Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6389EB62D7D311EF982279B5762E951A.roa
File: 6389EB62D7D311EF982279B5762E951A.roa (raw, json)
Hash identifier: Ttqcs+t6Z5s5TPneIeB3Mmxf694SNbE5+/VazfbyGCg=
Subject key identifier: A1:21:35:65:CE:1E:48:3D:E6:15:B8:05:F9:80:4D:9D:DB:69:27:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D0C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6389EB62D7D311EF982279B5762E951A.roa
Signing time: Tue 21 Jan 2025 08:40:38 +0000
ROA not before: Tue 21 Jan 2025 08:40:34 +0000
ROA not after: Sat 01 Feb 2025 08:40:34 +0000
asID: 44559
IP address blocks: 156.246.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68876 (0x10d0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 08:40:34 2025 GMT
Not After : Feb 1 08:40:34 2025 GMT
Subject: CN=678f5d86-808d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:a3:3d:cf:18:57:01:66:d4:a8:a7:5b:5b:
65:8e:84:62:b2:3f:12:14:f1:29:d3:12:9b:45:ab:
47:5c:9a:24:4b:40:ad:80:6b:85:6e:7b:06:00:8e:
29:ae:88:a0:68:10:c8:ab:b8:28:75:39:0a:4d:0e:
5c:14:46:b4:fb:c8:08:7b:6b:89:f0:0d:68:93:b6:
26:c0:bd:19:e7:fa:30:4b:64:f0:66:15:30:24:9e:
9f:f2:08:6b:30:0b:c9:64:54:ff:af:6f:6a:1f:f6:
0c:52:fd:29:5d:b3:57:64:5c:63:74:54:61:3f:f0:
f8:44:ad:9e:e3:41:dc:b4:0f:57:cf:71:e1:2d:fc:
be:8e:af:57:bc:37:48:12:5c:cf:5a:d6:23:34:e2:
33:df:3b:d6:42:16:52:42:46:51:82:d6:6c:de:25:
11:11:c8:5c:13:3d:6f:63:32:d5:5d:0a:bc:c2:97:
c5:b2:11:8b:46:8e:0b:d7:7c:10:4c:cb:16:0f:03:
c0:d2:f2:30:9c:67:4b:d1:ad:86:ba:cd:5e:04:14:
25:19:56:ed:c4:d3:51:13:de:ca:b0:e4:54:69:c9:
64:c5:07:ff:85:21:52:dc:4e:a4:05:51:63:a7:b9:
e9:a2:c3:ee:8d:98:06:11:fe:6c:03:8e:a0:d2:d4:
5a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:21:35:65:CE:1E:48:3D:E6:15:B8:05:F9:80:4D:9D:DB:69:27:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6389EB62D7D311EF982279B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.156.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e5:2b:de:f3:38:a0:cd:b8:21:88:0f:4c:a5:53:7e:e7:e5:
59:cd:ff:9a:56:b6:bc:7d:86:bc:36:ec:9d:1c:1a:f3:14:88:
8f:71:d8:c1:56:a9:e5:cf:b2:4a:43:d6:91:6d:4e:ff:5b:42:
65:e7:88:53:30:d6:e6:b1:1e:42:25:45:3e:49:89:49:fc:07:
ee:fc:bb:bc:90:bd:81:47:8b:c5:52:03:17:f4:3d:72:3a:88:
e4:79:cf:a7:1f:3d:94:68:a5:a4:57:63:e9:75:a9:fe:bf:8b:
91:ad:f9:0b:0c:cc:09:09:29:fa:eb:96:bc:16:dd:28:32:bf:
4f:12:a1:5b:97:78:57:38:ae:1f:85:69:f5:d5:19:d2:79:24:
0a:9c:35:3d:89:4a:72:89:64:f0:16:4d:cd:03:a7:cf:eb:6d:
d3:64:46:05:1d:97:23:b1:34:ca:d0:55:9e:c1:d1:58:9b:dd:
13:12:16:23:8a:4f:d3:f6:e1:f1:0d:ed:f1:c0:73:e5:e9:d1:
99:db:00:79:96:ed:d3:6b:e3:70:af:ec:c5:5e:0c:71:29:92:
b3:15:e4:93:37:ee:a0:91:86:51:5e:b4:5d:4e:a0:71:5f:49:
7b:dc:74:75:37:78:f0:0b:88:38:17:52:b0:89:95:b6:f4:b8:
39:8a:d2:47
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ0MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMDg0MDM0WhcNMjUwMjAxMDg0MDM0WjAYMRYw
FAYDVQQDEw02NzhmNWQ4Ni04MDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApB6jPc8YVwFm1KinW1tljoRisj8SFPEp0xKbRatHXJokS0CtgGuFbnsG
AI4proigaBDIq7godTkKTQ5cFEa0+8gIe2uJ8A1ok7YmwL0Z5/owS2TwZhUwJJ6f
8ghrMAvJZFT/r29qH/YMUv0pXbNXZFxjdFRhP/D4RK2e40HctA9Xz3HhLfy+jq9X
vDdIElzPWtYjNOIz3zvWQhZSQkZRgtZs3iUREchcEz1vYzLVXQq8wpfFshGLRo4L
13wQTMsWDwPA0vIwnGdL0a2Gus1eBBQlGVbtxNNRE97KsORUaclkxQf/hSFS3E6k
BVFjp7nposPujZgGEf5sA46g0tRaTwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKEh
NWXOHkg95hW4BfmATZ3baSfoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82Mzg5RUI2MkQ3RDMxMUVGOTgyMjc5QjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPacMA0GCSqGSIb3DQEBCwUA
A4IBAQAI5Sve8zigzbghiA9MpVN+5+VZzf+aVra8fYa8NuydHBrzFIiPcdjBVqnl
z7JKQ9aRbU7/W0Jl54hTMNbmsR5CJUU+SYlJ/Afu/Lu8kL2BR4vFUgMX9D1yOojk
ec+nHz2UaKWkV2Ppdan+v4uRrfkLDMwJCSn665a8Ft0oMr9PEqFbl3hXOK4fhWn1
1RnSeSQKnDU9iUpyiWTwFk3NA6fP623TZEYFHZcjsTTK0FWewdFYm90TEhYjik/T
9uHxDe3xwHPl6dGZ2wB5lu3Ta+Nwr+zFXgxxKZKzFeSTN+6gkYZRXrRdTqBxX0l7
3HR1N3jwC4g4F1KwiZW29Lg5itJH
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:19:39 2025 by rpki-client