Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49F1A3EADCAE11EF85F25051762E951A.roa
File: 49F1A3EADCAE11EF85F25051762E951A.roa (raw, json)
Hash identifier: bisKV0dfiridsXWmh/fCjPLPv2ZO19Q0xCsI7TZhD2M=
Subject key identifier: 77:7B:AE:97:B7:EF:FE:2A:D6:B7:9F:19:20:27:8E:AD:F3:D9:01:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49F1A3EADCAE11EF85F25051762E951A.roa
Signing time: Mon 27 Jan 2025 12:57:40 +0000
ROA not before: Mon 27 Jan 2025 12:57:36 +0000
ROA not after: Sat 08 Feb 2025 12:57:36 +0000
asID: 5065
IP address blocks: 156.235.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70899 (0x114f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 12:57:36 2025 GMT
Not After : Feb 8 12:57:36 2025 GMT
Subject: CN=679782c3-7408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:99:9e:d5:0b:2c:7d:35:72:e1:a0:4b:d6:
e1:9d:7f:73:ac:c8:1a:8c:ce:16:5e:c5:45:f5:18:
d4:b6:2d:52:ba:44:67:e5:a7:a8:29:2e:cd:66:c9:
88:71:62:b2:30:b7:c4:e3:68:ec:49:e6:42:24:97:
f1:d4:72:43:bb:29:5f:a5:e1:e5:5e:83:46:fa:db:
97:b2:94:6f:1c:d1:b5:0c:d7:06:6a:8b:87:ad:15:
5b:c5:d4:20:64:a0:ec:e2:9e:b8:2d:75:6d:28:0e:
1a:81:ef:dc:dc:74:b4:6d:7c:5f:c1:f7:a2:d6:18:
8f:65:44:18:d0:c8:30:d3:14:c2:a2:70:97:f9:0e:
e3:79:cf:96:3a:8d:4c:bc:aa:1d:4f:30:55:52:92:
25:45:5a:83:c0:a3:d2:91:ad:66:7f:fe:12:17:1b:
7f:00:79:6c:2a:89:d0:1d:ea:be:b2:f5:64:db:61:
25:3a:66:ca:a6:9e:1f:49:03:7c:1a:d2:eb:cc:b6:
9a:01:b5:71:ab:b2:a7:b4:e8:fc:ef:b6:9b:f0:36:
d9:11:3c:74:35:29:50:68:4b:55:93:c9:87:bd:91:
85:02:d1:ef:d8:0f:49:b1:c1:ab:69:19:a0:c9:3e:
26:98:ed:75:08:6d:4e:c4:c2:ef:58:6a:07:1b:c1:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7B:AE:97:B7:EF:FE:2A:D6:B7:9F:19:20:27:8E:AD:F3:D9:01:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49F1A3EADCAE11EF85F25051762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.22.0/24
Signature Algorithm: sha256WithRSAEncryption
07:5d:6f:f5:a1:49:72:df:53:98:09:6d:aa:57:e6:11:0b:1d:
cd:be:9b:a7:37:ef:be:60:82:57:91:90:63:ce:de:d8:1d:82:
a7:f4:07:28:55:e9:0a:a2:ae:20:dc:f0:39:86:5b:1a:15:34:
66:a6:16:e5:6f:fd:b5:9b:57:a5:c6:9c:b8:4c:30:68:f1:fa:
28:bb:6c:80:4f:ce:ee:ca:4f:bf:b7:5f:c3:ee:16:91:8f:79:
09:7f:40:00:97:1e:69:d7:78:9f:db:56:8b:5f:62:68:f1:d3:
c5:b3:5a:f4:5e:a4:f4:4f:50:9a:c0:57:ed:28:d2:8e:e3:bc:
c4:37:d5:5b:70:a8:98:e7:53:6b:d8:98:d3:1f:eb:09:3e:6f:
18:55:f9:69:ad:25:43:7c:20:53:d0:d4:49:eb:16:58:f5:f4:
fb:34:f9:00:76:5d:bb:16:55:9e:73:b7:3f:27:77:2e:b8:e2:
51:be:f4:8e:db:aa:40:de:65:10:f2:a6:7c:d8:a5:6b:1d:4e:
ba:4f:f9:42:bf:c5:61:fc:1e:aa:fd:cc:a8:bd:47:87:54:26:
ff:83:12:16:d4:5a:87:eb:c2:6f:67:15:e7:0c:d0:28:c8:97:
9a:4e:30:48:e9:b3:60:b2:90:39:b9:a5:60:53:07:d1:79:1e:
3d:c6:7e:17
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARTzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MTI1NzM2WhcNMjUwMjA4MTI1NzM2WjAYMRYw
FAYDVQQDEw02Nzk3ODJjMy03NDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwp2ZntULLH01cuGgS9bhnX9zrMgajM4WXsVF9RjUti1SukRn5aeoKS7N
ZsmIcWKyMLfE42jsSeZCJJfx1HJDuylfpeHlXoNG+tuXspRvHNG1DNcGaouHrRVb
xdQgZKDs4p64LXVtKA4age/c3HS0bXxfwfei1hiPZUQY0Mgw0xTConCX+Q7jec+W
Oo1MvKodTzBVUpIlRVqDwKPSka1mf/4SFxt/AHlsKonQHeq+svVk22ElOmbKpp4f
SQN8GtLrzLaaAbVxq7KntOj877ab8DbZETx0NSlQaEtVk8mHvZGFAtHv2A9JscGr
aRmgyT4mmO11CG1OxMLvWGoHG8GzfwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHd7
rpe37/4q1refGSAnjq3z2QHvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80OUYxQTNFQURDQUUxMUVGODVGMjUwNTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOsWMA0GCSqGSIb3DQEBCwUA
A4IBAQAHXW/1oUly31OYCW2qV+YRCx3NvpunN+++YIJXkZBjzt7YHYKn9AcoVekK
oq4g3PA5hlsaFTRmphblb/21m1elxpy4TDBo8foou2yAT87uyk+/t1/D7haRj3kJ
f0AAlx5p13if21aLX2Jo8dPFs1r0XqT0T1CawFftKNKO47zEN9VbcKiY51Nr2JjT
H+sJPm8YVflprSVDfCBT0NRJ6xZY9fT7NPkAdl27FlWec7c/J3cuuOJRvvSO26pA
3mUQ8qZ82KVrHU66T/lCv8Vh/B6q/cyovUeHVCb/gxIW1FqH68JvZxXnDNAoyJea
TjBI6bNgspA5uaVgUwfReR49xn4X
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:40:04 2025 by rpki-client