Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CD59376C32E11EF912671BA762E951A.roa
File: 4CD59376C32E11EF912671BA762E951A.roa (raw, json)
Hash identifier: SPFiVAkfL+DnDCj+Ane6zSz635oIL0mA3Nf8Dl6b/rU=
Subject key identifier: AE:E8:61:1D:26:60:34:EE:F0:B8:7B:C5:B6:86:3E:8A:C2:33:BB:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EAED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CD59376C32E11EF912671BA762E951A.roa
Signing time: Thu 26 Dec 2024 02:08:30 +0000
ROA not before: Thu 26 Dec 2024 02:08:26 +0000
ROA not after: Wed 10 Dec 2025 02:08:26 +0000
asID: 984
IP address blocks: 156.243.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60141 (0xeaed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 02:08:26 2024 GMT
Not After : Dec 10 02:08:26 2025 GMT
Subject: CN=676cba9e-1467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:c8:10:85:5f:86:15:fb:80:8e:09:a9:dc:
0c:d3:50:a1:96:58:8e:67:e1:5a:96:79:72:57:f2:
32:24:8b:0d:58:d4:73:4a:a6:29:b7:82:af:2c:18:
36:15:24:ed:08:89:28:2d:69:04:fc:dd:df:0a:80:
6f:02:cb:42:6a:7a:07:f6:38:2e:4d:51:c0:02:99:
8b:d2:d3:36:30:2e:b7:12:53:51:12:02:55:e9:a5:
f4:df:e9:b1:21:38:86:b5:4a:21:e5:a4:47:bd:a6:
06:cb:b3:50:88:fc:39:4f:8f:91:d7:cb:b4:39:2f:
83:a3:71:6e:b2:9e:cc:5d:1b:3a:91:4b:c2:49:90:
6a:72:12:99:90:51:35:10:25:9c:93:16:62:2d:1b:
6f:59:73:91:eb:54:9b:95:9e:c1:9b:27:de:10:d3:
d2:61:f6:cd:f2:2d:11:4c:59:5a:56:c4:79:ef:f9:
72:51:a1:b8:9a:3c:1d:7d:68:85:bf:1b:d8:3f:9a:
f4:c7:b3:26:29:73:a8:58:0d:19:0f:87:98:72:1a:
e8:47:59:c4:d3:10:95:4e:9a:2a:13:43:2d:f0:37:
f0:af:46:79:d6:91:cf:db:54:7f:30:24:08:d2:c0:
c0:92:4a:7e:0d:47:55:a3:22:cc:d9:59:30:8c:90:
c5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E8:61:1D:26:60:34:EE:F0:B8:7B:C5:B6:86:3E:8A:C2:33:BB:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CD59376C32E11EF912671BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b0:19:1a:e8:56:1d:7f:88:a1:e8:98:d8:58:65:b1:59:7d:
7f:f6:ba:97:08:cf:18:1b:df:1c:aa:84:34:92:7b:86:55:1d:
78:d6:8d:8c:11:06:ee:fb:51:65:65:18:1e:c0:04:5e:32:2d:
61:0f:a6:fa:ad:5e:83:80:30:05:c0:0c:7a:27:26:a2:c7:8a:
bd:d9:d6:52:ff:e1:85:91:4e:22:b6:e6:cc:30:39:3f:29:b0:
8e:0f:c4:6c:81:62:ba:fc:a8:11:21:08:11:3e:8f:e2:e3:85:
66:b6:25:b4:ac:be:50:3e:21:bf:86:9d:f9:ee:b3:7c:90:be:
70:31:f1:98:5c:a5:54:fb:20:b7:85:e7:56:3b:76:43:41:0b:
75:86:02:06:a9:09:6c:e0:78:e1:80:35:d1:44:8a:b0:74:7a:
31:1c:69:01:5d:2f:ed:6b:78:64:57:23:69:92:0c:7f:9c:9f:
04:d4:e5:66:df:78:83:d2:28:35:5a:9a:d2:2f:3c:f5:9e:40:
8c:e6:3c:a0:1a:68:89:f6:a3:3e:35:58:f4:5a:d3:c7:99:d6:
4e:23:83:dc:af:c8:5c:09:aa:1c:d9:6e:9f:24:cc:15:48:08:
22:3d:23:66:b7:ef:71:e4:a8:7e:bd:7c:b2:68:76:47:42:9e:
ff:1d:7a:1d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOrtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDIwODI2WhcNMjUxMjEwMDIwODI2WjAYMRYw
FAYDVQQDEw02NzZjYmE5ZS0xNDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwDLIEIVfhhX7gI4JqdwM01ChlliOZ+FalnlyV/IyJIsNWNRzSqYpt4Kv
LBg2FSTtCIkoLWkE/N3fCoBvAstCanoH9jguTVHAApmL0tM2MC63ElNREgJV6aX0
3+mxITiGtUoh5aRHvaYGy7NQiPw5T4+R18u0OS+Do3Fusp7MXRs6kUvCSZBqchKZ
kFE1ECWckxZiLRtvWXOR61SblZ7BmyfeENPSYfbN8i0RTFlaVsR57/lyUaG4mjwd
fWiFvxvYP5r0x7MmKXOoWA0ZD4eYchroR1nE0xCVTpoqE0Mt8Dfwr0Z51pHP21R/
MCQI0sDAkkp+DUdVoyLM2VkwjJDFpwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFK7o
YR0mYDTu8Lh7xbaGPorCM7tMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80Q0Q1OTM3NkMzMkUxMUVGOTEyNjcxQkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPPXMA0GCSqGSIb3DQEBCwUA
A4IBAQCpsBka6FYdf4ih6JjYWGWxWX1/9rqXCM8YG98cqoQ0knuGVR141o2MEQbu
+1FlZRgewAReMi1hD6b6rV6DgDAFwAx6Jyaix4q92dZS/+GFkU4itubMMDk/KbCO
D8RsgWK6/KgRIQgRPo/i44VmtiW0rL5QPiG/hp357rN8kL5wMfGYXKVU+yC3hedW
O3ZDQQt1hgIGqQls4HjhgDXRRIqwdHoxHGkBXS/ta3hkVyNpkgx/nJ8E1OVm33iD
0ig1WprSLzz1nkCM5jygGmiJ9qM+NVj0WtPHmdZOI4Pcr8hcCaoc2W6fJMwVSAgi
PSNmt+9x5Kh+vXyyaHZHQp7/HXod
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:22:58 2025 by rpki-client