Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55F08D72D57A11EFB896DD59762E951A.roa
File: 55F08D72D57A11EFB896DD59762E951A.roa (raw, json)
Hash identifier: 7nPK0y8QbkbhfIvd3US10/bpBZpv5EbjYINc1v99ijM=
Subject key identifier: BF:DE:1F:4A:74:01:9D:D2:92:71:D6:87:B0:CB:E2:28:1A:B6:6C:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B2F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55F08D72D57A11EFB896DD59762E951A.roa
Signing time: Sat 18 Jan 2025 08:58:08 +0000
ROA not before: Sat 18 Jan 2025 08:58:04 +0000
ROA not after: Thu 06 Feb 2025 08:58:04 +0000
asID: 134489
IP address blocks: 156.238.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68399 (0x10b2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 08:58:04 2025 GMT
Not After : Feb 6 08:58:04 2025 GMT
Subject: CN=678b6d1f-ffe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:7a:c2:b0:6b:95:23:fe:46:2b:38:a2:21:
6f:31:8d:25:ec:30:3c:c0:b2:8f:ac:8c:fb:ae:22:
9d:70:80:e5:5d:e0:b2:17:f8:3e:60:7c:c8:3f:76:
ea:2a:2c:de:b1:91:1b:99:ca:31:8e:fe:47:30:9b:
aa:95:07:37:2c:44:71:ff:fd:5f:69:cd:cb:8d:b9:
b3:ba:5d:81:a2:8f:b4:33:3a:c3:18:eb:ad:bf:75:
09:0b:1e:21:0f:d1:a5:10:65:61:ba:fb:ed:13:bf:
f6:a5:60:fe:22:27:89:74:1f:35:46:b2:ea:4e:40:
c4:02:89:c6:de:2e:8a:c5:15:5f:7c:1d:5e:d5:ab:
a1:f1:8a:de:08:7a:f4:34:c1:50:0d:1f:fb:89:bb:
a8:56:56:20:7b:2d:6f:2a:3b:45:b1:ab:b6:6e:90:
f7:ac:ae:6e:fe:72:e3:cc:5c:70:14:95:ff:9f:9b:
a2:e9:d5:27:6b:76:7e:8d:c1:94:d3:4b:5d:31:d1:
eb:89:f5:e8:72:8e:4b:a4:6e:a0:67:5f:6d:00:66:
06:05:3b:d1:f3:e8:9b:f1:a7:de:58:79:9e:45:50:
88:8f:81:f7:83:24:32:08:34:13:2f:56:56:c6:22:
5e:7b:12:3a:7f:b3:51:a6:ea:aa:d1:14:b3:cb:e3:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DE:1F:4A:74:01:9D:D2:92:71:D6:87:B0:CB:E2:28:1A:B6:6C:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55F08D72D57A11EFB896DD59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.86.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e1:75:ce:06:3e:7a:f4:a5:b3:84:e8:18:ee:d1:1c:84:62:
1d:ad:3b:35:36:4e:17:11:99:2c:e7:63:b8:cc:8c:e4:ee:e0:
40:58:51:dc:1b:5b:e5:b0:5d:9b:e0:f2:57:35:03:39:ba:e8:
21:8d:9f:58:8f:f8:b0:d1:da:5f:c8:14:bd:3e:3a:2e:a4:e9:
ae:27:71:d5:05:78:aa:c6:ad:c6:4c:ba:f0:0b:8c:f8:ae:1d:
b5:e9:77:80:99:11:7d:02:bb:6b:56:6e:39:05:65:3c:91:fe:
8d:f9:84:19:92:9f:00:99:bc:f1:30:cf:fa:a5:73:bf:37:bf:
78:a8:e1:89:d3:83:fd:47:a9:df:d2:d8:ce:d8:4f:23:33:64:
fa:90:32:4f:d0:af:4a:1c:f7:d1:81:d5:ac:d3:33:0d:79:43:
34:60:51:40:03:92:97:d4:3b:b1:34:0a:0c:23:fd:7e:89:ea:
2c:46:99:b2:c6:c1:80:6b:4e:55:97:a9:16:3e:c2:ac:51:01:
68:c0:14:19:f8:06:54:89:f5:28:d6:ce:6f:ad:00:ac:e5:a2:
56:d4:ce:10:fc:fa:09:e5:f8:58:e6:79:ff:52:05:f4:69:ef:
3b:77:34:45:d2:de:f8:98:86:d2:cf:4e:04:b1:e3:fa:09:b5:
d5:d0:78:aa
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQsvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE4MDg1ODA0WhcNMjUwMjA2MDg1ODA0WjAYMRYw
FAYDVQQDEw02NzhiNmQxZi1mZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxC96wrBrlSP+Ris4oiFvMY0l7DA8wLKPrIz7riKdcIDlXeCyF/g+YHzI
P3bqKizesZEbmcoxjv5HMJuqlQc3LERx//1fac3Ljbmzul2Boo+0MzrDGOutv3UJ
Cx4hD9GlEGVhuvvtE7/2pWD+IieJdB81RrLqTkDEAonG3i6KxRVffB1e1auh8Yre
CHr0NMFQDR/7ibuoVlYgey1vKjtFsau2bpD3rK5u/nLjzFxwFJX/n5ui6dUna3Z+
jcGU00tdMdHrifXoco5LpG6gZ19tAGYGBTvR8+ib8afeWHmeRVCIj4H3gyQyCDQT
L1ZWxiJeexI6f7NRpuqq0RSzy+MOywIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL/e
H0p0AZ3SknHWh7DL4igatmwjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NUYwOEQ3MkQ1N0ExMUVGQjg5NkRENTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO5WMA0GCSqGSIb3DQEBCwUA
A4IBAQAg4XXOBj569KWzhOgY7tEchGIdrTs1Nk4XEZks52O4zIzk7uBAWFHcG1vl
sF2b4PJXNQM5uughjZ9Yj/iw0dpfyBS9PjoupOmuJ3HVBXiqxq3GTLrwC4z4rh21
6XeAmRF9ArtrVm45BWU8kf6N+YQZkp8AmbzxMM/6pXO/N794qOGJ04P9R6nf0tjO
2E8jM2T6kDJP0K9KHPfRgdWs0zMNeUM0YFFAA5KX1DuxNAoMI/1+ieosRpmyxsGA
a05Vl6kWPsKsUQFowBQZ+AZUifUo1s5vrQCs5aJW1M4Q/PoJ5fhY5nn/UgX0ae87
dzRF0t74mIbSz04EseP6CbXV0Hiq
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:57 2025 by rpki-client