Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/630381C0D50E11EFACCF1A89762E951A.roa
File: 630381C0D50E11EFACCF1A89762E951A.roa (raw, json)
Hash identifier: QyZxK9nZOoRoC5OifR60h9e1hyv+U99caE+sL27Hm/k=
Subject key identifier: BF:6F:39:27:90:49:76:34:DA:0E:87:35:33:3D:92:A2:F5:53:64:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/630381C0D50E11EFACCF1A89762E951A.roa
Signing time: Fri 17 Jan 2025 20:05:24 +0000
ROA not before: Fri 17 Jan 2025 20:05:20 +0000
ROA not after: Sat 22 Feb 2025 20:05:20 +0000
asID: 54801
IP address blocks: 156.242.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68238 (0x10a8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 20:05:20 2025 GMT
Not After : Feb 22 20:05:20 2025 GMT
Subject: CN=678ab804-64b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5a:b9:7d:25:92:c9:99:61:27:27:52:c4:28:
8f:c3:68:9f:72:7c:e2:76:3a:87:c3:6b:2b:c1:2f:
52:85:07:a1:6c:77:98:ce:e8:3b:f6:60:be:49:75:
56:46:90:98:2e:74:87:dc:2b:c6:a4:65:e1:73:1a:
36:4e:75:20:a8:85:d7:34:2b:ce:ee:88:e7:f5:44:
80:ef:e1:7b:cf:69:46:c0:45:6b:dd:c9:a3:82:6d:
bc:68:20:9c:4b:ee:0f:9a:bb:5e:81:ac:27:ae:73:
a2:dc:e6:a1:b9:45:da:29:8d:e5:35:f9:6a:f2:de:
3c:b8:57:d2:43:9f:c4:af:a1:12:14:5f:76:93:8c:
db:91:44:20:5a:b5:7d:08:2a:fd:97:84:39:03:72:
a3:58:81:83:a7:c5:c1:8c:81:85:81:d9:5a:01:89:
de:cc:ff:83:ce:0d:55:91:36:ff:1b:62:58:7f:70:
8b:92:75:8f:0e:24:a6:f7:0a:fa:70:0e:1a:da:93:
2b:bf:56:3c:74:00:91:09:3d:f9:b5:26:a9:2b:d1:
16:e6:8c:df:30:7d:b5:eb:22:46:0c:de:94:fd:5c:
a4:01:1b:7f:b6:a8:ab:46:82:6d:71:44:f4:ce:08:
bc:86:71:60:3c:cb:07:d7:e4:7a:19:86:1c:88:d1:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6F:39:27:90:49:76:34:DA:0E:87:35:33:3D:92:A2:F5:53:64:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/630381C0D50E11EFACCF1A89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:8c:ab:60:5d:3b:19:7b:f3:56:ac:4d:3d:1a:5b:f8:9f:d8:
e2:6f:32:85:c0:83:ba:37:bd:c0:95:6f:ba:8f:a8:5a:45:f2:
24:ce:34:8f:aa:4e:c1:21:95:0c:1c:58:83:46:1e:79:74:69:
97:35:a9:70:e8:6f:9e:f4:f3:25:6d:1c:68:c1:25:7f:4e:5d:
82:b1:0f:76:00:eb:1a:1c:1e:6f:6b:4c:2e:c9:3d:4d:46:63:
77:85:ac:39:a5:65:e1:b6:32:b6:9f:d0:71:86:2d:7f:12:f7:
73:2d:d0:8d:92:f2:69:bc:7f:44:0b:8f:5c:bf:7c:f3:ed:5e:
5b:f2:25:52:84:4f:25:17:7b:82:5d:af:bf:10:b8:4f:04:fd:
33:c3:00:b8:d9:c9:29:de:23:82:cf:de:c3:5d:ed:32:97:77:
2d:21:94:f3:6c:f9:ef:78:4c:ca:6c:8d:e3:ce:ae:28:23:bc:
29:e8:ec:76:39:46:42:99:87:73:40:09:cd:48:4c:56:3d:8d:
ad:c2:97:ae:8e:9a:9e:c7:62:46:cf:1a:e3:4e:ee:ac:94:7c:
b3:d0:99:dd:d4:0f:8c:02:af:bf:0e:27:4b:1e:5b:34:7e:11:
a6:8d:2a:7a:b4:88:35:78:d6:d9:24:cc:6a:5f:a8:c8:21:18:
a9:9e:a6:be
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQqOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MjAwNTIwWhcNMjUwMjIyMjAwNTIwWjAYMRYw
FAYDVQQDEw02NzhhYjgwNC02NGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4Fq5fSWSyZlhJydSxCiPw2ifcnzidjqHw2srwS9ShQehbHeYzug79mC+
SXVWRpCYLnSH3CvGpGXhcxo2TnUgqIXXNCvO7ojn9USA7+F7z2lGwEVr3cmjgm28
aCCcS+4PmrtegawnrnOi3OahuUXaKY3lNflq8t48uFfSQ5/Er6ESFF92k4zbkUQg
WrV9CCr9l4Q5A3KjWIGDp8XBjIGFgdlaAYnezP+Dzg1VkTb/G2JYf3CLknWPDiSm
9wr6cA4a2pMrv1Y8dACRCT35tSapK9EW5ozfMH216yJGDN6U/VykARt/tqirRoJt
cUT0zgi8hnFgPMsH1+R6GYYciNHVEQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL9v
OSeQSXY02g6HNTM9kqL1U2S9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MzAzODFDMEQ1MEUxMUVGQUNDRjFBODk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPIMMA0GCSqGSIb3DQEBCwUA
A4IBAQBrjKtgXTsZe/NWrE09Glv4n9jibzKFwIO6N73AlW+6j6haRfIkzjSPqk7B
IZUMHFiDRh55dGmXNalw6G+e9PMlbRxowSV/Tl2CsQ92AOsaHB5va0wuyT1NRmN3
haw5pWXhtjK2n9Bxhi1/EvdzLdCNkvJpvH9EC49cv3zz7V5b8iVShE8lF3uCXa+/
ELhPBP0zwwC42ckp3iOCz97DXe0yl3ctIZTzbPnveEzKbI3jzq4oI7wp6Ox2OUZC
mYdzQAnNSExWPY2twpeujpqex2JGzxrjTu6slHyz0Jnd1A+MAq+/DidLHls0fhGm
jSp6tIg1eNbZJMxqX6jIIRipnqa+
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:15:29 2025 by rpki-client