Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20D92694DC1911EF9A562D5E762E951A.roa
File: 20D92694DC1911EF9A562D5E762E951A.roa (raw, json)
Hash identifier: VsI7n1aigCVUmuCzr/szqpdZ6NzOKc52pV8x7qDLBME=
Subject key identifier: 26:18:35:90:84:28:F1:B8:BA:1C:F1:03:7C:19:70:C4:68:18:14:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01144C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20D92694DC1911EF9A562D5E762E951A.roa
Signing time: Sun 26 Jan 2025 19:09:56 +0000
ROA not before: Sun 26 Jan 2025 19:09:52 +0000
ROA not after: Fri 07 Feb 2025 19:09:52 +0000
asID: 399077
IP address blocks: 156.248.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70732 (0x1144c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 19:09:52 2025 GMT
Not After : Feb 7 19:09:52 2025 GMT
Subject: CN=67968883-54f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:2e:f4:4c:c9:b7:30:60:7e:5d:ea:83:9b:
84:50:9a:f6:47:86:3a:59:6a:87:bb:b6:0b:50:d6:
21:65:1d:09:24:ed:16:33:98:7e:75:d6:a8:62:3e:
02:87:ce:87:7e:b2:81:76:b2:a0:6d:bd:70:d0:48:
52:96:ca:a8:35:76:eb:ec:df:0e:2c:a6:84:a3:67:
f5:fb:cd:7a:bf:b6:bf:8b:d3:cd:a3:9f:0a:09:18:
37:f8:d1:6a:7e:78:f1:1d:71:f8:ce:4c:74:a8:06:
70:e1:9a:5a:f4:c9:72:d0:9f:55:6b:d9:3d:f0:73:
20:f2:42:3b:c8:10:9f:42:08:d2:37:cf:68:93:77:
e0:c6:82:c6:25:1c:d9:b8:cf:c7:2c:ac:07:33:b3:
85:c1:9f:64:a0:a4:4f:8a:bf:6d:f8:b1:74:f5:d4:
97:8f:df:72:3f:ff:03:7a:a4:f4:89:b7:61:5d:d2:
4f:5e:a9:e8:02:3f:ad:87:20:ff:61:ba:ec:8d:1d:
93:e0:a2:3d:74:65:12:fa:38:42:2f:db:46:66:d9:
58:95:55:a8:d9:ad:ec:da:66:18:c5:b3:37:c8:5a:
b1:14:b4:66:32:bb:1c:71:51:fb:4d:76:a9:be:e8:
cd:2a:a5:ac:89:11:69:43:02:0c:cc:19:16:e5:33:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:18:35:90:84:28:F1:B8:BA:1C:F1:03:7C:19:70:C4:68:18:14:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20D92694DC1911EF9A562D5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.77.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e3:04:9a:42:85:3b:6e:2b:0b:2c:52:fd:f2:d2:6b:ae:af:
40:30:14:06:8d:26:c8:0b:16:ec:42:3e:f3:c9:03:df:67:23:
c4:e3:86:30:dd:76:6b:5b:01:fe:b0:a8:72:44:df:a7:f0:8a:
39:6a:e8:cc:ae:3a:69:ee:0f:e2:55:ba:2b:0e:54:ad:46:d2:
6e:11:14:98:ee:43:52:a7:c4:cd:ac:55:30:c7:91:14:b5:4c:
3d:ab:3c:a7:3a:25:62:e5:5e:74:06:77:b5:9d:d2:82:62:82:
81:1f:b9:88:93:1f:85:77:64:0a:50:bd:23:64:17:17:87:3a:
0c:e5:86:86:d0:41:87:19:11:17:a4:e9:e5:77:a4:d5:fd:4f:
fb:9f:74:a8:85:33:ae:81:a4:f6:50:90:b2:a5:c7:4b:83:5c:
c2:fa:f2:c4:a5:d8:08:92:ca:8f:3d:0f:01:12:3d:87:d7:7c:
d3:ca:45:fe:77:fb:0f:75:1b:76:9d:42:44:9a:8a:ba:c8:ab:
e7:e5:bd:84:47:6a:9f:a5:17:6c:37:c7:a0:f5:3d:d1:e7:d9:
94:db:82:28:a3:ce:e2:eb:87:d9:a8:d5:e7:f3:0c:f4:d4:1f:
57:d0:5b:9d:50:e9:de:67:e5:22:2d:77:91:18:12:be:b0:35:
1b:20:a6:f7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARRMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI2MTkwOTUyWhcNMjUwMjA3MTkwOTUyWjAYMRYw
FAYDVQQDEw02Nzk2ODg4My01NGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyWIu9EzJtzBgfl3qg5uEUJr2R4Y6WWqHu7YLUNYhZR0JJO0WM5h+ddao
Yj4Ch86HfrKBdrKgbb1w0EhSlsqoNXbr7N8OLKaEo2f1+816v7a/i9PNo58KCRg3
+NFqfnjxHXH4zkx0qAZw4Zpa9Mly0J9Va9k98HMg8kI7yBCfQgjSN89ok3fgxoLG
JRzZuM/HLKwHM7OFwZ9koKRPir9t+LF09dSXj99yP/8DeqT0ibdhXdJPXqnoAj+t
hyD/YbrsjR2T4KI9dGUS+jhCL9tGZtlYlVWo2a3s2mYYxbM3yFqxFLRmMrsccVH7
TXapvujNKqWsiRFpQwIMzBkW5TNERQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCYY
NZCEKPG4uhzxA3wZcMRoGBS8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMEQ5MjY5NERDMTkxMUVGOUE1NjJENUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPhNMA0GCSqGSIb3DQEBCwUA
A4IBAQAZ4wSaQoU7bisLLFL98tJrrq9AMBQGjSbICxbsQj7zyQPfZyPE44Yw3XZr
WwH+sKhyRN+n8Io5aujMrjpp7g/iVborDlStRtJuERSY7kNSp8TNrFUwx5EUtUw9
qzynOiVi5V50Bne1ndKCYoKBH7mIkx+Fd2QKUL0jZBcXhzoM5YaG0EGHGREXpOnl
d6TV/U/7n3SohTOugaT2UJCypcdLg1zC+vLEpdgIksqPPQ8BEj2H13zTykX+d/sP
dRt2nUJEmoq6yKvn5b2ER2qfpRdsN8eg9T3R59mU24Ioo87i64fZqNXn8wz01B9X
0FudUOneZ+UiLXeRGBK+sDUbIKb3
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:04 2025 by rpki-client