Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C30B856D7FB11EFA9D85CB9762E951A.roa
File: 4C30B856D7FB11EFA9D85CB9762E951A.roa (raw, json)
Hash identifier: Lu9QkhW6cBxiD0PVdJkBNNHqLUPPwkldDsMLGVR0DGs=
Subject key identifier: D2:87:82:80:4E:72:5B:8E:58:4B:44:0A:BD:DC:A7:91:85:F6:82:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DD6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C30B856D7FB11EFA9D85CB9762E951A.roa
Signing time: Tue 21 Jan 2025 13:26:19 +0000
ROA not before: Tue 21 Jan 2025 13:26:15 +0000
ROA not after: Sat 01 Feb 2025 13:26:15 +0000
asID: 48031
IP address blocks: 156.246.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69078 (0x10dd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:26:15 2025 GMT
Not After : Feb 1 13:26:15 2025 GMT
Subject: CN=678fa07b-c5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:b0:94:ef:53:e7:f4:51:0a:56:57:b4:9b:
0e:2e:0d:ad:97:5d:e9:5b:45:cc:26:b3:5e:bf:c0:
44:ee:71:df:72:90:eb:d7:52:e7:d6:a6:92:87:c8:
ea:c5:65:17:36:e3:34:14:cb:85:84:b2:83:f3:cd:
8d:63:9b:aa:a8:b7:cc:f0:a1:01:b2:08:bb:06:55:
92:3a:d6:21:df:b1:2b:99:ed:ad:5c:d7:7e:0b:ad:
21:55:b7:0a:80:4e:e6:1c:91:57:bc:3e:ab:d3:c5:
fa:37:a1:a6:ba:1f:19:49:5c:f8:5d:9e:a2:91:80:
6c:f6:1a:77:2b:10:7a:ff:c8:e5:f6:98:b0:44:e3:
74:07:92:d1:83:61:40:45:27:3f:bc:44:9b:93:f3:
68:c2:ff:d7:69:82:f0:cc:55:ac:07:bd:19:c4:6b:
76:af:77:40:02:ba:32:c1:c1:36:c4:6e:b0:2f:c5:
72:cb:a8:88:ef:ed:f5:3d:a6:d3:df:68:3d:fe:01:
58:f3:71:4f:c4:fe:23:6e:5a:e8:12:b9:ac:f6:c8:
a3:29:fd:9c:48:a5:45:5d:ed:ce:8f:8b:a3:70:dd:
50:3d:8d:13:13:95:33:94:c9:b7:7e:46:39:1d:05:
77:89:55:46:60:d4:3c:b0:15:71:29:1e:d8:be:ac:
5d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:87:82:80:4E:72:5B:8E:58:4B:44:0A:BD:DC:A7:91:85:F6:82:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C30B856D7FB11EFA9D85CB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.140.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0e:3b:40:9c:7c:ec:af:df:ea:4b:ec:2a:09:00:4a:2d:41:
0e:fa:e8:b1:f8:a4:60:92:61:56:b9:9c:4b:27:06:94:66:47:
18:ae:06:95:fd:f5:40:87:db:56:03:66:04:58:76:84:8b:97:
9a:dd:92:6f:40:7d:77:34:ce:ef:d9:ea:c8:c4:88:f6:93:56:
0a:0b:6a:9e:b1:26:f0:7e:4c:74:be:76:bb:b8:f4:8f:d4:cf:
d9:6c:6b:f1:01:d9:d4:3a:b1:85:ad:42:8d:09:b2:5f:7f:0f:
04:57:24:e6:c6:f0:39:3f:94:1c:ee:25:bf:0c:f3:cf:2c:ef:
8a:ba:93:f6:84:95:58:99:06:36:6f:78:51:e7:a3:e3:bb:d3:
65:34:44:bc:2e:bb:1b:7b:46:90:81:26:95:6a:52:76:47:55:
13:81:cc:c0:04:b6:b5:7e:23:ba:50:4f:c1:23:49:88:d2:40:
81:0d:51:b4:fa:67:15:72:44:80:7f:cb:fa:08:55:37:2b:3d:
db:a3:96:4a:90:ba:0e:b0:78:71:51:2c:c3:eb:95:06:f5:8d:
cc:26:a4:7c:69:d1:0e:50:45:41:a3:65:8e:37:a3:a2:04:6e:
b3:d9:70:51:a5:17:fe:80:99:d3:20:ef:76:81:d7:64:f7:af:
5f:33:7e:6f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ3WMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTMyNjE1WhcNMjUwMjAxMTMyNjE1WjAYMRYw
FAYDVQQDEw02NzhmYTA3Yi1jNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuSmwlO9T5/RRClZXtJsOLg2tl13pW0XMJrNev8BE7nHfcpDr11Ln1qaS
h8jqxWUXNuM0FMuFhLKD882NY5uqqLfM8KEBsgi7BlWSOtYh37Erme2tXNd+C60h
VbcKgE7mHJFXvD6r08X6N6Gmuh8ZSVz4XZ6ikYBs9hp3KxB6/8jl9piwRON0B5LR
g2FARSc/vESbk/Nowv/XaYLwzFWsB70ZxGt2r3dAAroywcE2xG6wL8Vyy6iI7+31
PabT32g9/gFY83FPxP4jblroErms9sijKf2cSKVFXe3Oj4ujcN1QPY0TE5UzlMm3
fkY5HQV3iVVGYNQ8sBVxKR7YvqxdpQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNKH
goBOcluOWEtECr3cp5GF9oL4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80QzMwQjg1NkQ3RkIxMUVGQTlEODVDQjk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPaMMA0GCSqGSIb3DQEBCwUA
A4IBAQBNDjtAnHzsr9/qS+wqCQBKLUEO+uix+KRgkmFWuZxLJwaUZkcYrgaV/fVA
h9tWA2YEWHaEi5ea3ZJvQH13NM7v2erIxIj2k1YKC2qesSbwfkx0vna7uPSP1M/Z
bGvxAdnUOrGFrUKNCbJffw8EVyTmxvA5P5Qc7iW/DPPPLO+KupP2hJVYmQY2b3hR
56Pju9NlNES8Lrsbe0aQgSaValJ2R1UTgczABLa1fiO6UE/BI0mI0kCBDVG0+mcV
ckSAf8v6CFU3Kz3bo5ZKkLoOsHhxUSzD65UG9Y3MJqR8adEOUEVBo2WON6OiBG6z
2XBRpRf+gJnTIO92gddk969fM35v
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:07:24 2025 by rpki-client