Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BC86A74D3D311EF8E2C7189762E951A.roa
File: 5BC86A74D3D311EF8E2C7189762E951A.roa (raw, json)
Hash identifier: Ja60LaraDv5j9wKKl5/umsyc8sZcJSFfYM1jsGRX16Y=
Subject key identifier: 54:B7:B9:C4:77:2A:9F:50:95:A1:12:00:B4:E9:81:D0:7C:1D:23:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BC86A74D3D311EF8E2C7189762E951A.roa
Signing time: Thu 16 Jan 2025 06:30:20 +0000
ROA not before: Thu 16 Jan 2025 06:30:16 +0000
ROA not after: Wed 19 Feb 2025 06:30:16 +0000
asID: 7018
IP address blocks: 156.226.128.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67750 (0x108a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 06:30:16 2025 GMT
Not After : Feb 19 06:30:16 2025 GMT
Subject: CN=6788a77c-2681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1a:ef:bf:22:2a:99:b1:e6:aa:2e:66:14:00:
68:05:d4:62:8a:f8:80:54:57:d2:b3:8b:b0:d5:fc:
2a:f0:4c:f2:3f:0f:ae:fb:ce:20:71:f7:ba:bb:d5:
59:0f:ce:cc:26:42:9f:1f:97:5d:38:78:1a:70:d0:
39:43:e4:35:a3:29:98:49:6a:cf:25:ff:d6:81:de:
3e:7c:cd:d7:5e:8d:22:9d:29:18:e1:29:62:25:48:
3e:99:a4:2f:81:e9:5a:8f:db:31:a2:4b:be:b3:e3:
6d:33:e1:8f:43:d4:d1:e4:bd:03:f2:a1:93:5e:a0:
55:d7:ee:16:d0:36:3e:26:da:03:33:72:5e:a8:83:
79:0a:ed:ab:f1:04:7c:e6:14:71:d6:f2:a7:e8:b8:
76:23:2f:a0:2f:f8:db:31:64:58:62:9a:33:ed:57:
26:e0:20:ee:12:7f:4e:d2:f4:19:11:4c:39:00:81:
9e:94:43:69:72:06:59:e1:10:a8:d0:fa:ce:a5:c7:
5f:35:5e:47:f4:70:60:92:06:f1:66:1e:4c:b3:a2:
84:77:31:5f:27:5e:98:d1:13:e5:a9:b4:74:8d:a7:
47:20:c2:91:c6:0d:40:b3:5a:d9:7c:1c:89:c4:fb:
2e:b6:65:6b:25:88:fa:b4:a1:f2:cc:23:e7:53:b4:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B7:B9:C4:77:2A:9F:50:95:A1:12:00:B4:E9:81:D0:7C:1D:23:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BC86A74D3D311EF8E2C7189762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.128.0/23
Signature Algorithm: sha256WithRSAEncryption
80:f0:c5:9d:54:f5:60:59:a1:b0:30:dc:de:ae:89:ed:e4:22:
a5:ac:cf:e0:fc:c9:1e:f1:e1:0c:5b:fa:f1:50:40:2b:1c:07:
c3:7b:84:87:a3:93:33:55:5c:ff:13:4b:88:f2:a9:b6:a3:5b:
54:5a:e8:5a:0b:12:72:52:79:b0:a0:48:99:cb:76:69:c1:22:
35:e1:09:a3:ac:a1:89:e6:f9:48:98:2e:53:b7:9b:ee:7b:bf:
20:79:7a:4c:7f:9d:10:f1:f4:d6:a0:21:03:64:0e:b7:e4:2f:
65:91:7e:ba:d7:f9:c0:73:6c:cb:11:43:1c:61:3c:39:27:ff:
0b:cb:73:a6:99:98:9f:53:45:ec:3d:54:71:f0:88:75:5a:29:
b9:95:75:ce:8b:1e:e5:84:c7:e3:e4:bf:7c:b7:06:7b:e8:bc:
f3:0a:00:b9:d5:16:c4:a9:45:13:b1:39:5b:83:22:c4:1b:fe:
ff:05:a3:c4:9d:e2:71:29:c8:af:33:13:88:95:4a:6b:bd:12:
30:f7:bc:45:70:6a:9f:d0:f6:98:1f:01:42:c5:4a:99:25:0e:
e2:12:32:e8:4d:5a:59:7f:b8:58:00:bd:3b:91:0c:d4:d0:de:
44:b2:71:d5:d8:9e:64:46:11:2a:da:a9:23:44:de:b3:cf:89:
3e:16:4a:13
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQimMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE2MDYzMDE2WhcNMjUwMjE5MDYzMDE2WjAYMRYw
FAYDVQQDEw02Nzg4YTc3Yy0yNjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8xrvvyIqmbHmqi5mFABoBdRiiviAVFfSs4uw1fwq8EzyPw+u+84gcfe6
u9VZD87MJkKfH5ddOHgacNA5Q+Q1oymYSWrPJf/Wgd4+fM3XXo0inSkY4SliJUg+
maQvgelaj9sxoku+s+NtM+GPQ9TR5L0D8qGTXqBV1+4W0DY+JtoDM3JeqIN5Cu2r
8QR85hRx1vKn6Lh2Iy+gL/jbMWRYYpoz7Vcm4CDuEn9O0vQZEUw5AIGelENpcgZZ
4RCo0PrOpcdfNV5H9HBgkgbxZh5Ms6KEdzFfJ16Y0RPlqbR0jadHIMKRxg1As1rZ
fByJxPsutmVrJYj6tKHyzCPnU7TOBwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFS3
ucR3Kp9QlaESALTpgdB8HSOwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QkM4NkE3NEQzRDMxMUVGOEUyQzcxODk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOKAMA0GCSqGSIb3DQEBCwUA
A4IBAQCA8MWdVPVgWaGwMNzeront5CKlrM/g/Mke8eEMW/rxUEArHAfDe4SHo5Mz
VVz/E0uI8qm2o1tUWuhaCxJyUnmwoEiZy3ZpwSI14QmjrKGJ5vlImC5Tt5vue78g
eXpMf50Q8fTWoCEDZA635C9lkX661/nAc2zLEUMcYTw5J/8Ly3OmmZifU0XsPVRx
8Ih1Wim5lXXOix7lhMfj5L98twZ76LzzCgC51RbEqUUTsTlbgyLEG/7/BaPEneJx
KcivMxOIlUprvRIw97xFcGqf0PaYHwFCxUqZJQ7iEjLoTVpZf7hYAL07kQzU0N5E
snHV2J5kRhEq2qkjRN6zz4k+FkoT
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:47:37 2025 by rpki-client