Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61C9DE54DBF711EF90960E7F762E951A.roa
File: 61C9DE54DBF711EF90960E7F762E951A.roa (raw, json)
Hash identifier: Nqqv59CSSdk3u5R6K6+sKvgoE0thafXAuyGE0PD2leA=
Subject key identifier: D7:DA:CE:AE:9F:9F:61:E8:4B:B7:3D:FF:44:30:72:00:B2:C2:8F:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61C9DE54DBF711EF90960E7F762E951A.roa
Signing time: Sun 26 Jan 2025 15:08:22 +0000
ROA not before: Sun 26 Jan 2025 15:08:18 +0000
ROA not after: Sun 23 Mar 2025 15:08:18 +0000
asID: 138915
IP address blocks: 156.229.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70600 (0x113c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 15:08:18 2025 GMT
Not After : Mar 23 15:08:18 2025 GMT
Subject: CN=67964fe5-d273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:73:6b:be:b0:19:ad:cc:ae:6e:82:3f:5a:
c1:21:83:11:2a:c4:bd:fe:c0:b1:6f:6e:ef:77:12:
a5:89:dc:81:77:72:a4:e5:b9:56:7a:ac:6f:c2:ce:
af:52:3a:da:aa:cf:1a:36:12:48:2d:0b:37:4e:66:
5e:5d:6d:f3:70:dd:bd:c8:56:38:f2:4c:38:0d:b9:
85:2b:59:59:d0:5c:83:7c:97:69:fa:c4:2e:c3:d6:
6e:d8:e6:2f:78:e0:06:54:57:57:70:f4:3c:6f:ba:
e0:d2:f6:8e:24:2b:61:87:fd:2f:b7:6f:9e:5a:75:
33:bf:34:1d:a3:79:2a:22:d8:59:d3:a2:28:a9:e2:
fd:93:b2:7e:64:2b:b5:55:d4:88:15:69:0c:67:e0:
c6:51:aa:bb:79:5e:41:51:ba:14:9e:ca:67:1d:eb:
ce:80:73:4a:a0:50:0b:dc:7c:01:71:e3:a5:ba:a7:
12:fa:e9:06:1c:84:fe:32:6c:d8:49:ea:2d:ed:22:
7a:1d:82:99:2d:0c:ba:86:b4:30:d3:b5:a5:d7:41:
66:bc:b4:27:42:ff:af:ec:f5:82:46:6d:f9:19:62:
67:87:30:d9:cf:96:ae:6b:8d:52:9e:67:cf:40:ca:
a4:b3:37:f6:bf:93:12:a1:af:c1:f5:7e:36:06:3d:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DA:CE:AE:9F:9F:61:E8:4B:B7:3D:FF:44:30:72:00:B2:C2:8F:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61C9DE54DBF711EF90960E7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.51.0/24
Signature Algorithm: sha256WithRSAEncryption
40:01:2f:f3:fc:ad:4f:91:0e:40:20:f7:0c:22:4d:cb:a9:10:
2a:f3:1f:f5:1f:48:83:0a:dc:db:9f:a4:13:28:1f:dd:08:76:
c2:d5:ca:5f:47:bd:85:b4:12:23:42:22:2a:33:73:89:42:97:
ff:b7:e7:cc:6f:7c:ff:79:3f:c4:18:9f:dd:36:db:1c:a5:4a:
f2:a4:fd:6b:dc:4b:96:43:b2:e1:ed:33:17:61:7f:f9:91:a9:
49:91:01:e7:d3:d5:03:82:f8:c8:55:4f:01:6a:4c:3b:e5:47:
29:fe:7f:71:b6:dc:34:da:6f:c5:bc:f2:9d:fa:56:45:65:1e:
3b:50:96:44:fd:51:76:cd:74:82:dd:c2:94:fa:5f:74:84:0d:
c1:bc:89:c7:bf:77:d1:d0:1b:88:29:06:2f:fa:30:fe:57:f5:
ed:aa:7c:3a:c0:df:d1:c9:12:55:73:f0:a8:f9:fe:05:a7:6f:
40:b6:0d:11:a3:65:67:a5:49:ca:a4:4d:80:73:1e:82:9e:a6:
bc:e6:2f:24:a5:e5:50:97:e7:dd:da:bb:39:86:de:60:44:5d:
b0:54:38:a5:a1:27:9c:69:25:52:a9:cd:ea:dc:c8:03:b9:42:
fc:82:7f:35:bf:87:3f:6d:04:f5:d3:4f:d6:0c:df:b2:4f:28:
61:c5:d3:bc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARPIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI2MTUwODE4WhcNMjUwMzIzMTUwODE4WjAYMRYw
FAYDVQQDEw02Nzk2NGZlNS1kMjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp3Nza76wGa3Mrm6CP1rBIYMRKsS9/sCxb27vdxKlidyBd3Kk5blWeqxv
ws6vUjraqs8aNhJILQs3TmZeXW3zcN29yFY48kw4DbmFK1lZ0FyDfJdp+sQuw9Zu
2OYveOAGVFdXcPQ8b7rg0vaOJCthh/0vt2+eWnUzvzQdo3kqIthZ06IoqeL9k7J+
ZCu1VdSIFWkMZ+DGUaq7eV5BUboUnspnHevOgHNKoFAL3HwBceOluqcS+ukGHIT+
MmzYSeot7SJ6HYKZLQy6hrQw07Wl10FmvLQnQv+v7PWCRm35GWJnhzDZz5aua41S
nmfPQMqkszf2v5MSoa/B9X42Bj10twIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNfa
zq6fn2HoS7c9/0QwcgCywo+5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MUM5REU1NERCRjcxMUVGOTA5NjBFN0Y3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOUzMA0GCSqGSIb3DQEBCwUA
A4IBAQBAAS/z/K1PkQ5AIPcMIk3LqRAq8x/1H0iDCtzbn6QTKB/dCHbC1cpfR72F
tBIjQiIqM3OJQpf/t+fMb3z/eT/EGJ/dNtscpUrypP1r3EuWQ7Lh7TMXYX/5kalJ
kQHn09UDgvjIVU8Bakw75Ucp/n9xttw02m/FvPKd+lZFZR47UJZE/VF2zXSC3cKU
+l90hA3BvInHv3fR0BuIKQYv+jD+V/Xtqnw6wN/RyRJVc/Co+f4Fp29Atg0Ro2Vn
pUnKpE2Acx6Cnqa85i8kpeVQl+fd2rs5ht5gRF2wVDiloSecaSVSqc3q3MgDuUL8
gn81v4c/bQT100/WDN+yTyhhxdO8
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:28:59 2025 by rpki-client