Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/456BAEE6D97111EF8DFCD775762E951A.roa
File: 456BAEE6D97111EF8DFCD775762E951A.roa (raw, json)
Hash identifier: 2bAZ/+HG20qVkSy2lLh8fz0/My333YkMOa0bTE04MpU=
Subject key identifier: 59:3D:73:FA:E6:75:39:52:95:64:09:E3:86:74:99:41:C4:9B:7D:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F02
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/456BAEE6D97111EF8DFCD775762E951A.roa
Signing time: Thu 23 Jan 2025 10:03:19 +0000
ROA not before: Thu 23 Jan 2025 10:03:16 +0000
ROA not after: Sat 15 Mar 2025 10:03:16 +0000
asID: 138915
IP address blocks: 156.244.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69378 (0x10f02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 10:03:16 2025 GMT
Not After : Mar 15 10:03:16 2025 GMT
Subject: CN=679213e7-d44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:4c:38:07:fe:5d:0a:2b:3c:c2:48:71:e5:
90:4f:7e:f8:ec:58:a6:bf:d4:be:9e:16:9c:5f:3d:
6f:ed:81:f5:2f:6f:29:30:76:4f:7b:d9:0c:eb:7e:
9d:d8:6e:c1:83:18:de:da:ab:90:7c:a9:62:ae:98:
a2:cd:94:db:76:bf:94:bf:3c:08:27:8e:2f:b3:6c:
2e:3c:0e:99:db:38:eb:77:45:ec:ad:05:5d:cf:63:
8b:69:7b:26:20:e6:0b:ef:40:a7:3f:49:0f:7e:23:
a8:ad:c7:be:ba:a5:a6:48:3e:57:38:48:f1:92:da:
ea:0a:b5:92:13:62:35:ec:6e:36:93:d9:6c:27:b8:
74:ae:28:82:0d:8b:42:2c:bc:a4:90:15:ea:06:49:
03:11:cc:ec:7e:bb:7f:ce:91:f7:01:01:1a:e6:76:
0d:e1:08:e3:d5:04:c2:46:98:93:57:cd:69:a6:30:
79:9e:b9:54:ed:14:79:f1:10:fa:f1:3e:b7:df:f9:
2a:39:d8:8e:b1:f3:21:bb:04:b2:2c:42:83:6b:a0:
4a:a7:01:bb:29:f2:f9:13:59:11:3d:ab:85:7f:8b:
55:77:20:eb:3d:4d:51:dc:b3:a1:fe:09:d7:ef:26:
16:55:3d:d5:b8:d9:17:e5:5f:c9:91:fe:43:2e:19:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3D:73:FA:E6:75:39:52:95:64:09:E3:86:74:99:41:C4:9B:7D:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/456BAEE6D97111EF8DFCD775762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a4:07:bd:68:c9:02:98:c8:6a:b8:8d:80:ec:15:86:76:b9:
f7:1f:c0:76:26:cc:ee:8e:2a:c8:92:49:46:e8:e4:a6:ad:ca:
fa:39:22:5f:08:fb:a3:69:27:31:24:ff:26:19:b4:8d:5d:4b:
02:c3:3c:75:20:82:27:b5:e6:4c:5c:94:99:b3:7f:4b:e9:0f:
d7:f7:b0:1b:1a:c0:79:ef:0b:14:8d:07:57:1f:57:5e:58:0e:
6e:c9:e6:08:98:27:cd:31:27:d8:9f:52:3b:72:0d:b4:8b:ba:
a9:7f:59:2c:ed:4b:83:8c:6c:d1:64:5b:c8:15:40:be:af:0b:
f3:54:81:47:9d:ce:56:31:ce:98:01:f9:df:a9:e2:7b:c2:89:
d1:c0:fe:d3:f0:4d:25:bc:36:79:14:2b:fc:53:5a:e7:b5:83:
40:14:29:0e:40:ac:eb:1c:b3:4c:df:a8:b0:86:82:b1:8b:33:
fa:0f:01:7d:2d:d2:bc:09:d6:75:86:b2:13:dc:d9:09:6f:ec:
97:1a:44:81:be:b9:be:eb:ff:1b:0d:45:f8:36:84:ac:cd:47:
76:54:3c:fc:96:a4:2e:bd:dc:26:2c:f5:87:e1:b7:57:16:15:
e9:23:fc:81:21:1f:16:61:f7:de:17:7b:cb:e6:a9:42:e0:c2:
9a:93:ea:df
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ8CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIzMTAwMzE2WhcNMjUwMzE1MTAwMzE2WjAYMRYw
FAYDVQQDEw02NzkyMTNlNy1kNDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzZ9MOAf+XQorPMJIceWQT3747Fimv9S+nhacXz1v7YH1L28pMHZPe9kM
636d2G7Bgxje2quQfKlirpiizZTbdr+UvzwIJ44vs2wuPA6Z2zjrd0XsrQVdz2OL
aXsmIOYL70CnP0kPfiOorce+uqWmSD5XOEjxktrqCrWSE2I17G42k9lsJ7h0riiC
DYtCLLykkBXqBkkDEczsfrt/zpH3AQEa5nYN4Qjj1QTCRpiTV81ppjB5nrlU7RR5
8RD68T633/kqOdiOsfMhuwSyLEKDa6BKpwG7KfL5E1kRPauFf4tVdyDrPU1R3LOh
/gnX7yYWVT3VuNkX5V/Jkf5DLhnjjQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFk9
c/rmdTlSlWQJ44Z0mUHEm30nMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NTZCQUVFNkQ5NzExMUVGOERGQ0Q3NzU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQKMA0GCSqGSIb3DQEBCwUA
A4IBAQBvpAe9aMkCmMhquI2A7BWGdrn3H8B2JszujirIkklG6OSmrcr6OSJfCPuj
aScxJP8mGbSNXUsCwzx1IIInteZMXJSZs39L6Q/X97AbGsB57wsUjQdXH1deWA5u
yeYImCfNMSfYn1I7cg20i7qpf1ks7UuDjGzRZFvIFUC+rwvzVIFHnc5WMc6YAfnf
qeJ7wonRwP7T8E0lvDZ5FCv8U1rntYNAFCkOQKzrHLNM36iwhoKxizP6DwF9LdK8
CdZ1hrIT3NkJb+yXGkSBvrm+6/8bDUX4NoSszUd2VDz8lqQuvdwmLPWH4bdXFhXp
I/yBIR8WYffeF3vL5qlC4MKak+rf
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:21:08 2025 by rpki-client