Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3080F15CDA9911EF804003BD762E951A.roa
File: 3080F15CDA9911EF804003BD762E951A.roa (raw, json)
Hash identifier: YuM6TCUqVi7Dygta6Dk4X1Qh53MbTg+JehvwodFFD+E=
Subject key identifier: 59:56:52:96:B9:EE:0B:BA:90:32:38:1C:13:B2:E5:F4:73:5D:96:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3080F15CDA9911EF804003BD762E951A.roa
Signing time: Fri 24 Jan 2025 21:21:35 +0000
ROA not before: Fri 24 Jan 2025 21:21:31 +0000
ROA not after: Tue 25 Feb 2025 21:21:31 +0000
asID: 44559
IP address blocks: 156.246.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69804 (0x110ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 21:21:31 2025 GMT
Not After : Feb 25 21:21:31 2025 GMT
Subject: CN=6794045f-371d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:3c:46:66:e0:a9:da:74:4d:dc:f2:54:fd:
e3:74:00:ba:dd:53:92:da:36:a8:64:5d:2e:32:07:
aa:aa:0e:b5:7e:bc:f9:ce:b5:da:1f:20:fb:1b:2e:
56:f5:41:61:7f:c2:8d:d9:fb:88:61:84:c8:69:58:
72:85:53:90:0b:ab:14:af:81:7d:e4:07:f2:af:9a:
f8:69:67:d2:1a:ec:28:ce:a0:13:ba:f6:a5:ff:9e:
aa:7f:2b:1a:98:9b:82:3e:c3:be:f9:5f:6e:9f:48:
8f:9f:5a:bf:ca:da:38:8a:55:a7:ae:74:d0:47:ac:
14:f5:da:f6:71:07:f9:dd:f7:cb:f0:7a:d4:7a:42:
f2:26:79:60:68:6f:c1:c1:2e:8f:b7:a8:f7:26:81:
8e:25:18:b8:26:7a:26:7c:17:f4:fa:b2:bf:25:e1:
cc:f5:c3:97:f9:95:6a:53:4f:91:4f:7e:9e:9b:1b:
58:ab:f3:41:a0:3a:a1:5c:1c:4a:42:98:41:52:88:
ce:d6:66:92:79:f7:69:ef:66:f5:6f:49:98:44:4a:
8e:ff:f9:60:5e:db:08:d7:20:21:86:99:59:82:74:
a2:5b:2a:a2:1e:e4:4e:79:32:bf:62:0a:1b:61:b1:
d3:49:48:ad:42:7b:95:dc:46:22:91:01:7e:86:ee:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:56:52:96:B9:EE:0B:BA:90:32:38:1C:13:B2:E5:F4:73:5D:96:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3080F15CDA9911EF804003BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.221.0/24
Signature Algorithm: sha256WithRSAEncryption
52:04:83:da:3e:d1:27:b6:37:ac:bf:03:61:b9:d7:08:71:2e:
eb:63:d1:39:66:cc:2b:7b:a6:0c:87:db:a8:84:79:73:2e:08:
3d:a6:e6:df:cd:83:d8:66:c5:bc:7d:20:90:e6:ae:da:50:35:
82:1a:15:97:49:44:3e:90:92:3b:2c:49:b1:6b:40:49:21:d1:
3e:84:3b:4a:7e:2a:5c:78:5c:bc:2a:44:8e:76:f5:41:01:4b:
d2:89:10:d6:09:ba:a3:c7:d8:78:df:66:80:8d:5f:1a:56:f9:
f6:48:64:70:5b:02:b6:96:5e:a7:97:96:b1:0a:45:bf:8b:c3:
15:8b:9a:40:67:e4:8a:fb:2d:74:81:c1:b3:35:33:51:43:84:
cc:28:26:cb:53:c3:93:b3:e7:64:91:17:fe:a4:c0:6b:6e:81:
a0:e8:f5:61:65:09:93:98:af:90:53:6d:30:fb:33:d9:d6:ce:
a8:ad:3f:b3:48:4e:1b:59:4f:36:ca:a7:14:01:04:af:91:72:
89:d1:84:f0:34:ea:c3:73:82:da:97:63:2e:f0:02:63:d4:21:
1e:2a:59:27:ef:23:32:a7:97:3c:54:48:45:1b:e2:83:4c:f1:
a0:fe:f0:92:3b:e0:0f:a2:3b:f0:d1:44:47:77:36:af:c1:52:
a4:d5:7c:66
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARCsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MjEyMTMxWhcNMjUwMjI1MjEyMTMxWjAYMRYw
FAYDVQQDEw02Nzk0MDQ1Zi0zNzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAszE8Rmbgqdp0TdzyVP3jdAC63VOS2jaoZF0uMgeqqg61frz5zrXaHyD7
Gy5W9UFhf8KN2fuIYYTIaVhyhVOQC6sUr4F95Afyr5r4aWfSGuwozqATuval/56q
fysamJuCPsO++V9un0iPn1q/yto4ilWnrnTQR6wU9dr2cQf53ffL8HrUekLyJnlg
aG/BwS6Pt6j3JoGOJRi4JnomfBf0+rK/JeHM9cOX+ZVqU0+RT36emxtYq/NBoDqh
XBxKQphBUojO1maSefdp72b1b0mYREqO//lgXtsI1yAhhplZgnSiWyqiHuROeTK/
YgobYbHTSUitQnuV3EYikQF+hu7AVwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFlW
Upa57gu6kDI4HBOy5fRzXZZhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMDgwRjE1Q0RBOTkxMUVGODA0MDAzQkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPbdMA0GCSqGSIb3DQEBCwUA
A4IBAQBSBIPaPtEntjesvwNhudcIcS7rY9E5Zswre6YMh9uohHlzLgg9pubfzYPY
ZsW8fSCQ5q7aUDWCGhWXSUQ+kJI7LEmxa0BJIdE+hDtKfipceFy8KkSOdvVBAUvS
iRDWCbqjx9h432aAjV8aVvn2SGRwWwK2ll6nl5axCkW/i8MVi5pAZ+SK+y10gcGz
NTNRQ4TMKCbLU8OTs+dkkRf+pMBrboGg6PVhZQmTmK+QU20w+zPZ1s6orT+zSE4b
WU82yqcUAQSvkXKJ0YTwNOrDc4Lal2Mu8AJj1CEeKlkn7yMyp5c8VEhFG+KDTPGg
/vCSO+APojvw0URHdzavwVKk1Xxm
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:46 2025 by rpki-client