Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65D1313CD8DC11EF85FDC287762E951A.roa
File: 65D1313CD8DC11EF85FDC287762E951A.roa (raw, json)
Hash identifier: e6ZZhq7FTpRsW7Nui30qai4aQdrm61yVSsm+scEcK2E=
Subject key identifier: CA:D2:22:B0:30:4E:89:56:8C:E3:3C:EF:DF:6B:70:6E:C4:DD:0F:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65D1313CD8DC11EF85FDC287762E951A.roa
Signing time: Wed 22 Jan 2025 16:17:38 +0000
ROA not before: Wed 22 Jan 2025 16:17:34 +0000
ROA not after: Sat 15 Mar 2025 16:17:34 +0000
asID: 138915
IP address blocks: 156.244.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69244 (0x10e7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 22 16:17:34 2025 GMT
Not After : Mar 15 16:17:34 2025 GMT
Subject: CN=67911a22-1f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:2b:2d:a6:e1:78:12:92:61:bb:fe:9b:8c:
d7:78:98:fc:24:d6:b8:a3:93:12:36:d5:df:c4:c0:
da:4d:c8:88:81:12:a0:27:c1:eb:d9:91:b2:72:04:
e9:43:b1:2f:e8:e6:4a:8b:55:ba:09:23:74:92:33:
ea:ff:c2:37:da:3a:04:31:b7:b7:32:a7:be:e4:69:
07:7d:ea:46:0d:c2:4a:83:36:31:da:8c:5e:f3:48:
aa:cb:ea:d8:b3:24:3d:0d:11:28:4d:57:a8:7b:6e:
68:d9:69:cc:97:5c:8d:bd:31:b1:d5:6c:3e:84:da:
74:c2:2c:13:ae:e1:86:63:8d:30:f4:2b:b9:3c:35:
74:6f:2b:0e:83:cd:5b:83:87:c9:6b:43:57:1d:e5:
2a:bf:3a:ba:6d:0b:73:86:f1:02:b9:42:c8:9b:e5:
8b:2c:e1:98:8e:54:b3:4a:ed:f6:fb:d7:73:f9:d5:
06:9e:0f:b5:9b:ab:7e:ab:3e:7e:df:63:50:ce:54:
7a:67:e4:ec:2c:2f:0a:ce:9b:78:1d:b2:d0:e4:76:
73:e7:0e:db:c6:18:33:88:a9:dd:b5:50:84:ce:d8:
50:33:3e:ff:74:bf:79:25:a2:85:af:25:17:9a:1b:
40:78:8d:fc:71:38:7e:5f:46:0d:4d:d3:6d:8e:10:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D2:22:B0:30:4E:89:56:8C:E3:3C:EF:DF:6B:70:6E:C4:DD:0F:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65D1313CD8DC11EF85FDC287762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.52.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:76:e8:25:0c:09:da:1d:2c:e6:8a:db:35:6b:f5:8e:58:85:
b6:45:e8:fc:8e:2b:c8:ea:ed:16:a9:8c:05:46:60:00:5d:44:
c9:45:a6:89:4c:40:18:6e:6d:f9:b8:32:79:89:fe:d2:99:a2:
df:45:68:06:d2:ee:95:ec:0a:0e:0f:88:5d:b4:03:0d:c2:f5:
4d:5b:c6:f1:a8:5c:fb:cb:ee:b1:0f:0d:97:33:ff:7c:38:10:
73:65:f6:37:d2:81:1d:ea:05:cb:bf:d1:4e:a8:7d:9e:c2:a7:
49:ce:9d:09:cc:9d:1b:ed:9f:7b:5c:e6:d0:b7:f8:a6:f4:e3:
f3:d5:d8:9f:e8:33:9f:63:28:74:fa:2a:ba:c3:9f:fd:ff:ac:
16:7d:3e:42:53:7b:47:4f:11:71:89:10:8c:6b:1b:23:04:66:
58:b0:6f:8b:a1:68:f9:a4:b6:2d:85:23:b8:0e:71:51:12:93:
75:d6:6e:a1:05:56:99:78:f4:e2:3b:a5:96:96:ab:27:9d:60:
db:18:4e:1d:f5:47:3d:4e:17:34:ad:81:eb:fc:73:ee:84:d9:
54:44:cb:6e:dc:f9:e1:73:7c:19:7d:65:6a:b3:fb:0c:b9:1e:
0b:43:5f:f7:73:43:15:6b:9f:66:18:08:80:0e:ab:06:9a:e7:
e6:db:00:56
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ58MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIyMTYxNzM0WhcNMjUwMzE1MTYxNzM0WjAYMRYw
FAYDVQQDEw02NzkxMWEyMi0xZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvF8rLabheBKSYbv+m4zXeJj8JNa4o5MSNtXfxMDaTciIgRKgJ8Hr2ZGy
cgTpQ7Ev6OZKi1W6CSN0kjPq/8I32joEMbe3Mqe+5GkHfepGDcJKgzYx2oxe80iq
y+rYsyQ9DREoTVeoe25o2WnMl1yNvTGx1Ww+hNp0wiwTruGGY40w9Cu5PDV0bysO
g81bg4fJa0NXHeUqvzq6bQtzhvECuULIm+WLLOGYjlSzSu32+9dz+dUGng+1m6t+
qz5+32NQzlR6Z+TsLC8Kzpt4HbLQ5HZz5w7bxhgziKndtVCEzthQMz7/dL95JaKF
ryUXmhtAeI38cTh+X0YNTdNtjhA+fwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMrS
IrAwTolWjOM8799rcG7E3Q/1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NUQxMzEzQ0Q4REMxMUVGODVGREMyODc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQ0MA0GCSqGSIb3DQEBCwUA
A4IBAQC3duglDAnaHSzmits1a/WOWIW2Rej8jivI6u0WqYwFRmAAXUTJRaaJTEAY
bm35uDJ5if7SmaLfRWgG0u6V7AoOD4hdtAMNwvVNW8bxqFz7y+6xDw2XM/98OBBz
ZfY30oEd6gXLv9FOqH2ewqdJzp0JzJ0b7Z97XObQt/im9OPz1dif6DOfYyh0+iq6
w5/9/6wWfT5CU3tHTxFxiRCMaxsjBGZYsG+LoWj5pLYthSO4DnFREpN11m6hBVaZ
ePTiO6WWlqsnnWDbGE4d9Uc9Thc0rYHr/HPuhNlURMtu3Pnhc3wZfWVqs/sMuR4L
Q1/3c0MVa59mGAiADqsGmufm2wBW
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:34:17 2025 by rpki-client