Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/540330C8D7E111EFA8065890762E951A.roa
File: 540330C8D7E111EFA8065890762E951A.roa (raw, json)
Hash identifier: HWv+4aLz7j7W5RYMBlyuy8tDPAepYvf6n8/tKfaUHbY=
Subject key identifier: A1:74:9F:33:95:AB:93:4D:E5:89:15:E4:51:D5:E8:BA:67:33:7B:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/540330C8D7E111EFA8065890762E951A.roa
Signing time: Tue 21 Jan 2025 10:20:25 +0000
ROA not before: Tue 21 Jan 2025 10:20:21 +0000
ROA not after: Sat 01 Feb 2025 10:20:21 +0000
asID: 44559
IP address blocks: 156.246.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68906 (0x10d2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 10:20:21 2025 GMT
Not After : Feb 1 10:20:21 2025 GMT
Subject: CN=678f74e9-2740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:ba:93:98:ba:3c:8f:da:f6:c9:32:b3:c2:
e8:04:dc:77:d9:00:42:d7:d8:a8:ac:f6:24:18:f7:
c6:8f:4a:e0:fd:86:78:d5:8f:d3:1c:35:02:75:34:
d8:da:58:2b:29:dd:4f:79:26:b7:d3:5f:44:01:5f:
78:13:99:7b:7e:b0:a7:a4:33:19:45:a9:a8:92:b6:
91:49:08:4e:09:2b:e3:a6:15:50:44:80:7f:ac:82:
b0:74:e9:3b:6e:25:bf:1f:aa:45:10:b4:bd:b3:77:
7f:b9:5c:e9:52:d4:4b:3c:33:0b:0c:4a:00:91:dc:
53:c1:5b:43:bf:f4:00:00:2b:14:e4:5e:01:74:12:
2b:7a:7c:80:0d:d4:55:ff:e2:f1:c4:9e:35:98:d8:
6b:d3:65:dd:46:31:b8:6d:02:36:01:4b:6f:7f:c0:
45:90:94:bb:ff:d2:99:96:70:17:98:f6:2b:17:d8:
7e:8d:fc:36:d9:e2:0b:70:12:a5:29:b5:eb:4e:cc:
85:65:1f:c4:c4:43:e7:e3:fe:55:ea:a5:72:ef:5e:
7b:3d:a2:f5:c6:34:f5:d1:56:74:4b:75:33:5e:bf:
7c:3c:12:89:2a:b4:b6:9d:e8:61:91:bf:1e:61:10:
c7:81:08:45:d5:e3:18:c7:6e:e8:95:58:4a:43:5c:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:74:9F:33:95:AB:93:4D:E5:89:15:E4:51:D5:E8:BA:67:33:7B:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/540330C8D7E111EFA8065890762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.176.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:92:68:53:0a:9d:73:3f:01:cc:8f:63:11:a8:d2:f6:2e:41:
01:70:03:7c:37:fb:94:3f:c0:22:15:14:dd:47:58:ce:f1:3e:
e5:9c:b5:72:2f:b4:77:ac:7d:d3:b1:a6:8f:74:5e:75:b6:3f:
8f:ae:5c:0f:00:a3:77:9e:78:27:af:80:8d:95:f0:02:ac:67:
9c:fe:9a:ed:72:46:20:c1:fb:e2:4a:77:9e:48:ac:33:18:8c:
47:32:1b:4a:6f:e6:7b:ae:fe:84:dc:cc:e6:da:33:f7:23:37:
fd:cc:76:0b:7b:40:58:17:11:f0:aa:13:75:19:bf:ab:ce:a8:
8c:e3:97:43:82:af:62:b6:73:c8:5b:8a:33:0f:cf:33:59:a9:
bf:05:1f:30:37:87:f9:72:28:aa:43:4b:58:4b:2c:f6:fa:40:
08:ba:33:63:7f:36:7a:9f:dc:16:ce:75:fe:6c:2b:4e:09:97:
f8:86:35:26:db:29:8d:d4:da:2a:3e:6e:a6:8d:a0:fa:6d:c1:
5a:85:01:3e:7e:ce:cb:e0:6f:59:19:ee:22:aa:9c:f5:8d:64:
5f:43:19:96:e4:3e:d9:48:97:9c:0f:d2:28:24:01:b3:86:61:
e8:55:56:5c:a9:cd:8c:e7:9c:1c:80:da:63:1e:77:58:d1:62:
cd:99:d3:33
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ0qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTAyMDIxWhcNMjUwMjAxMTAyMDIxWjAYMRYw
FAYDVQQDEw02NzhmNzRlOS0yNzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyla6k5i6PI/a9skys8LoBNx32QBC19iorPYkGPfGj0rg/YZ41Y/THDUC
dTTY2lgrKd1PeSa3019EAV94E5l7frCnpDMZRamokraRSQhOCSvjphVQRIB/rIKw
dOk7biW/H6pFELS9s3d/uVzpUtRLPDMLDEoAkdxTwVtDv/QAACsU5F4BdBIrenyA
DdRV/+LxxJ41mNhr02XdRjG4bQI2AUtvf8BFkJS7/9KZlnAXmPYrF9h+jfw22eIL
cBKlKbXrTsyFZR/ExEPn4/5V6qVy7157PaL1xjT10VZ0S3UzXr98PBKJKrS2nehh
kb8eYRDHgQhF1eMYx27olVhKQ1ypCQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKF0
nzOVq5NN5YkV5FHV6LpnM3uxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NDAzMzBDOEQ3RTExMUVGQTgwNjU4OTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPawMA0GCSqGSIb3DQEBCwUA
A4IBAQAtkmhTCp1zPwHMj2MRqNL2LkEBcAN8N/uUP8AiFRTdR1jO8T7lnLVyL7R3
rH3TsaaPdF51tj+PrlwPAKN3nngnr4CNlfACrGec/prtckYgwfviSneeSKwzGIxH
MhtKb+Z7rv6E3Mzm2jP3Izf9zHYLe0BYFxHwqhN1Gb+rzqiM45dDgq9itnPIW4oz
D88zWam/BR8wN4f5ciiqQ0tYSyz2+kAIujNjfzZ6n9wWznX+bCtOCZf4hjUm2ymN
1NoqPm6mjaD6bcFahQE+fs7L4G9ZGe4iqpz1jWRfQxmW5D7ZSJecD9IoJAGzhmHo
VVZcqc2M55wcgNpjHndY0WLNmdMz
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:23:46 2025 by rpki-client