Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E459854D50211EF93E44BBA762E951A.roa
File: 6E459854D50211EF93E44BBA762E951A.roa (raw, json)
Hash identifier: Sq4seJv1d67uRuSs3/5kSkVuoCW2DwZIi8uOA5enfzI=
Subject key identifier: EF:5D:5B:E3:8C:75:07:5E:08:33:C3:4E:CB:7D:11:95:5E:E6:D9:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A50
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E459854D50211EF93E44BBA762E951A.roa
Signing time: Fri 17 Jan 2025 18:39:49 +0000
ROA not before: Fri 17 Jan 2025 18:39:45 +0000
ROA not after: Fri 31 Jan 2025 18:39:45 +0000
asID: 39600
IP address blocks: 156.252.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68176 (0x10a50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 18:39:45 2025 GMT
Not After : Jan 31 18:39:45 2025 GMT
Subject: CN=678aa3f5-6fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:22:55:88:25:1a:9e:75:83:d6:95:c4:3d:
11:3c:6d:fb:11:fd:8a:39:3a:39:3e:64:dc:00:e7:
d4:1d:ee:99:9e:3e:82:69:01:7f:8b:41:75:07:65:
1f:ab:dd:1a:36:3d:0a:5a:4d:d1:d0:d2:3a:6c:d2:
b3:1c:77:09:bc:fb:95:bf:fd:a2:b4:91:52:8e:ba:
9c:e6:5f:1c:b0:04:12:be:76:89:d4:f6:08:a8:74:
fc:7a:1e:8b:fe:a2:a9:2b:46:c8:54:39:7c:99:1b:
7e:1b:e2:60:5e:dc:3a:31:5f:9e:d3:ea:5f:f7:79:
9d:4e:de:cf:c1:81:c0:d0:ba:2b:70:81:5c:12:cf:
13:6e:d5:56:c8:b9:06:de:87:70:1c:a8:5a:4f:28:
4c:47:97:95:53:ec:a7:ea:c2:a1:1c:2f:63:58:48:
c1:23:cf:ce:f3:5e:80:a5:4d:02:bc:e1:56:35:c3:
f4:38:f8:e1:b6:ea:f7:62:f4:fb:4b:bf:09:35:69:
11:5e:2d:01:78:c1:35:e0:2c:34:77:08:bc:52:69:
a0:2a:d2:92:cf:47:5e:05:96:9c:3f:bb:26:d0:f7:
80:f8:ea:52:e2:60:de:e0:7f:f4:4f:1c:22:33:9d:
f8:04:7b:1a:bd:5f:0a:d8:3b:81:5d:cf:6e:7b:b6:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5D:5B:E3:8C:75:07:5E:08:33:C3:4E:CB:7D:11:95:5E:E6:D9:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E459854D50211EF93E44BBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:56:e1:12:31:6f:39:09:94:36:a7:de:26:9e:4d:aa:6d:c2:
ef:b7:b9:a9:a2:da:05:4c:63:40:dc:3d:a4:68:95:60:23:ea:
aa:8f:4a:80:b7:01:88:cf:5c:aa:66:70:5a:5b:db:da:8e:b1:
9e:a3:2f:eb:5b:12:d4:4a:22:99:d3:09:5a:0f:31:aa:3e:78:
49:3a:62:cf:2b:6b:8a:2f:f6:62:de:6d:ec:bd:71:b8:58:a2:
0e:ea:b5:d8:cc:e3:60:8b:71:0f:82:d2:2a:c3:e8:0e:bc:bc:
8c:33:56:62:9e:cd:95:49:f9:2d:b1:51:82:ac:95:b1:2d:89:
88:4f:8c:e3:ae:50:86:7c:ae:38:1b:12:21:af:49:ca:9b:a4:
1d:22:c0:24:90:d6:2b:bd:e3:04:f4:aa:ff:63:af:7d:5c:d0:
9b:f5:89:86:49:40:84:bc:27:d9:c6:a6:9d:17:85:71:a9:b8:
b4:d9:c5:8d:f1:79:f8:7a:75:98:31:91:de:e8:96:ef:b1:1b:
6e:be:78:96:ae:ab:06:52:f9:e4:3e:9e:eb:33:90:ac:55:00:
75:25:f5:6a:a0:49:22:93:40:31:3e:1d:e7:a9:1b:b0:3e:92:
33:fa:ce:47:2e:95:24:48:7e:d7:3a:8b:5e:e5:f0:f0:85:a0:
5e:88:6e:15
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQpQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MTgzOTQ1WhcNMjUwMTMxMTgzOTQ1WjAYMRYw
FAYDVQQDEw02NzhhYTNmNS02ZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsVgiVYglGp51g9aVxD0RPG37Ef2KOTo5PmTcAOfUHe6Znj6CaQF/i0F1
B2Ufq90aNj0KWk3R0NI6bNKzHHcJvPuVv/2itJFSjrqc5l8csAQSvnaJ1PYIqHT8
eh6L/qKpK0bIVDl8mRt+G+JgXtw6MV+e0+pf93mdTt7PwYHA0LorcIFcEs8TbtVW
yLkG3odwHKhaTyhMR5eVU+yn6sKhHC9jWEjBI8/O816ApU0CvOFWNcP0OPjhtur3
YvT7S78JNWkRXi0BeME14Cw0dwi8UmmgKtKSz0deBZacP7sm0PeA+OpS4mDe4H/0
TxwiM534BHsavV8K2DuBXc9ue7Z8RQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFO9d
W+OMdQdeCDPDTst9EZVe5tmZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RTQ1OTg1NEQ1MDIxMUVGOTNFNDRCQkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPwPMA0GCSqGSIb3DQEBCwUA
A4IBAQA+VuESMW85CZQ2p94mnk2qbcLvt7mpotoFTGNA3D2kaJVgI+qqj0qAtwGI
z1yqZnBaW9vajrGeoy/rWxLUSiKZ0wlaDzGqPnhJOmLPK2uKL/Zi3m3svXG4WKIO
6rXYzONgi3EPgtIqw+gOvLyMM1Zins2VSfktsVGCrJWxLYmIT4zjrlCGfK44GxIh
r0nKm6QdIsAkkNYrveME9Kr/Y699XNCb9YmGSUCEvCfZxqadF4Vxqbi02cWN8Xn4
enWYMZHe6JbvsRtuvniWrqsGUvnkPp7rM5CsVQB1JfVqoEkik0AxPh3nqRuwPpIz
+s5HLpUkSH7XOote5fDwhaBeiG4V
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:17:51 2025 by rpki-client