Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62CF5D80DBE111EF8DA67A6A762E951A.roa
File: 62CF5D80DBE111EF8DA67A6A762E951A.roa (raw, json)
Hash identifier: 01rQcUtm53CFEApDA5NhgZ3UjkaocO1pkLlar8hVLew=
Subject key identifier: 71:F9:B1:42:C6:69:45:84:B2:C7:EF:06:B0:86:F7:9C:80:CF:05:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01138C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62CF5D80DBE111EF8DA67A6A762E951A.roa
Signing time: Sun 26 Jan 2025 12:30:54 +0000
ROA not before: Sun 26 Jan 2025 12:30:50 +0000
ROA not after: Tue 04 Mar 2025 12:30:50 +0000
asID: 203020
IP address blocks: 156.253.198.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70540 (0x1138c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 12:30:50 2025 GMT
Not After : Mar 4 12:30:50 2025 GMT
Subject: CN=67962afe-a3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:58:a1:42:bb:57:78:7c:2d:18:c8:4a:bf:
ce:17:07:ab:38:2b:05:3c:8e:a6:79:b3:63:80:1d:
3f:5f:8b:69:cb:82:bc:be:c3:23:16:5f:23:09:1c:
f7:b7:4f:ff:46:36:d5:3a:ea:49:1c:f9:91:2e:4a:
b6:f1:1a:b4:52:50:23:e0:c8:89:fe:3e:fe:3a:6a:
52:87:5f:68:a5:0c:23:c3:ee:08:19:87:b4:a1:a8:
1f:87:25:f4:f9:16:7c:48:9a:92:c3:03:08:dc:f7:
ae:78:7d:3c:4d:d8:97:b1:37:8b:d0:c9:d7:d8:ec:
a8:17:a5:ef:56:5c:e6:1e:2d:14:60:ab:40:38:9a:
f8:99:23:2c:cc:b7:dc:d1:f5:ee:de:5f:8d:3b:44:
8b:04:0a:a4:91:2e:38:ae:02:dd:9d:ed:79:d7:a3:
10:9e:85:a8:39:03:8f:52:10:89:75:b0:a8:72:89:
8b:5f:9a:2c:29:62:ca:c8:21:22:aa:90:dc:25:b0:
5c:05:34:bf:c7:3b:51:68:5b:e1:a2:bb:6f:4a:38:
dd:f3:ff:11:2e:ad:d9:bf:25:07:b9:18:f7:8b:3d:
fe:1f:49:87:8b:0f:05:30:71:a7:bb:53:e5:d1:fb:
4c:d3:bd:7b:74:64:84:46:4c:c8:64:c8:51:bf:98:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F9:B1:42:C6:69:45:84:B2:C7:EF:06:B0:86:F7:9C:80:CF:05:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62CF5D80DBE111EF8DA67A6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.198.0/23
Signature Algorithm: sha256WithRSAEncryption
99:53:1e:7b:84:bd:a3:a1:ec:08:f7:ab:09:87:8f:97:01:93:
8a:ab:04:11:cb:0a:36:bc:00:4e:bb:cb:0d:78:3d:a5:7c:a1:
5c:f4:b7:e0:6b:ed:26:2a:53:9a:1e:4b:f4:cf:59:4e:97:68:
c3:7c:52:50:d0:26:b5:a0:50:5c:d4:13:e8:9b:df:1a:8f:cc:
34:32:88:ac:04:1e:09:26:c5:62:95:c1:0f:e0:74:80:7d:49:
30:d4:4a:35:82:92:59:c3:09:e6:25:ff:6f:17:40:bd:f5:b4:
55:bd:db:50:e8:39:b4:44:7c:cb:e8:ce:9f:cb:7a:5f:50:8d:
8e:96:43:99:40:9f:6a:a4:0a:55:8e:20:e6:cf:b1:4f:1a:07:
a6:38:be:26:42:12:10:73:a3:87:2c:84:ea:cc:93:43:b6:95:
61:8d:22:0e:4f:79:04:4a:28:b2:46:c2:d2:2b:55:4c:10:1a:
de:88:8e:fa:35:d7:7e:8f:f1:93:cf:a7:cf:91:cb:39:2e:7c:
51:27:47:b8:55:38:c3:7a:00:a2:3e:51:de:84:e5:35:5c:08:
2d:5b:20:dc:b5:48:90:66:f2:37:28:b5:08:22:ce:c2:0a:6c:
ae:bd:f3:10:e8:cb:f0:24:6e:95:e5:74:bb:31:0c:cb:e5:26:
16:42:a8:7e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAROMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI2MTIzMDUwWhcNMjUwMzA0MTIzMDUwWjAYMRYw
FAYDVQQDEw02Nzk2MmFmZS1hM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzm9YoUK7V3h8LRjISr/OFwerOCsFPI6mebNjgB0/X4tpy4K8vsMjFl8j
CRz3t0//RjbVOupJHPmRLkq28Rq0UlAj4MiJ/j7+OmpSh19opQwjw+4IGYe0oagf
hyX0+RZ8SJqSwwMI3PeueH08TdiXsTeL0MnX2OyoF6XvVlzmHi0UYKtAOJr4mSMs
zLfc0fXu3l+NO0SLBAqkkS44rgLdne1516MQnoWoOQOPUhCJdbCocomLX5osKWLK
yCEiqpDcJbBcBTS/xztRaFvhortvSjjd8/8RLq3ZvyUHuRj3iz3+H0mHiw8FMHGn
u1Pl0ftM0717dGSERkzIZMhRv5hLEwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHH5
sULGaUWEssfvBrCG95yAzwUJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MkNGNUQ4MERCRTExMUVGOERBNjdBNkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnP3GMA0GCSqGSIb3DQEBCwUA
A4IBAQCZUx57hL2joewI96sJh4+XAZOKqwQRywo2vABOu8sNeD2lfKFc9Lfga+0m
KlOaHkv0z1lOl2jDfFJQ0Ca1oFBc1BPom98aj8w0MoisBB4JJsVilcEP4HSAfUkw
1Eo1gpJZwwnmJf9vF0C99bRVvdtQ6Dm0RHzL6M6fy3pfUI2OlkOZQJ9qpApVjiDm
z7FPGgemOL4mQhIQc6OHLITqzJNDtpVhjSIOT3kESiiyRsLSK1VMEBreiI76Ndd+
j/GTz6fPkcs5LnxRJ0e4VTjDegCiPlHehOU1XAgtWyDctUiQZvI3KLUIIs7CCmyu
vfMQ6MvwJG6V5XS7MQzL5SYWQqh+
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:02:18 2025 by rpki-client