Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63A2E6ECD7EE11EF99244266762E951A.roa
File: 63A2E6ECD7EE11EF99244266762E951A.roa (raw, json)
Hash identifier: GSpnYTbOr1tlNsqzpQTA2T8E0XzMmv+i9pAqYCZ5Gk8=
Subject key identifier: 52:A9:2C:2A:92:F4:79:08:10:0B:F6:6B:7D:58:8F:E0:5D:BF:69:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63A2E6ECD7EE11EF99244266762E951A.roa
Signing time: Tue 21 Jan 2025 11:53:55 +0000
ROA not before: Tue 21 Jan 2025 11:53:51 +0000
ROA not after: Sat 01 Feb 2025 11:53:51 +0000
asID: 44559
IP address blocks: 156.246.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68994 (0x10d82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 11:53:51 2025 GMT
Not After : Feb 1 11:53:51 2025 GMT
Subject: CN=678f8ad2-8fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:f4:de:6b:78:d5:82:dd:79:5f:ad:c5:8e:
a8:3f:ee:77:e7:b1:02:92:50:01:da:cc:b7:12:30:
3b:29:0e:e7:ce:9f:68:3e:4f:83:57:9d:3e:53:93:
e8:98:1c:61:15:11:21:07:99:89:46:e6:dd:e5:61:
b3:aa:39:f4:b0:3c:88:79:de:e4:3c:74:69:57:b6:
50:82:12:2b:5f:78:f2:46:17:40:b5:c1:1e:76:dd:
59:e8:ad:e4:a5:c7:cd:e0:9b:b6:b1:79:c5:d2:a8:
c9:a6:8a:df:54:76:1a:cc:c7:69:ed:3c:95:8b:96:
b7:4a:67:a3:74:d8:f6:0f:b4:86:43:7d:e3:b3:fb:
9a:73:bb:dd:a3:ba:49:c4:47:44:d5:5b:5a:07:e1:
d0:72:35:60:cf:00:69:49:29:7f:7d:73:c5:fe:7c:
de:52:e4:0b:3a:c5:ad:cb:d4:f5:9b:fb:e4:6a:60:
e1:86:ca:1a:85:0c:3a:7e:b6:44:d1:4c:79:46:2e:
83:19:f3:f8:83:68:ea:cc:56:5d:d0:91:cb:e7:f2:
fb:36:fc:19:2d:2e:8a:1d:b3:23:a7:20:eb:58:82:
b7:16:7f:43:a5:f7:e6:f1:38:75:88:3e:86:af:2a:
e1:af:24:cd:71:07:0b:d1:95:a3:28:99:15:55:cb:
1a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:2C:2A:92:F4:79:08:10:0B:F6:6B:7D:58:8F:E0:5D:BF:69:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63A2E6ECD7EE11EF99244266762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.226.0/24
Signature Algorithm: sha256WithRSAEncryption
33:dd:16:c7:dd:ed:5d:81:67:cf:15:8e:f8:5f:02:8c:9d:11:
68:58:df:64:a8:24:e9:0a:d5:02:32:f5:7a:08:d6:7e:e5:99:
2b:c3:ae:19:f0:0e:f9:78:ec:65:0a:0a:95:91:00:26:9d:31:
53:cf:c3:79:0a:40:0e:36:6c:99:09:c9:40:a1:89:cc:5a:b3:
df:ec:2c:15:86:a1:ae:b2:26:bf:22:0b:37:57:02:b0:c1:45:
51:a5:6e:d5:eb:04:d6:2b:90:64:6a:15:ad:ec:90:8e:6e:28:
9e:3a:15:b6:50:f7:45:1a:d1:7c:84:51:1d:cb:8d:a7:0c:26:
a5:5c:66:06:f2:0b:ae:53:20:b5:53:ae:af:3a:94:73:29:e0:
a5:12:11:2e:9d:aa:1d:0a:98:9f:30:45:3c:63:22:e4:71:35:
99:54:73:44:6a:37:b1:14:18:7a:ea:e1:23:2c:c0:2b:d9:67:
bc:29:45:9d:c1:fb:6e:a9:d3:de:7f:6d:a5:a1:7e:e6:df:72:
91:76:70:81:7a:64:13:24:26:b6:84:64:35:14:68:d4:a1:b6:
83:79:79:35:f0:aa:00:6d:64:89:6d:88:ec:70:09:aa:59:5a:
2d:97:56:60:2a:42:0c:5f:f5:8a:4a:16:a2:08:d5:19:98:29:
16:6e:00:bb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ2CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTE1MzUxWhcNMjUwMjAxMTE1MzUxWjAYMRYw
FAYDVQQDEw02NzhmOGFkMi04ZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuHv03mt41YLdeV+txY6oP+5357ECklAB2sy3EjA7KQ7nzp9oPk+DV50+
U5PomBxhFREhB5mJRubd5WGzqjn0sDyIed7kPHRpV7ZQghIrX3jyRhdAtcEedt1Z
6K3kpcfN4Ju2sXnF0qjJporfVHYazMdp7TyVi5a3SmejdNj2D7SGQ33js/uac7vd
o7pJxEdE1VtaB+HQcjVgzwBpSSl/fXPF/nzeUuQLOsWty9T1m/vkamDhhsoahQw6
frZE0Ux5Ri6DGfP4g2jqzFZd0JHL5/L7NvwZLS6KHbMjpyDrWIK3Fn9Dpffm8Th1
iD6GryrhryTNcQcL0ZWjKJkVVcsaUQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFKp
LCqS9HkIEAv2a31Yj+Bdv2kqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82M0EyRTZFQ0Q3RUUxMUVGOTkyNDQyNjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPbiMA0GCSqGSIb3DQEBCwUA
A4IBAQAz3RbH3e1dgWfPFY74XwKMnRFoWN9kqCTpCtUCMvV6CNZ+5Zkrw64Z8A75
eOxlCgqVkQAmnTFTz8N5CkAONmyZCclAoYnMWrPf7CwVhqGusia/Igs3VwKwwUVR
pW7V6wTWK5BkahWt7JCObiieOhW2UPdFGtF8hFEdy42nDCalXGYG8guuUyC1U66v
OpRzKeClEhEunaodCpifMEU8YyLkcTWZVHNEajexFBh66uEjLMAr2We8KUWdwftu
qdPef22loX7m33KRdnCBemQTJCa2hGQ1FGjUobaDeXk18KoAbWSJbYjscAmqWVot
l1ZgKkIMX/WKShaiCNUZmCkWbgC7
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:29 2025 by rpki-client