Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C5F481ADB5E11EFA9BE0072762E951A.roa
File: 2C5F481ADB5E11EFA9BE0072762E951A.roa (raw, json)
Hash identifier: TtLEU7MRNGC+tauclcpQxztWdGCOpvdiu+LdyqpWU6o=
Subject key identifier: 13:53:E9:CB:31:06:80:8E:72:29:B5:E3:34:D5:4F:02:FC:B6:05:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01131F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C5F481ADB5E11EFA9BE0072762E951A.roa
Signing time: Sat 25 Jan 2025 20:51:39 +0000
ROA not before: Sat 25 Jan 2025 20:51:35 +0000
ROA not after: Thu 13 Mar 2025 20:51:35 +0000
asID: 138915
IP address blocks: 156.244.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70431 (0x1131f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 20:51:35 2025 GMT
Not After : Mar 13 20:51:35 2025 GMT
Subject: CN=67954edb-23e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:17:1c:bc:bd:52:b1:a5:60:6e:49:0e:25:
4b:30:6a:28:f5:14:64:67:02:dd:00:59:29:83:1a:
ee:16:a8:90:13:d7:fc:85:83:74:ee:7e:4d:e7:6b:
0c:e6:f5:9b:80:24:c2:77:dc:8f:b9:63:a9:68:4c:
17:ac:05:dd:8f:07:47:4a:fa:ed:c5:20:bb:11:c6:
46:3d:05:27:88:f5:b2:3e:37:e1:1e:5c:16:b0:03:
3f:8e:d6:2a:d2:a1:f4:57:e2:04:34:91:44:27:dc:
49:f8:0a:c9:22:40:ae:27:7f:33:3d:27:1f:fd:4b:
e9:3a:ff:65:91:f8:55:d8:59:c1:6d:7e:58:87:54:
b9:b3:34:db:8b:ea:2c:d1:ae:c8:c3:57:9d:a7:73:
02:4b:a8:94:1a:1c:d2:c2:db:30:6f:eb:28:ea:65:
67:da:db:7e:dc:7f:88:a7:47:95:b5:a9:39:e4:67:
68:41:05:36:4d:26:dc:a7:2c:f4:13:10:15:42:8c:
78:06:39:8f:1b:4f:d8:93:5f:cd:2f:9a:0a:7e:c2:
ed:74:40:d0:e3:b4:bc:5c:6e:cb:3f:71:7e:87:3c:
0b:45:43:20:30:32:03:b7:73:0f:36:74:ec:68:aa:
bb:ce:f1:b4:b1:a7:aa:81:10:f9:a1:c2:82:d9:5e:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:53:E9:CB:31:06:80:8E:72:29:B5:E3:34:D5:4F:02:FC:B6:05:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C5F481ADB5E11EFA9BE0072762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.33.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ad:df:07:f8:6c:55:6e:46:67:2d:cb:10:4c:02:e3:64:5a:
95:7c:fa:04:91:7f:dc:53:65:fe:f3:b5:a7:1d:e6:69:d6:06:
e0:2d:a3:3d:35:eb:b2:21:62:f0:43:60:3a:1d:91:50:8f:ca:
2d:c1:76:9c:6e:76:d6:96:cf:ef:59:b5:f1:f6:6f:05:ed:c9:
e4:c2:f4:ab:2f:84:ee:c8:d1:aa:4a:8d:d4:7b:e7:f6:39:1c:
e6:5f:90:ca:23:d7:c1:42:d2:37:1a:f7:64:8a:65:c9:98:fe:
d3:5a:f5:3d:6b:c3:4a:4c:d4:34:a6:1d:4a:9f:df:59:a3:bb:
0c:b2:5f:f6:e0:2c:b1:67:11:0d:c0:7d:d2:4b:2c:ea:35:37:
49:e4:0b:d4:18:11:e5:9e:80:b3:a3:6c:5c:34:cf:5b:59:c9:
d3:24:d8:b4:39:59:6b:5a:20:2c:14:2e:4c:84:be:75:1d:57:
c9:30:af:5f:ac:3f:9b:c9:9f:1a:fa:37:e2:e9:1b:48:84:7b:
7c:53:8f:0b:34:29:26:f6:f3:e3:63:bd:5b:02:57:d3:c1:d6:
cb:6f:fa:20:a9:c5:cf:00:04:5d:22:ab:03:46:59:7b:8d:b9:
66:ab:2b:b4:4b:ce:53:f8:84:3e:af:fb:81:4d:ad:5e:d5:5b:
41:69:ad:a4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARMfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MjA1MTM1WhcNMjUwMzEzMjA1MTM1WjAYMRYw
FAYDVQQDEw02Nzk1NGVkYi0yM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArBgXHLy9UrGlYG5JDiVLMGoo9RRkZwLdAFkpgxruFqiQE9f8hYN07n5N
52sM5vWbgCTCd9yPuWOpaEwXrAXdjwdHSvrtxSC7EcZGPQUniPWyPjfhHlwWsAM/
jtYq0qH0V+IENJFEJ9xJ+ArJIkCuJ38zPScf/UvpOv9lkfhV2FnBbX5Yh1S5szTb
i+os0a7Iw1edp3MCS6iUGhzSwtswb+so6mVn2tt+3H+Ip0eVtak55GdoQQU2TSbc
pyz0ExAVQox4BjmPG0/Yk1/NL5oKfsLtdEDQ47S8XG7LP3F+hzwLRUMgMDIDt3MP
NnTsaKq7zvG0saeqgRD5ocKC2V4KEwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBNT
6csxBoCOcim14zTVTwL8tgXCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQzVGNDgxQURCNUUxMUVGQTlCRTAwNzI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQhMA0GCSqGSIb3DQEBCwUA
A4IBAQAbrd8H+GxVbkZnLcsQTALjZFqVfPoEkX/cU2X+87WnHeZp1gbgLaM9Neuy
IWLwQ2A6HZFQj8otwXacbnbWls/vWbXx9m8F7cnkwvSrL4TuyNGqSo3Ue+f2ORzm
X5DKI9fBQtI3GvdkimXJmP7TWvU9a8NKTNQ0ph1Kn99Zo7sMsl/24CyxZxENwH3S
SyzqNTdJ5AvUGBHlnoCzo2xcNM9bWcnTJNi0OVlrWiAsFC5MhL51HVfJMK9frD+b
yZ8a+jfi6RtIhHt8U48LNCkm9vPjY71bAlfTwdbLb/ogqcXPAARdIqsDRll7jblm
qyu0S85T+IQ+r/uBTa1e1VtBaa2k
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:51:41 2025 by rpki-client