Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FE317B8D8A011EFA0573179762E951A.roa
File: 5FE317B8D8A011EFA0573179762E951A.roa (raw, json)
Hash identifier: O5NJwETnU6L5WlbG3pBZyEXM0MxhtbHU/BE1Y+FIkuE=
Subject key identifier: AA:D9:BC:7E:A9:6C:6A:FD:24:8A:2C:91:B2:9F:08:B8:6E:13:8A:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FE317B8D8A011EFA0573179762E951A.roa
Signing time: Wed 22 Jan 2025 09:07:59 +0000
ROA not before: Wed 22 Jan 2025 09:07:55 +0000
ROA not after: Sun 09 Feb 2025 09:07:55 +0000
asID: 6079
IP address blocks: 156.237.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69223 (0x10e67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 22 09:07:55 2025 GMT
Not After : Feb 9 09:07:55 2025 GMT
Subject: CN=6790b56f-ef44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3f:26:78:5e:c5:78:23:ce:66:8c:91:07:2d:
e1:a1:b9:65:b4:68:27:06:30:b7:8d:a7:9c:bd:a3:
76:36:f7:03:2f:07:74:e9:12:0f:19:08:5c:49:b3:
55:a6:06:a8:63:0a:29:ac:c5:95:86:66:91:ad:ce:
3a:ee:45:18:d7:f1:66:1a:73:6f:10:e1:35:5d:c4:
45:82:b0:7c:77:4a:59:25:3a:68:2e:22:4d:3d:c6:
ec:48:94:2f:4f:87:76:e4:2f:94:bb:ba:be:3c:cc:
5a:3b:46:6b:a7:f3:e8:3d:cc:2d:c7:14:25:ff:39:
26:c8:0d:89:3d:72:e8:47:18:15:18:ed:99:35:03:
70:53:c8:d3:a2:b8:34:71:17:11:f3:d9:7a:79:e8:
0f:09:9b:03:9f:fc:1f:7f:7c:0f:a4:44:e4:4c:62:
c8:07:b9:7e:59:3b:2d:68:5b:a3:b9:55:70:2e:3a:
4b:9c:70:73:a6:24:aa:40:08:1c:29:0c:c9:a9:91:
6f:11:ce:ee:11:2a:27:82:88:15:81:18:d7:23:c2:
47:40:4d:3a:68:ed:af:82:fa:e0:a7:0c:bf:c8:12:
c6:07:19:48:e2:5a:24:16:c0:e3:70:e8:b7:70:0e:
5a:20:c9:ec:ad:ab:87:54:cb:45:7f:0b:72:56:fc:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D9:BC:7E:A9:6C:6A:FD:24:8A:2C:91:B2:9F:08:B8:6E:13:8A:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FE317B8D8A011EFA0573179762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.96.0/21
Signature Algorithm: sha256WithRSAEncryption
80:47:74:8e:2e:18:1a:81:12:50:b1:9c:6c:3c:0e:6a:30:f5:
15:49:39:a9:f9:6c:f4:3f:24:32:fb:ba:68:f3:97:19:c6:dd:
fe:56:35:5f:2f:47:a9:6c:23:5e:bb:ad:b8:92:a4:9a:6d:db:
b8:04:ce:87:94:68:e9:63:a5:02:ff:49:e6:f6:4f:ac:0e:3e:
fa:67:65:c7:80:09:37:c6:30:97:20:42:66:02:19:42:8c:87:
6f:72:32:a4:e0:78:98:28:93:d6:cc:f1:f9:7d:8f:0d:ee:ed:
54:d5:b2:52:db:b7:49:ca:c6:12:5e:46:7d:5e:80:4e:4e:6f:
5e:ef:88:2a:03:a3:79:c2:55:6b:60:2f:88:c4:1f:ab:00:e0:
6e:03:0f:6a:63:1f:54:c8:49:ca:b0:48:ab:28:8b:ef:5c:6d:
9e:c9:ad:a2:c4:0d:ec:62:0b:ef:98:02:ad:22:b8:99:54:5c:
a5:29:1a:73:5e:c8:86:8c:0f:0b:22:36:96:ff:86:3b:5a:e9:
ab:54:d4:1c:27:31:53:d9:a7:35:bf:a9:02:96:71:04:69:00:
92:dd:8e:37:f2:1d:71:dc:3a:72:d2:34:36:7e:66:90:01:95:
74:69:31:ee:c7:b6:dc:4d:87:e1:24:46:19:10:50:10:b7:d8:
a0:58:ca:7a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ5nMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIyMDkwNzU1WhcNMjUwMjA5MDkwNzU1WjAYMRYw
FAYDVQQDEw02NzkwYjU2Zi1lZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzD8meF7FeCPOZoyRBy3hoblltGgnBjC3jaecvaN2NvcDLwd06RIPGQhc
SbNVpgaoYwoprMWVhmaRrc467kUY1/FmGnNvEOE1XcRFgrB8d0pZJTpoLiJNPcbs
SJQvT4d25C+Uu7q+PMxaO0Zrp/PoPcwtxxQl/zkmyA2JPXLoRxgVGO2ZNQNwU8jT
org0cRcR89l6eegPCZsDn/wff3wPpETkTGLIB7l+WTstaFujuVVwLjpLnHBzpiSq
QAgcKQzJqZFvEc7uESongogVgRjXI8JHQE06aO2vgvrgpwy/yBLGBxlI4lokFsDj
cOi3cA5aIMnsrauHVMtFfwtyVvyl+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKrZ
vH6pbGr9JIoskbKfCLhuE4pGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81RkUzMTdCOEQ4QTAxMUVGQTA1NzMxNzk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnO1gMA0GCSqGSIb3DQEBCwUA
A4IBAQCAR3SOLhgagRJQsZxsPA5qMPUVSTmp+Wz0PyQy+7po85cZxt3+VjVfL0ep
bCNeu624kqSabdu4BM6HlGjpY6UC/0nm9k+sDj76Z2XHgAk3xjCXIEJmAhlCjIdv
cjKk4HiYKJPWzPH5fY8N7u1U1bJS27dJysYSXkZ9XoBOTm9e74gqA6N5wlVrYC+I
xB+rAOBuAw9qYx9UyEnKsEirKIvvXG2eya2ixA3sYgvvmAKtIriZVFylKRpzXsiG
jA8LIjaW/4Y7WumrVNQcJzFT2ac1v6kClnEEaQCS3Y438h1x3Dpy0jQ2fmaQAZV0
aTHux7bcTYfhJEYZEFAQt9igWMp6
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:30 2025 by rpki-client