Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2384A5A0DC9411EF8FBD21A1762E951A.roa
File: 2384A5A0DC9411EF8FBD21A1762E951A.roa (raw, json)
Hash identifier: Mjqa8kLzlMui/pJKLh4qvrpRig9cW4hcXwzn0TVYKug=
Subject key identifier: 52:AA:10:56:4F:0F:75:CA:BB:34:14:CC:D3:B5:22:A8:BC:F2:CC:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2384A5A0DC9411EF8FBD21A1762E951A.roa
Signing time: Mon 27 Jan 2025 09:50:28 +0000
ROA not before: Mon 27 Jan 2025 09:50:25 +0000
ROA not after: Sat 08 Feb 2025 09:50:25 +0000
asID: 5065
IP address blocks: 156.239.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70857 (0x114c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 09:50:25 2025 GMT
Not After : Feb 8 09:50:25 2025 GMT
Subject: CN=679756e4-7453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:01:09:43:0f:2d:8f:1e:14:e2:63:b3:87:
cc:09:e1:e0:99:41:ac:ae:35:14:66:ba:9b:f9:2e:
88:12:13:a5:72:e3:1f:74:0d:37:46:11:8f:95:ab:
19:ae:b0:8d:79:da:ec:d6:0e:a7:63:d8:03:6f:53:
78:06:9c:1d:fe:97:7e:71:48:84:0d:07:ea:e7:d9:
a5:6e:75:ce:06:f8:81:52:a1:74:90:c3:8a:98:ba:
ce:64:c1:79:9c:ef:f7:de:d7:b1:b9:36:a5:e1:20:
01:eb:24:9e:b5:20:ab:a4:4b:28:bc:b4:7a:91:63:
f5:6b:28:35:3f:b2:ba:a8:03:c3:9b:ba:b3:c7:2e:
c5:e4:dc:a1:7b:e4:9b:17:84:c6:dc:68:2e:c9:b4:
3a:89:62:c2:3a:23:38:e4:3a:c6:aa:df:ac:8b:ca:
ef:90:ee:fe:09:86:b2:3f:d7:5a:9c:52:58:99:ff:
a3:6e:0f:1f:cf:35:78:00:21:7c:6e:b7:c7:66:64:
e7:17:84:89:4b:05:cd:1a:98:b4:80:1a:c2:02:1f:
29:a7:2c:32:67:6b:bf:6f:19:e8:4e:3d:ee:b9:54:
e4:2e:0a:ee:c3:9c:4e:b3:7d:98:dc:cb:6d:27:c8:
e9:7f:ea:c1:02:ba:8b:76:3f:d4:c4:b6:34:d9:e6:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:10:56:4F:0F:75:CA:BB:34:14:CC:D3:B5:22:A8:BC:F2:CC:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2384A5A0DC9411EF8FBD21A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.140.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1a:bf:87:89:f6:a0:6a:eb:8c:6e:b0:f0:86:b1:76:9e:df:
df:85:a1:a3:b7:51:8d:9e:89:d1:ba:37:d4:8b:c5:fb:51:64:
2b:5d:ae:6e:5e:a6:94:58:31:2d:9a:fa:6c:9e:ce:c9:15:05:
35:5d:ce:7b:fc:3d:24:8c:5d:48:fe:3c:33:22:78:b2:58:35:
9c:7a:f9:08:9f:b3:82:63:95:44:09:4c:a0:b9:42:49:6d:85:
74:e0:d9:c3:13:7b:74:b4:a0:03:c3:00:b2:63:69:17:58:a8:
71:e0:25:a3:38:74:7b:0b:53:d3:70:3a:df:b9:6b:cb:54:81:
45:e8:aa:41:2b:1c:af:98:41:c5:22:d0:36:47:ce:ce:bf:b3:
7e:5a:a2:34:a4:68:ff:fb:ce:f8:e0:da:2f:3b:68:ee:89:e0:
02:8b:ec:c2:7e:0f:8d:74:46:0d:63:74:c3:f8:83:6f:0e:bb:
bf:fd:a1:d6:55:8d:57:31:dc:0a:7f:0e:98:e2:fb:ce:2b:78:
83:02:44:64:9b:df:14:ea:45:9b:d6:5e:12:83:4b:b1:7b:35:
42:ce:c8:d6:92:34:c0:5a:1f:d0:9d:6a:4e:6c:ff:49:c0:71:
5d:46:7d:32:0c:fb:6e:2d:65:c4:d5:e0:44:38:6a:3e:1c:b8:
bc:79:ef:c8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARTJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MDk1MDI1WhcNMjUwMjA4MDk1MDI1WjAYMRYw
FAYDVQQDEw02Nzk3NTZlNC03NDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtREBCUMPLY8eFOJjs4fMCeHgmUGsrjUUZrqb+S6IEhOlcuMfdA03RhGP
lasZrrCNedrs1g6nY9gDb1N4Bpwd/pd+cUiEDQfq59mlbnXOBviBUqF0kMOKmLrO
ZMF5nO/33texuTal4SAB6ySetSCrpEsovLR6kWP1ayg1P7K6qAPDm7qzxy7F5Nyh
e+SbF4TG3GguybQ6iWLCOiM45DrGqt+si8rvkO7+CYayP9danFJYmf+jbg8fzzV4
ACF8brfHZmTnF4SJSwXNGpi0gBrCAh8ppywyZ2u/bxnoTj3uuVTkLgruw5xOs32Y
3MttJ8jpf+rBArqLdj/UxLY02ea/lwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFKq
EFZPD3XKuzQUzNO1Iqi88syAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMzg0QTVBMERDOTQxMUVGOEZCRDIxQTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO+MMA0GCSqGSIb3DQEBCwUA
A4IBAQCSGr+HifagauuMbrDwhrF2nt/fhaGjt1GNnonRujfUi8X7UWQrXa5uXqaU
WDEtmvpsns7JFQU1Xc57/D0kjF1I/jwzIniyWDWcevkIn7OCY5VECUyguUJJbYV0
4NnDE3t0tKADwwCyY2kXWKhx4CWjOHR7C1PTcDrfuWvLVIFF6KpBKxyvmEHFItA2
R87Ov7N+WqI0pGj/+8744NovO2juieACi+zCfg+NdEYNY3TD+INvDru//aHWVY1X
MdwKfw6Y4vvOK3iDAkRkm98U6kWb1l4Sg0uxezVCzsjWkjTAWh/QnWpObP9JwHFd
Rn0yDPtuLWXE1eBEOGo+HLi8ee/I
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:49 2025 by rpki-client