Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C553E92D95811EFB416124D762E951A.roa
File: 5C553E92D95811EFB416124D762E951A.roa (raw, json)
Hash identifier: of4MfW6AP9BvsFPowR6eQHy+eYiaqgtMMhBOh1DX2WU=
Subject key identifier: F9:48:5B:CD:AE:43:BD:B0:4A:DE:A8:D0:5E:26:4F:0D:40:77:62:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010EAD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C553E92D95811EFB416124D762E951A.roa
Signing time: Thu 23 Jan 2025 07:05:00 +0000
ROA not before: Thu 23 Jan 2025 07:04:56 +0000
ROA not after: Sat 15 Mar 2025 07:04:56 +0000
asID: 138915
IP address blocks: 156.244.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69293 (0x10ead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 07:04:56 2025 GMT
Not After : Mar 15 07:04:56 2025 GMT
Subject: CN=6791ea1c-b0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:4f:4d:fb:8a:91:0c:9c:eb:20:46:b4:ba:
3e:77:e7:96:2f:ec:64:18:f7:8c:dc:00:48:fb:8c:
a8:81:2d:c7:2c:35:43:55:b1:0d:81:a3:7f:8a:49:
66:d5:8c:62:c8:9e:d7:24:7a:65:fa:72:a3:b5:c4:
9f:f9:a3:9b:d1:6b:aa:3b:67:d8:fc:34:9b:eb:ad:
86:3c:57:e4:30:6c:cc:1b:a1:2f:52:16:2b:4a:d7:
50:55:f7:72:5e:f8:48:c7:c7:62:85:24:a6:ad:57:
8c:04:19:58:5a:cb:31:83:80:62:10:b4:85:6f:8d:
e3:f1:27:95:d9:5b:3d:4a:f6:9d:48:d1:ac:1a:e7:
11:00:ba:04:0c:de:46:4d:6c:37:1c:a1:07:18:f2:
31:21:a2:d9:fd:68:97:74:78:2c:14:c8:92:b3:0b:
a5:49:aa:28:80:54:de:38:d8:03:c2:30:6b:0d:57:
a3:25:8b:bf:45:27:ca:04:ab:bf:71:b9:6a:44:24:
3d:f1:6f:42:b4:8b:c3:1c:6c:41:d9:df:66:91:d0:
55:7b:5c:50:7c:5e:58:6f:36:19:b2:29:57:a9:ff:
b3:70:a8:d6:69:43:39:56:13:5f:80:cb:2a:1b:00:
58:4c:b7:61:1e:87:87:17:bb:ca:90:63:61:66:c6:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:48:5B:CD:AE:43:BD:B0:4A:DE:A8:D0:5E:26:4F:0D:40:77:62:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C553E92D95811EFB416124D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1e:b5:c7:58:0b:94:b3:dd:36:e1:1a:b5:a5:5e:f8:bc:b2:
d3:ab:23:44:ca:fb:7d:7f:9e:80:0f:f3:5f:e8:27:0b:4a:a1:
5e:4a:a7:3d:ad:2c:e2:d5:c3:b3:27:27:54:15:2e:da:d6:30:
22:fb:d8:ff:3f:31:89:da:b4:e3:9f:e6:f2:0a:31:5b:e2:e6:
e3:8b:42:19:24:d0:47:dc:af:6c:43:71:fd:5b:a5:a6:9c:b4:
8b:cc:99:d3:4c:13:4e:10:a4:28:87:d6:da:a5:1d:2d:f4:f6:
bc:b6:54:ed:99:f8:b4:d2:b3:dd:cd:f2:e0:8a:70:11:d2:fb:
c3:34:59:1f:36:46:4c:d4:0b:1b:aa:77:0d:ac:2c:92:10:55:
e4:d5:f3:72:13:17:c0:f1:3e:0a:d6:92:c4:24:92:92:ea:73:
d3:11:63:a0:87:55:65:c6:45:7e:dd:b7:a1:8a:8e:27:26:14:
0d:ab:e6:a3:97:4e:fc:ae:3d:6e:e4:fa:4e:26:e8:f5:49:ba:
35:62:7b:25:65:22:4f:6a:f5:d1:ca:ab:63:02:5f:36:13:c7:
37:c8:8d:74:45:a5:e4:ac:52:b5:46:1b:fb:7e:45:a9:01:c9:
db:1f:b8:23:8d:36:ea:15:64:f8:20:6c:f7:df:f5:55:7c:2b:
82:32:5f:ea
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ6tMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIzMDcwNDU2WhcNMjUwMzE1MDcwNDU2WjAYMRYw
FAYDVQQDEw02NzkxZWExYy1iMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt9xPTfuKkQyc6yBGtLo+d+eWL+xkGPeM3ABI+4yogS3HLDVDVbENgaN/
iklm1YxiyJ7XJHpl+nKjtcSf+aOb0WuqO2fY/DSb662GPFfkMGzMG6EvUhYrStdQ
VfdyXvhIx8dihSSmrVeMBBlYWssxg4BiELSFb43j8SeV2Vs9SvadSNGsGucRALoE
DN5GTWw3HKEHGPIxIaLZ/WiXdHgsFMiSswulSaoogFTeONgDwjBrDVejJYu/RSfK
BKu/cblqRCQ98W9CtIvDHGxB2d9mkdBVe1xQfF5YbzYZsilXqf+zcKjWaUM5VhNf
gMsqGwBYTLdhHoeHF7vKkGNhZsaXnQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPlI
W82uQ72wSt6o0F4mTw1Ad2IRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QzU1M0U5MkQ5NTgxMUVGQjQxNjEyNEQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQXMA0GCSqGSIb3DQEBCwUA
A4IBAQCBHrXHWAuUs9024Rq1pV74vLLTqyNEyvt9f56AD/Nf6CcLSqFeSqc9rSzi
1cOzJydUFS7a1jAi+9j/PzGJ2rTjn+byCjFb4ubji0IZJNBH3K9sQ3H9W6WmnLSL
zJnTTBNOEKQoh9bapR0t9Pa8tlTtmfi00rPdzfLginAR0vvDNFkfNkZM1AsbqncN
rCySEFXk1fNyExfA8T4K1pLEJJKS6nPTEWOgh1VlxkV+3behio4nJhQNq+ajl078
rj1u5PpOJuj1Sbo1YnslZSJPavXRyqtjAl82E8c3yI10RaXkrFK1Rhv7fkWpAcnb
H7gjjTbqFWT4IGz33/VVfCuCMl/q
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:39:21 2025 by rpki-client