e6:38:f4:16:b7:5f:43:48:a2:16:
32:cf:14:bc:b4:b6:c6:66:b8:36:0f:52:c6:a8:86:
be:b5:15:17:d8:64:e6:96:6f:ad:76:77:33:6e:aa:
4c:08:bf:85:e8:52:c1:80:9d:9a:00:e7:97:23:9f:
a9:8c:49:78:60:2a:d9:3e:ea:3c:7b:2e:82:cc:94:
34:9d:9c:a9:0b:ec:d3:ab:94:cb:0f:95:f6:5a:1e:
2f:05:0b:25:79:48:98:7e:15:63:60:b6:5c:3f:22:
03:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0B:75:E4:1E:CC:B3:65:6E:43:95:83:4F:A8:D9:92:8B:02:67:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EFB2DE0DA8411EF84382EB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.180.0/24
Signature Algorithm: sha256WithRSAEncryption
95:9f:94:4a:66:e1:ab:26:af:c1:27:ab:68:ad:6b:f4:71:e5:
33:5d:9f:90:45:64:d3:e5:2b:2b:0e:45:cb:d2:76:b2:7e:9f:
2f:54:90:0d:6f:d9:d2:28:21:20:58:6b:e3:9a:47:ac:f5:68:
b7:77:0f:d6:cf:81:4d:17:fb:12:07:92:a8:7a:fc:69:ec:51:
6f:2a:33:44:4f:d7:57:c5:ef:58:fe:45:3d:f1:e2:2f:c3:51:
7b:e4:7a:1d:c1:b1:5b:1a:b2:67:4a:40:47:45:9f:d6:e8:4f:
53:4f:fe:ff:65:f3:e9:2e:ca:dc:c6:ce:57:d3:ec:d7:7b:ff:
e2:46:78:80:b1:06:db:d5:da:93:7e:39:fa:11:95:5b:41:04:
88:82:01:5b:87:13:86:13:5b:a6:e0:60:f0:6e:d2:a2:37:31:
ce:ba:86:7e:17:92:af:8a:61:71:f1:2b:a2:64:d4:a3:26:9e:
40:27:35:58:55:d9:a5:e3:cd:d8:4b:34:3c:b6:fa:c3:57:05:
d2:6b:5e:8b:19:a9:82:a7:13:ab:d7:df:cb:e4:af:7b:56:24:
28:d6:6e:cb:63:4e:af:b9:86:37:f0:15:23:a3:b2:96:20:b5:
e6:e7:b8:a4:8e:4f:69:db:11:1a:30:ba:dc:b0:a0:6e:fd:e4:
fa:6f:9a:0d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARAkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MTg1MDQzWhcNMjUwMjI1MTg1MDQzWjAYMRYw
FAYDVQQDEw02NzkzZTEwNi1iNDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzquQ/SnlucI34rJOFwla8MOkUaJjtA/DrTZkOXjuHHy59KTl/umwfQy3
yBo6rvVXhsUe0dQNPKrrqeyoIJmY+JxGPiZLDjl6+l5SagPKJyted4BTkI8CsCg3
A5xetKQQw55EEWvd+kMTgnPVJzLgD6CVVo1sdAe+AT5Q32+kjVnoRTUz94+2O08M
F0Z2mGzsrp/B5aHCNxol3uY49Ba3X0NIohYyzxS8tLbGZrg2D1LGqIa+tRUX2GTm
lm+tdnczbqpMCL+F6FLBgJ2aAOeXI5+pjEl4YCrZPuo8ey6CzJQ0nZypC+zTq5TL
D5X2Wh4vBQsleUiYfhVjYLZcPyID6wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG0L
deQezLNlbkOVg0+o2ZKLAmchMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRUZCMkRFMERBODQxMUVGODQzODJFQjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPa0MA0GCSqGSIb3DQEBCwUA
A4IBAQCVn5RKZuGrJq/BJ6torWv0ceUzXZ+QRWTT5SsrDkXL0nayfp8vVJANb9nS
KCEgWGvjmkes9Wi3dw/Wz4FNF/sSB5Koevxp7FFvKjNET9dXxe9Y/kU98eIvw1F7
5HodwbFbGrJnSkBHRZ/W6E9TT/7/ZfPpLsrcxs5X0+zXe//iRniAsQbb1dqTfjn6
EZVbQQSIggFbhxOGE1um4GDwbtKiNzHOuoZ+F5KvimFx8SuiZNSjJp5AJzVYVdml
483YSzQ8tvrDVwXSa16LGamCpxOr19/L5K97ViQo1m7LY06vuYY38BUjo7KWILXm
57ikjk9p2xEaMLrcsKBu/eT6b5oN
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:30 2025 by rpki-client