Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4975C1B6D7F511EFA57F9F93762E951A.roa
File: 4975C1B6D7F511EFA57F9F93762E951A.roa (raw, json)
Hash identifier: N/T2UvW++Wd67o4QqytRAlvjk3/EwMjQ73mAwiJxKtI=
Subject key identifier: 9E:C1:AA:B8:7A:86:E7:D1:6E:22:DF:D7:0A:7A:FE:C5:7D:32:B6:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4975C1B6D7F511EFA57F9F93762E951A.roa
Signing time: Tue 21 Jan 2025 12:43:17 +0000
ROA not before: Tue 21 Jan 2025 12:43:13 +0000
ROA not after: Sat 01 Feb 2025 12:43:13 +0000
asID: 44559
IP address blocks: 156.246.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69038 (0x10dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 12:43:13 2025 GMT
Not After : Feb 1 12:43:13 2025 GMT
Subject: CN=678f9665-dbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:9b:7b:38:a3:71:86:1a:4b:54:88:61:4b:
c9:ac:c8:0c:c0:4d:6a:bd:92:05:89:57:c5:a9:06:
a0:b1:69:31:f0:9d:e5:6c:37:13:06:73:4b:a3:68:
5b:7f:bd:77:10:81:02:82:df:02:be:2a:3a:c5:68:
d1:1e:73:b4:37:c9:56:93:24:22:eb:ac:0d:82:15:
fd:b7:0b:62:62:e0:6a:9e:e0:11:da:fb:7e:be:50:
fa:ce:cd:42:88:e1:d0:41:e3:bc:ae:ed:26:35:fa:
fc:db:7f:a8:eb:ac:a4:60:da:6e:ff:27:af:99:6b:
5b:fd:c0:ff:4e:7a:4b:77:9c:b8:5e:c4:e8:c8:9f:
28:a7:3e:d8:2e:ac:46:d4:2b:fa:88:2f:41:27:13:
0b:d4:2f:76:6f:e3:99:0e:2d:4b:3b:37:a0:33:9c:
da:2a:26:62:fa:cc:d2:47:6a:6e:02:7d:14:58:0b:
3c:f7:33:0a:5a:44:05:cf:d3:b4:7b:73:3f:c2:37:
db:44:7d:c1:b9:ae:68:03:6b:3a:31:f5:9b:6c:97:
3a:28:64:a4:e0:53:49:07:06:6a:c5:d0:56:f8:67:
cd:52:d9:90:eb:1e:57:9b:22:62:f5:89:88:f7:ae:
71:e3:b0:d4:1d:fb:8b:e4:c0:cf:6c:a3:ae:eb:56:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C1:AA:B8:7A:86:E7:D1:6E:22:DF:D7:0A:7A:FE:C5:7D:32:B6:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4975C1B6D7F511EFA57F9F93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e8:d2:75:4f:dd:41:0a:60:4a:78:d1:48:14:23:66:e3:1e:
f3:a7:a7:56:bd:0a:af:56:a7:13:2e:fd:35:26:65:54:c7:db:
a7:4f:03:1f:c1:aa:5b:42:d8:65:ce:34:a3:0a:ed:c4:d2:89:
d7:06:44:18:bb:89:69:23:f5:86:97:c1:34:f6:e7:c5:fa:2b:
16:e1:ac:7c:91:e3:f6:94:79:83:09:e6:43:e9:88:20:a0:17:
b1:35:03:59:89:8a:1b:d4:7a:e4:64:22:24:af:2e:78:01:49:
1a:1b:a7:85:a2:a7:8b:71:60:b7:aa:2c:47:b7:10:1e:74:73:
95:f9:5f:4f:ea:ae:43:a8:e1:58:20:43:a8:43:bb:85:b4:35:
ce:af:a1:07:7b:a1:18:7e:bb:3b:58:f9:66:13:c3:80:44:da:
8d:37:81:91:31:27:6a:49:2d:97:9c:51:04:52:07:c0:80:a3:
67:56:84:60:db:40:aa:87:a1:e8:53:da:3e:d8:20:22:02:df:
12:92:29:90:45:f3:31:72:db:92:17:fb:f1:2e:65:f3:e1:c7:
df:31:28:13:d3:6c:df:78:80:4f:5c:57:7d:7a:17:20:cf:26:
5e:10:52:97:ce:d1:59:e3:4b:de:5c:df:7a:fb:1c:e1:a6:23:
8a:3d:83:e5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ2uMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTI0MzEzWhcNMjUwMjAxMTI0MzEzWjAYMRYw
FAYDVQQDEw02NzhmOTY2NS1kYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsFibezijcYYaS1SIYUvJrMgMwE1qvZIFiVfFqQagsWkx8J3lbDcTBnNL
o2hbf713EIECgt8Cvio6xWjRHnO0N8lWkyQi66wNghX9twtiYuBqnuAR2vt+vlD6
zs1CiOHQQeO8ru0mNfr823+o66ykYNpu/yevmWtb/cD/TnpLd5y4XsToyJ8opz7Y
LqxG1Cv6iC9BJxML1C92b+OZDi1LOzegM5zaKiZi+szSR2puAn0UWAs89zMKWkQF
z9O0e3M/wjfbRH3Bua5oA2s6MfWbbJc6KGSk4FNJBwZqxdBW+GfNUtmQ6x5XmyJi
9YmI965x47DUHfuL5MDPbKOu61aTjQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ7B
qrh6hufRbiLf1wp6/sV9MrYhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80OTc1QzFCNkQ3RjUxMUVGQTU3RjlGOTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPb4MA0GCSqGSIb3DQEBCwUA
A4IBAQAK6NJ1T91BCmBKeNFIFCNm4x7zp6dWvQqvVqcTLv01JmVUx9unTwMfwapb
QthlzjSjCu3E0onXBkQYu4lpI/WGl8E09ufF+isW4ax8keP2lHmDCeZD6YggoBex
NQNZiYob1HrkZCIkry54AUkaG6eFoqeLcWC3qixHtxAedHOV+V9P6q5DqOFYIEOo
Q7uFtDXOr6EHe6EYfrs7WPlmE8OARNqNN4GRMSdqSS2XnFEEUgfAgKNnVoRg20Cq
h6HoU9o+2CAiAt8SkimQRfMxctuSF/vxLmXz4cffMSgT02zfeIBPXFd9ehcgzyZe
EFKXztFZ40veXN96+xzhpiOKPYPl
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:59 2025 by rpki-client