Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48399D44DA7111EFB1E40CB3762E951A.roa
File: 48399D44DA7111EFB1E40CB3762E951A.roa (raw, json)
Hash identifier: toDEqdQJqiX7h3JS2eXpZoELi2qaogdGc/qvvvicVeQ=
Subject key identifier: C4:FA:98:BF:83:CB:B4:2A:BA:F5:5F:12:7B:60:A8:1C:2A:E3:4C:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FB2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48399D44DA7111EFB1E40CB3762E951A.roa
Signing time: Fri 24 Jan 2025 16:35:55 +0000
ROA not before: Fri 24 Jan 2025 16:35:51 +0000
ROA not after: Mon 03 Mar 2025 16:35:51 +0000
asID: 203020
IP address blocks: 156.233.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69554 (0x10fb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 16:35:51 2025 GMT
Not After : Mar 3 16:35:51 2025 GMT
Subject: CN=6793c16b-f9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:4f:0a:b0:af:a4:83:3b:8d:48:72:fc:88:
ca:02:ef:90:cd:11:f9:b7:0e:d7:8c:fd:60:58:60:
48:3e:67:cb:18:db:ba:f3:ad:aa:0a:6c:b7:7f:5e:
6c:6e:5e:78:ae:91:59:5d:a7:6f:78:61:81:87:6c:
13:dd:4c:71:3b:71:23:a8:a1:37:73:5a:87:9e:c7:
13:07:77:c1:a7:30:06:80:9e:5f:1e:aa:78:9a:b9:
da:cc:84:7a:b0:cf:c6:47:67:3c:56:b1:b3:b3:58:
76:4a:4d:eb:41:4e:7f:09:21:4f:19:12:78:11:1b:
67:33:8a:e0:c7:11:b3:ed:05:52:2b:ac:25:9d:e3:
a0:22:db:4f:ec:7a:5e:ae:af:f2:f5:35:2b:54:60:
e9:b3:8e:50:4c:e4:25:22:d0:85:6b:f5:4c:15:ac:
5d:4d:db:9c:b6:aa:6c:be:32:54:d2:1a:08:34:cd:
a3:f6:f6:3d:4c:40:de:92:35:1f:f8:b8:af:95:6a:
ab:d8:90:08:39:23:b7:0f:48:ea:88:fa:b1:7f:ae:
79:e3:cc:26:42:06:77:c4:f2:ec:08:8b:bc:b8:55:
57:bc:db:8c:9d:48:99:88:cc:b3:e3:72:68:84:8d:
02:ef:93:b7:8a:52:7a:b5:1c:9a:f5:92:2e:da:b4:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FA:98:BF:83:CB:B4:2A:BA:F5:5F:12:7B:60:A8:1C:2A:E3:4C:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48399D44DA7111EFB1E40CB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.4.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:08:df:27:36:0d:ba:fd:2f:a4:d9:0f:04:05:71:f0:4d:8c:
ef:6f:d2:ea:f3:0c:49:d8:eb:2d:f0:1e:a6:76:72:de:af:03:
35:c4:21:1b:4e:95:f0:3c:6f:bd:c4:1f:77:be:15:31:92:fd:
82:89:b6:ec:c2:fd:d7:5b:90:c6:8e:5b:bd:e9:19:fd:4e:f4:
55:85:58:81:c5:62:a2:de:59:ab:40:32:06:5b:dc:4c:50:ca:
51:e8:0d:ac:e5:34:52:95:08:80:c9:de:67:27:34:ac:75:7d:
07:0c:30:4e:f8:2a:07:29:da:20:25:a5:f7:6b:4c:62:0e:4f:
08:8a:a4:fc:91:1a:48:3c:6e:83:34:f9:1d:d9:c1:4e:30:46:
4c:0e:04:0f:e9:8d:d5:0d:ee:e3:fa:a5:51:13:9e:b0:0e:c4:
c0:d0:d9:12:89:91:54:83:57:ec:08:a2:3f:0f:d9:5a:4d:11:
2a:f9:b9:3c:da:79:5b:c2:1f:22:96:a0:b1:0d:87:5c:7f:92:
87:96:3e:e7:0d:5d:ba:70:8d:0c:20:05:74:7a:3d:cd:c7:95:
c8:f0:eb:eb:6f:ec:cd:f2:6f:55:85:fa:7d:d3:92:c7:14:ce:
b1:44:b5:88:d9:e2:c1:58:0e:35:b7:e2:9d:1a:fe:a4:3f:47:
08:fb:27:01
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ+yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MTYzNTUxWhcNMjUwMzAzMTYzNTUxWjAYMRYw
FAYDVQQDEw02NzkzYzE2Yi1mOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAok9PCrCvpIM7jUhy/IjKAu+QzRH5tw7XjP1gWGBIPmfLGNu6862qCmy3
f15sbl54rpFZXadveGGBh2wT3UxxO3EjqKE3c1qHnscTB3fBpzAGgJ5fHqp4mrna
zIR6sM/GR2c8VrGzs1h2Sk3rQU5/CSFPGRJ4ERtnM4rgxxGz7QVSK6wlneOgIttP
7Hperq/y9TUrVGDps45QTOQlItCFa/VMFaxdTductqpsvjJU0hoINM2j9vY9TEDe
kjUf+LivlWqr2JAIOSO3D0jqiPqxf65548wmQgZ3xPLsCIu8uFVXvNuMnUiZiMyz
43JohI0C75O3ilJ6tRya9ZIu2rRQNwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMT6
mL+Dy7QquvVfEntgqBwq40yPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80ODM5OUQ0NERBNzExMUVGQjFFNDBDQjM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOkEMA0GCSqGSIb3DQEBCwUA
A4IBAQBeCN8nNg26/S+k2Q8EBXHwTYzvb9Lq8wxJ2Ost8B6mdnLerwM1xCEbTpXw
PG+9xB93vhUxkv2Cibbswv3XW5DGjlu96Rn9TvRVhViBxWKi3lmrQDIGW9xMUMpR
6A2s5TRSlQiAyd5nJzSsdX0HDDBO+CoHKdogJaX3a0xiDk8IiqT8kRpIPG6DNPkd
2cFOMEZMDgQP6Y3VDe7j+qVRE56wDsTA0NkSiZFUg1fsCKI/D9laTREq+bk82nlb
wh8ilqCxDYdcf5KHlj7nDV26cI0MIAV0ej3Nx5XI8Ovrb+zN8m9Vhfp905LHFM6x
RLWI2eLBWA41t+KdGv6kP0cI+ycB
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:41:32 2025 by rpki-client