Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32205EFAD7E011EFA4157689762E951A.roa
File: 32205EFAD7E011EFA4157689762E951A.roa (raw, json)
Hash identifier: WBfgtH84zpxHSV5lvtHsgUJByLyL0IMW5BxoUOO7TZ4=
Subject key identifier: 0E:EC:D9:6B:AE:1D:18:E1:BD:13:21:B4:66:28:5D:A5:60:C7:D1:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D22
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32205EFAD7E011EFA4157689762E951A.roa
Signing time: Tue 21 Jan 2025 10:12:18 +0000
ROA not before: Tue 21 Jan 2025 10:12:15 +0000
ROA not after: Sat 01 Feb 2025 10:12:15 +0000
asID: 44559
IP address blocks: 156.246.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68898 (0x10d22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 10:12:15 2025 GMT
Not After : Feb 1 10:12:15 2025 GMT
Subject: CN=678f7302-9fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:12:00:3e:d1:7b:7d:7f:65:66:c5:3c:32:8a:
74:0f:55:be:9e:9a:0e:9e:d0:62:bc:0a:82:36:ba:
bc:66:7b:d5:fa:06:56:fb:56:34:d5:e5:ea:48:3d:
cc:0c:3c:6a:e6:f9:6a:32:d4:7d:9a:52:d5:9b:c6:
cf:40:01:db:43:3b:6f:6f:43:fe:04:04:90:01:12:
61:2e:94:b7:73:8d:81:82:f4:cd:af:5c:42:53:f5:
9c:4c:0f:7e:9b:19:e0:50:6c:25:6d:7e:e2:31:2a:
ca:f1:36:fa:f6:77:53:17:90:7b:1d:21:4d:8a:ae:
1f:99:52:7d:fa:d3:ce:66:13:00:59:82:70:6c:5a:
6f:75:0a:c3:b0:7e:11:a4:3a:e2:2f:5a:59:6d:c4:
c5:86:c7:81:5b:f5:58:f0:8e:81:f3:9e:24:f0:a5:
d8:cd:91:88:ec:41:f6:cd:2d:c4:23:f1:4f:19:0c:
c1:3f:8b:8e:cd:ad:74:69:bb:22:93:f2:99:34:8b:
ed:e1:4b:83:3e:80:d2:1f:69:b4:69:90:87:cd:e9:
93:89:8a:de:f8:91:2f:20:c6:f4:d3:19:03:ed:36:
d0:da:75:b6:01:46:38:75:ba:e6:46:9b:1f:38:bb:
36:5a:1d:ff:0b:a7:96:7a:30:29:78:5d:e4:3b:c7:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EC:D9:6B:AE:1D:18:E1:BD:13:21:B4:66:28:5D:A5:60:C7:D1:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32205EFAD7E011EFA4157689762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.172.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d4:c7:b9:36:2d:99:07:9a:80:a0:ef:bc:21:a1:90:c1:71:
da:db:03:ff:fb:84:2b:10:de:a7:a4:bb:2f:96:49:42:af:9e:
66:ac:b3:58:9e:26:76:fd:bd:32:89:86:1a:8c:bf:25:e3:97:
a9:ae:d9:1d:9c:c9:7f:47:8c:e1:e1:20:43:36:c4:ff:bf:35:
c2:39:70:32:32:8f:10:3b:b0:32:15:8b:cf:1e:c9:86:f6:48:
17:73:77:51:d1:a4:50:d6:ae:db:de:4a:3f:7a:ca:2c:d7:49:
80:17:b4:3e:39:d0:c7:35:38:11:5c:42:44:a0:d9:f3:6d:b0:
c4:ac:3c:4c:52:62:05:fc:7a:44:1a:f3:2e:17:25:2d:ac:87:
8a:c1:8e:30:0c:d2:ad:e0:b0:31:3b:58:6d:b3:16:97:b7:fc:
be:14:de:5d:5d:ae:fe:65:37:f6:ca:1f:8f:9b:80:e2:63:07:
9d:ca:84:a9:d7:b7:1b:17:b1:dd:d2:e1:c7:b6:ab:7f:b2:d0:
cf:09:4d:31:d7:ca:6e:dc:c7:ca:1d:c7:39:1d:cd:d4:75:58:
92:70:ee:21:da:97:ac:b0:3b:c5:ef:3a:b0:d1:d0:4c:62:2c:
9e:c7:90:cb:4d:4a:7e:48:4e:81:88:95:ff:ce:de:eb:81:d4:
c2:d6:46:df
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ0iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTAxMjE1WhcNMjUwMjAxMTAxMjE1WjAYMRYw
FAYDVQQDEw02NzhmNzMwMi05ZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9hIAPtF7fX9lZsU8Mop0D1W+npoOntBivAqCNrq8ZnvV+gZW+1Y01eXq
SD3MDDxq5vlqMtR9mlLVm8bPQAHbQztvb0P+BASQARJhLpS3c42BgvTNr1xCU/Wc
TA9+mxngUGwlbX7iMSrK8Tb69ndTF5B7HSFNiq4fmVJ9+tPOZhMAWYJwbFpvdQrD
sH4RpDriL1pZbcTFhseBW/VY8I6B854k8KXYzZGI7EH2zS3EI/FPGQzBP4uOza10
absik/KZNIvt4UuDPoDSH2m0aZCHzemTiYre+JEvIMb00xkD7TbQ2nW2AUY4dbrm
RpsfOLs2Wh3/C6eWejApeF3kO8dOwQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA7s
2WuuHRjhvRMhtGYoXaVgx9EtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMjIwNUVGQUQ3RTAxMUVGQTQxNTc2ODk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPasMA0GCSqGSIb3DQEBCwUA
A4IBAQCP1Me5Ni2ZB5qAoO+8IaGQwXHa2wP/+4QrEN6npLsvlklCr55mrLNYniZ2
/b0yiYYajL8l45eprtkdnMl/R4zh4SBDNsT/vzXCOXAyMo8QO7AyFYvPHsmG9kgX
c3dR0aRQ1q7b3ko/esos10mAF7Q+OdDHNTgRXEJEoNnzbbDErDxMUmIF/HpEGvMu
FyUtrIeKwY4wDNKt4LAxO1htsxaXt/y+FN5dXa7+ZTf2yh+Pm4DiYwedyoSp17cb
F7Hd0uHHtqt/stDPCU0x18pu3MfKHcc5Hc3UdViScO4h2pessDvF7zqw0dBMYiye
x5DLTUp+SE6BiJX/zt7rgdTC1kbf
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:25 2025 by rpki-client