Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49034D4ED95711EF97002146762E951A.roa
File: 49034D4ED95711EF97002146762E951A.roa (raw, json)
Hash identifier: ZVDOxUDN9b1b9SzV+2pJZtAhO71iYM6ILQI2wrHSuts=
Subject key identifier: C4:A4:50:87:3A:9C:E3:6C:B6:AF:D7:52:BA:23:D2:81:D9:20:01:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010EA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49034D4ED95711EF97002146762E951A.roa
Signing time: Thu 23 Jan 2025 06:57:18 +0000
ROA not before: Thu 23 Jan 2025 06:57:15 +0000
ROA not after: Sat 15 Mar 2025 06:57:15 +0000
asID: 138915
IP address blocks: 156.224.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69287 (0x10ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 06:57:15 2025 GMT
Not After : Mar 15 06:57:15 2025 GMT
Subject: CN=6791e84e-2b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:e3:a8:68:21:c0:a7:e2:50:6f:f2:c2:8f:
0c:0d:2b:21:fa:80:e9:df:46:09:39:10:29:84:7b:
88:2c:e6:ab:e6:bf:d1:a5:53:4a:f3:00:12:b4:87:
12:cc:3b:d7:24:5e:fa:3d:5b:e0:de:1d:0b:5d:c4:
97:b3:c0:03:ff:34:b6:36:58:fe:24:73:24:39:75:
36:4a:ca:6e:70:c1:2e:e3:83:40:47:5a:c2:28:58:
c7:63:8b:ec:29:97:f3:e7:dc:e4:e4:ce:c6:ac:23:
9a:04:87:cb:52:9b:8d:28:94:ea:94:df:0d:48:72:
16:b8:bc:f5:e0:30:10:c6:58:d3:04:f5:15:1c:10:
6e:f3:5e:ba:df:a3:85:11:5e:b7:9b:ae:62:7b:69:
25:ae:a3:0e:da:92:b2:b3:75:8f:09:66:ce:ba:0b:
54:dd:e5:bc:2c:fc:04:60:25:04:92:87:34:31:2a:
85:b8:fa:64:f2:1d:76:19:d6:6c:ff:27:0b:b4:f5:
98:29:65:db:09:ba:6d:38:28:97:13:88:19:ee:bd:
7e:7c:16:ec:17:d9:e3:34:7b:e5:58:ff:a3:e2:bf:
5a:cf:36:04:28:1b:b2:cf:86:4a:e0:60:c4:90:93:
6a:c0:3a:ee:cc:51:34:8c:ab:3b:bb:aa:6d:f4:ee:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A4:50:87:3A:9C:E3:6C:B6:AF:D7:52:BA:23:D2:81:D9:20:01:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49034D4ED95711EF97002146762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.33.0/24
Signature Algorithm: sha256WithRSAEncryption
27:94:b7:87:ee:f1:78:56:cd:b5:34:82:2d:78:ca:20:b1:d8:
bf:04:ca:72:5e:7c:1e:8d:d0:b1:20:13:c6:82:89:ea:b0:bc:
a2:22:2d:ec:d7:54:db:5d:e1:0a:14:9e:a5:16:44:4d:24:8d:
dd:b1:9d:6e:2b:4f:98:4e:cf:fe:9d:70:5f:c5:c7:f4:e1:90:
13:95:a7:b4:07:c5:98:23:3c:7a:91:c7:b9:a9:23:30:00:f9:
c5:e1:c1:95:a6:88:a0:1e:3f:be:ea:ce:77:47:ee:61:07:c6:
6f:1a:2d:ca:7e:57:51:8c:ab:8f:46:f5:d8:77:30:86:cd:c1:
f6:f5:e9:ed:c2:7b:3f:76:e2:c6:34:67:bc:da:24:50:b9:6a:
0a:38:6d:7e:95:38:2e:4f:75:8e:61:7d:67:09:7b:71:87:f7:
3b:9e:fe:d6:d7:e1:77:64:17:72:b0:d1:f5:35:53:33:40:04:
c7:29:88:07:3d:82:d1:0a:13:b9:2c:e3:31:d7:e4:ad:df:f8:
26:ed:b0:b7:e0:7b:69:a7:a7:cb:f7:0c:f7:89:e8:ae:a3:6a:
dd:cc:4f:ed:71:23:ee:c5:7c:d4:98:7d:18:f2:56:35:5d:71:
71:90:6e:ee:20:05:c0:36:a6:92:8e:cb:4d:b4:3a:81:9b:9a:
91:93:34:64
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ6nMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIzMDY1NzE1WhcNMjUwMzE1MDY1NzE1WjAYMRYw
FAYDVQQDEw02NzkxZTg0ZS0yYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyXzjqGghwKfiUG/ywo8MDSsh+oDp30YJORAphHuILOar5r/RpVNK8wAS
tIcSzDvXJF76PVvg3h0LXcSXs8AD/zS2Nlj+JHMkOXU2SspucMEu44NAR1rCKFjH
Y4vsKZfz59zk5M7GrCOaBIfLUpuNKJTqlN8NSHIWuLz14DAQxljTBPUVHBBu8166
36OFEV63m65ie2klrqMO2pKys3WPCWbOugtU3eW8LPwEYCUEkoc0MSqFuPpk8h12
GdZs/ycLtPWYKWXbCbptOCiXE4gZ7r1+fBbsF9njNHvlWP+j4r9azzYEKBuyz4ZK
4GDEkJNqwDruzFE0jKs7u6pt9O6TjwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMSk
UIc6nONstq/XUroj0oHZIAGRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80OTAzNEQ0RUQ5NTcxMUVGOTcwMDIxNDY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOAhMA0GCSqGSIb3DQEBCwUA
A4IBAQAnlLeH7vF4Vs21NIIteMogsdi/BMpyXnwejdCxIBPGgonqsLyiIi3s11Tb
XeEKFJ6lFkRNJI3dsZ1uK0+YTs/+nXBfxcf04ZATlae0B8WYIzx6kce5qSMwAPnF
4cGVpoigHj++6s53R+5hB8ZvGi3KfldRjKuPRvXYdzCGzcH29entwns/duLGNGe8
2iRQuWoKOG1+lTguT3WOYX1nCXtxh/c7nv7W1+F3ZBdysNH1NVMzQATHKYgHPYLR
ChO5LOMx1+St3/gm7bC34Htpp6fL9wz3ieiuo2rdzE/tcSPuxXzUmH0Y8lY1XXFx
kG7uIAXANqaSjstNtDqBm5qRkzRk
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:42:10 2025 by rpki-client