Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/335A9734D3D211EFA5DB1181762E951A.roa
File: 335A9734D3D211EFA5DB1181762E951A.roa (raw, json)
Hash identifier: Bxy17XXT+bnf/i0YypDc1Yh0w15iE2Ij23u8Fa5zu4k=
Subject key identifier: 9F:45:63:73:89:6C:80:16:B7:B9:A8:6D:3F:D7:6B:A2:86:6F:FB:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01089E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/335A9734D3D211EFA5DB1181762E951A.roa
Signing time: Thu 16 Jan 2025 06:22:03 +0000
ROA not before: Thu 16 Jan 2025 06:21:59 +0000
ROA not after: Wed 19 Feb 2025 06:21:59 +0000
asID: 7018
IP address blocks: 156.247.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67742 (0x1089e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 06:21:59 2025 GMT
Not After : Feb 19 06:21:59 2025 GMT
Subject: CN=6788a58b-d579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:61:7d:13:e7:c3:c1:65:c2:d0:c7:1e:93:
96:cd:16:db:05:17:65:8b:a3:6b:34:fa:c8:d4:2c:
1a:de:5a:da:ca:46:68:bf:0e:ac:60:03:f3:97:fa:
ef:fc:84:26:96:2e:bd:20:0a:50:2c:97:0f:4b:48:
42:d5:c4:c1:65:55:85:c9:b1:4c:51:9d:2c:d6:60:
3d:32:45:84:50:0b:38:41:3b:39:cc:e5:65:27:3d:
64:6b:89:f5:81:7a:41:39:ec:db:5e:34:6a:c3:e7:
07:28:75:4e:16:f5:4e:f5:9a:47:5c:6e:ae:8a:0d:
d5:21:75:49:e2:56:65:d8:09:03:7b:cc:15:30:d1:
a6:29:64:ab:a3:11:ac:f4:47:d4:87:89:96:92:26:
7a:ed:d3:95:16:24:c4:4e:24:cf:f9:60:f3:3a:81:
fb:37:a9:e2:23:13:ec:00:bb:5a:1f:79:8f:62:cd:
60:8f:c9:a9:14:e2:40:80:0e:18:15:e0:fe:0a:63:
44:3b:83:be:42:30:01:f5:29:23:7c:14:81:04:34:
db:c3:69:43:57:c2:75:03:3f:f8:d5:cb:e0:6c:0e:
ed:a7:c7:3c:e0:ff:b2:1c:40:c0:80:18:cf:16:a4:
85:8a:59:2f:2e:a6:40:7f:57:b3:a3:7a:8e:91:b9:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:45:63:73:89:6C:80:16:B7:B9:A8:6D:3F:D7:6B:A2:86:6F:FB:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/335A9734D3D211EFA5DB1181762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e8:e0:6c:c8:8f:1c:ad:ca:6d:4c:f6:63:d4:1f:22:49:9b:
aa:3d:df:2c:3d:0b:3f:30:32:c5:dd:fc:ed:84:0d:c0:fb:8a:
af:03:fd:82:32:4c:0b:26:ac:0d:43:55:f1:c5:f2:a9:2d:c5:
ac:31:fb:8d:54:74:31:2c:49:d1:b7:7c:e9:7a:aa:40:2d:fa:
c3:22:a0:c4:af:da:f5:9d:a4:27:2d:d2:a1:ab:47:fd:d2:d7:
ff:98:eb:df:53:5c:41:aa:7d:9e:5f:e7:38:14:e7:d5:6d:f4:
5e:ad:1e:59:7d:74:3e:4e:41:7d:e0:52:8f:fc:ce:34:db:55:
5b:f4:8a:bc:6d:22:3a:c9:95:00:f9:db:30:8f:38:f7:d2:70:
aa:06:ab:42:d4:e0:2a:90:5e:05:d1:c6:e2:02:9c:6f:db:82:
0a:cb:93:60:e7:94:da:ca:4b:8e:7e:86:1b:4f:31:b8:d8:94:
a5:63:5b:6b:d0:49:44:da:da:2e:65:c4:7d:7a:a6:e0:f8:02:
7a:df:83:24:ab:8b:97:19:af:e3:d9:19:65:b2:20:f9:13:1d:
21:8c:f0:c3:50:a4:a7:6d:6a:00:11:7c:70:40:91:12:71:8f:
cc:c0:fe:e5:08:9c:a7:33:9e:59:9e:87:b4:34:a1:55:9f:b6:
63:7c:c9:cd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQieMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE2MDYyMTU5WhcNMjUwMjE5MDYyMTU5WjAYMRYw
FAYDVQQDEw02Nzg4YTU4Yi1kNTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxEFhfRPnw8FlwtDHHpOWzRbbBRdli6NrNPrI1Cwa3lraykZovw6sYAPz
l/rv/IQmli69IApQLJcPS0hC1cTBZVWFybFMUZ0s1mA9MkWEUAs4QTs5zOVlJz1k
a4n1gXpBOezbXjRqw+cHKHVOFvVO9ZpHXG6uig3VIXVJ4lZl2AkDe8wVMNGmKWSr
oxGs9EfUh4mWkiZ67dOVFiTETiTP+WDzOoH7N6niIxPsALtaH3mPYs1gj8mpFOJA
gA4YFeD+CmNEO4O+QjAB9SkjfBSBBDTbw2lDV8J1Az/41cvgbA7tp8c84P+yHEDA
gBjPFqSFilkvLqZAf1ezo3qOkbmBZQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ9F
Y3OJbIAWt7mobT/Xa6KGb/sKMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMzVBOTczNEQzRDIxMUVGQTVEQjExODE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPcEMA0GCSqGSIb3DQEBCwUA
A4IBAQBa6OBsyI8crcptTPZj1B8iSZuqPd8sPQs/MDLF3fzthA3A+4qvA/2CMkwL
JqwNQ1XxxfKpLcWsMfuNVHQxLEnRt3zpeqpALfrDIqDEr9r1naQnLdKhq0f90tf/
mOvfU1xBqn2eX+c4FOfVbfRerR5ZfXQ+TkF94FKP/M4021Vb9Iq8bSI6yZUA+dsw
jzj30nCqBqtC1OAqkF4F0cbiApxv24IKy5Ng55TaykuOfoYbTzG42JSlY1tr0ElE
2touZcR9eqbg+AJ634Mkq4uXGa/j2RllsiD5Ex0hjPDDUKSnbWoAEXxwQJEScY/M
wP7lCJynM55Znoe0NKFVn7ZjfMnN
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:33:27 2025 by rpki-client