Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20C5ACB0DCD511EFAEECF551762E951A.roa
File: 20C5ACB0DCD511EFAEECF551762E951A.roa (raw, json)
Hash identifier: vy9ohLdvq9LjpLv+AS75hilUCRwgB9G0Pq0mJuwN3a4=
Subject key identifier: BD:99:8C:54:5B:44:91:5F:CE:F8:E5:75:7D:C8:96:DE:ED:C8:F7:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01155F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20C5ACB0DCD511EFAEECF551762E951A.roa
Signing time: Mon 27 Jan 2025 17:35:41 +0000
ROA not before: Mon 27 Jan 2025 17:35:37 +0000
ROA not after: Sat 15 Feb 2025 17:35:37 +0000
asID: 39600
IP address blocks: 156.237.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71007 (0x1155f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:35:37 2025 GMT
Not After : Feb 15 17:35:37 2025 GMT
Subject: CN=6797c3ed-877d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:40:cf:fb:f5:49:8b:ef:5d:26:1e:3b:0f:
e4:de:d8:10:b8:3e:31:90:17:03:8a:b0:20:25:21:
ff:c8:43:03:fc:38:b2:a6:64:9b:76:75:a3:5b:0e:
46:9f:73:4d:90:ad:88:20:2d:aa:40:ee:54:30:70:
ea:68:eb:a6:6e:7f:35:b0:83:90:9d:af:a8:e6:bc:
71:a7:45:ea:06:a1:e9:b6:e4:2f:79:2c:6f:db:dd:
c4:6d:fd:36:38:0f:6a:b4:23:19:65:87:b5:3b:38:
62:1e:0e:d2:82:31:dd:7e:67:38:4e:be:1e:8d:19:
ed:fc:ef:2f:d5:1e:48:70:0d:da:30:e8:4a:4a:1c:
ba:5e:1e:bf:76:b7:d3:9e:79:a8:88:7b:36:ab:29:
9c:af:bb:87:44:78:eb:06:a0:f8:3d:f4:f7:07:e1:
17:2e:c8:85:77:e7:e8:d3:bf:fa:5e:f6:20:ef:48:
de:82:d2:4d:2f:1b:76:55:3c:93:21:6b:53:6e:a9:
15:0f:27:2e:0d:85:f4:67:38:f6:34:af:55:05:8e:
3b:18:f7:e8:32:f0:6b:02:b6:38:be:ab:23:ca:b2:
44:44:91:5f:c9:e6:6c:d5:ec:6b:e6:46:b9:22:69:
f8:8b:03:09:22:e4:5b:e7:81:3c:98:ae:b4:10:65:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:99:8C:54:5B:44:91:5F:CE:F8:E5:75:7D:C8:96:DE:ED:C8:F7:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20C5ACB0DCD511EFAEECF551762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.124.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c3:a8:eb:18:73:c1:97:b6:03:02:66:25:c7:a8:8f:9f:61:
7f:53:e3:d6:67:f9:96:e8:9a:95:9d:5b:44:e5:2d:67:cd:24:
30:f0:5a:ad:0d:7d:1d:a5:58:f4:a3:08:02:ee:19:ce:48:7c:
64:40:9f:f8:b5:2b:54:cb:6b:9f:a8:7b:76:f4:b2:cf:90:83:
0e:c6:66:17:5c:d3:12:24:ee:12:b8:c0:fd:cc:ca:1c:e8:b6:
9f:17:c1:3e:26:76:5e:d6:8b:2c:0c:47:ba:d1:a3:8a:30:38:
70:6d:00:03:7e:a5:4d:6c:7d:09:81:35:78:65:8b:5e:75:e5:
63:d6:b2:8f:89:bb:94:8c:09:50:b2:cd:fa:38:d0:2b:76:06:
3c:9a:55:ff:f4:09:14:fa:53:5e:43:43:f4:9f:e0:e4:d9:80:
6a:30:5c:c6:c3:10:0f:b6:04:30:13:ef:64:29:03:bf:81:d2:
c6:55:62:42:f2:1d:21:47:f7:b0:b8:a7:1c:e2:3b:95:c7:f9:
49:73:7d:0f:f1:02:35:cb:67:57:06:23:be:6b:bb:9e:91:cf:
05:d5:f1:f5:88:f4:35:fb:b1:ca:26:4a:5e:6a:6c:00:85:8f:
3d:5e:87:3a:73:3d:de:f7:8e:ea:20:3e:9e:94:d1:2c:6b:8a:
f4:ad:46:2d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARVfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MTczNTM3WhcNMjUwMjE1MTczNTM3WjAYMRYw
FAYDVQQDEw02Nzk3YzNlZC04NzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuEJAz/v1SYvvXSYeOw/k3tgQuD4xkBcDirAgJSH/yEMD/DiypmSbdnWj
Ww5Gn3NNkK2IIC2qQO5UMHDqaOumbn81sIOQna+o5rxxp0XqBqHptuQveSxv293E
bf02OA9qtCMZZYe1OzhiHg7SgjHdfmc4Tr4ejRnt/O8v1R5IcA3aMOhKShy6Xh6/
drfTnnmoiHs2qymcr7uHRHjrBqD4PfT3B+EXLsiFd+fo07/6XvYg70jegtJNLxt2
VTyTIWtTbqkVDycuDYX0Zzj2NK9VBY47GPfoMvBrArY4vqsjyrJERJFfyeZs1exr
5ka5Imn4iwMJIuRb54E8mK60EGXguwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL2Z
jFRbRJFfzvjldX3Ilt7tyPeDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMEM1QUNCMERDRDUxMUVGQUVFQ0Y1NTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO18MA0GCSqGSIb3DQEBCwUA
A4IBAQBBw6jrGHPBl7YDAmYlx6iPn2F/U+PWZ/mW6JqVnVtE5S1nzSQw8FqtDX0d
pVj0owgC7hnOSHxkQJ/4tStUy2ufqHt29LLPkIMOxmYXXNMSJO4SuMD9zMoc6Laf
F8E+JnZe1ossDEe60aOKMDhwbQADfqVNbH0JgTV4ZYtedeVj1rKPibuUjAlQss36
ONArdgY8mlX/9AkU+lNeQ0P0n+Dk2YBqMFzGwxAPtgQwE+9kKQO/gdLGVWJC8h0h
R/ewuKcc4juVx/lJc30P8QI1y2dXBiO+a7uekc8F1fH1iPQ1+7HKJkpeamwAhY89
Xoc6cz3e947qID6elNEsa4r0rUYt
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:46:52 2025 by rpki-client