Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/524D4080DCB811EFBDA67192762E951A.roa
File: 524D4080DCB811EFBDA67192762E951A.roa (raw, json)
Hash identifier: Bjt1Woy3WLlbmZ8XkxJIBZyLlQzL8Y7TAVLT1S58Fis=
Subject key identifier: 30:3A:A7:A9:58:41:CA:9A:55:83:C0:75:65:CB:1B:1F:DE:CE:23:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011535
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/524D4080DCB811EFBDA67192762E951A.roa
Signing time: Mon 27 Jan 2025 14:09:29 +0000
ROA not before: Mon 27 Jan 2025 14:09:25 +0000
ROA not after: Sat 08 Feb 2025 14:09:25 +0000
asID: 22773
IP address blocks: 156.249.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70965 (0x11535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 14:09:25 2025 GMT
Not After : Feb 8 14:09:25 2025 GMT
Subject: CN=67979398-43c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:c1:5b:30:93:6b:59:cf:f9:90:39:ca:33:
94:b1:d1:a5:8e:58:6a:ac:fd:20:5a:dc:59:d8:14:
75:9c:42:60:76:37:70:68:f8:67:9a:ea:52:27:d7:
0d:be:fc:e5:52:fd:49:5e:24:54:4b:f2:98:17:01:
d5:55:85:b9:1b:48:0d:76:e6:3c:bd:ec:10:8f:fe:
6b:45:db:59:52:76:5e:d9:df:f5:64:3f:b9:f7:f7:
61:75:a9:17:d6:16:c4:d4:57:bc:a9:9b:7a:2b:de:
b9:00:79:c2:59:ac:50:9d:06:68:d7:5f:83:b3:ef:
dc:6f:3d:4c:7b:1a:e2:1f:0e:36:ef:dd:49:31:aa:
6b:cf:f0:7c:01:b6:d5:1a:24:ef:16:29:aa:a6:62:
dd:0f:41:fa:bc:5f:5e:62:80:71:b3:a8:56:e7:c5:
ac:40:35:8f:10:b5:ad:7b:61:e6:a5:d5:19:a4:0e:
55:eb:9f:96:b4:7a:6d:56:ba:8f:93:d0:12:2d:5a:
62:46:17:d3:f2:c3:f7:6e:77:3c:e3:67:62:f5:71:
5f:fc:65:f1:1d:31:a1:4e:34:e5:c9:17:52:44:a2:
2c:4c:d4:cf:ae:53:13:90:4a:47:40:eb:8e:8b:d8:
80:4d:c1:76:34:5f:70:b4:3d:ec:95:a8:61:ad:a7:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3A:A7:A9:58:41:CA:9A:55:83:C0:75:65:CB:1B:1F:DE:CE:23:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/524D4080DCB811EFBDA67192762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:d4:3a:e7:03:42:f9:4a:b4:9d:27:23:11:a5:11:ac:4b:90:
4e:7e:84:77:59:be:20:02:96:a3:6f:a7:fc:6f:6d:40:47:00:
5e:9a:09:a1:d9:60:7e:51:43:7a:e4:36:cb:de:34:e9:08:e9:
c8:ab:53:87:8b:c4:b4:11:f7:07:16:fb:0f:76:7f:12:30:a5:
22:d7:ba:ae:e6:50:62:da:18:0f:b1:8b:d7:ac:e8:fd:4b:36:
16:8d:a5:18:63:20:45:cf:b2:51:72:cd:9e:0d:79:f2:ab:03:
9c:2d:48:27:9d:a1:db:1c:2c:78:8c:a9:f1:f7:85:87:da:58:
da:9c:3d:24:d3:49:a7:7f:d7:2a:c0:fe:47:aa:81:f2:ed:f3:
f0:64:9e:a8:f2:39:e1:39:98:3b:4e:aa:fa:dc:fb:bd:c9:b0:
9a:da:93:e9:f5:cf:4a:5d:ac:92:89:80:7f:ec:ad:95:6c:c3:
48:4d:e9:fe:49:8a:34:e3:95:fb:09:b2:6d:41:56:36:48:de:
0e:27:97:98:1d:c2:47:4e:1d:32:91:15:10:6f:71:96:2d:f0:
94:7a:2e:b9:f1:7f:4c:93:19:b6:c3:b1:73:a3:1f:85:20:d2:
81:5e:21:ca:1c:26:b1:20:93:9b:16:41:ed:8b:27:1e:3e:f4:
c0:69:dd:10
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARU1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MTQwOTI1WhcNMjUwMjA4MTQwOTI1WjAYMRYw
FAYDVQQDEw02Nzk3OTM5OC00M2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzv3BWzCTa1nP+ZA5yjOUsdGljlhqrP0gWtxZ2BR1nEJgdjdwaPhnmupS
J9cNvvzlUv1JXiRUS/KYFwHVVYW5G0gNduY8vewQj/5rRdtZUnZe2d/1ZD+59/dh
dakX1hbE1Fe8qZt6K965AHnCWaxQnQZo11+Ds+/cbz1MexriHw42791JMaprz/B8
AbbVGiTvFimqpmLdD0H6vF9eYoBxs6hW58WsQDWPELWte2HmpdUZpA5V65+WtHpt
VrqPk9ASLVpiRhfT8sP3bnc842di9XFf/GXxHTGhTjTlyRdSRKIsTNTPrlMTkEpH
QOuOi9iATcF2NF9wtD3slahhracPnQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDA6
p6lYQcqaVYPAdWXLGx/eziN7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MjRENDA4MERDQjgxMUVGQkRBNjcxOTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPkUMA0GCSqGSIb3DQEBCwUA
A4IBAQCm1DrnA0L5SrSdJyMRpRGsS5BOfoR3Wb4gApajb6f8b21ARwBemgmh2WB+
UUN65DbL3jTpCOnIq1OHi8S0EfcHFvsPdn8SMKUi17qu5lBi2hgPsYvXrOj9SzYW
jaUYYyBFz7JRcs2eDXnyqwOcLUgnnaHbHCx4jKnx94WH2ljanD0k00mnf9cqwP5H
qoHy7fPwZJ6o8jnhOZg7Tqr63Pu9ybCa2pPp9c9KXaySiYB/7K2VbMNITen+SYo0
45X7CbJtQVY2SN4OJ5eYHcJHTh0ykRUQb3GWLfCUei658X9Mkxm2w7Fzox+FINKB
XiHKHCaxIJObFkHtiycePvTAad0Q
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:35:30 2025 by rpki-client