Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70DBB96CD70B11EFB6E78A99762E951A.roa
File: 70DBB96CD70B11EFB6E78A99762E951A.roa (raw, json)
Hash identifier: x6bcUljCr6xLokF7auxj89A9GAyTOYT8NmxTUmSiPak=
Subject key identifier: 1C:EA:22:60:56:93:9A:22:D3:5A:BE:7A:7A:13:37:C2:56:04:A1:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70DBB96CD70B11EFB6E78A99762E951A.roa
Signing time: Mon 20 Jan 2025 08:49:21 +0000
ROA not before: Mon 20 Jan 2025 08:49:17 +0000
ROA not after: Sat 01 Feb 2025 08:49:17 +0000
asID: 44559
IP address blocks: 156.246.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68617 (0x10c09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 08:49:17 2025 GMT
Not After : Feb 1 08:49:17 2025 GMT
Subject: CN=678e0e11-d340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:19:f5:10:2f:b4:f8:e7:67:c4:16:b5:01:
68:bd:c8:38:ae:6f:f9:4b:c5:a3:48:1a:ab:d6:a8:
d4:98:da:f0:8b:c0:30:0c:b8:02:3c:62:d4:39:dd:
e5:8e:d9:bb:97:d6:d4:e5:89:bb:41:11:cc:1a:8d:
54:b7:9e:ac:e3:72:73:1e:08:66:05:5e:5b:58:72:
a3:65:bc:c4:6e:c4:18:1d:10:af:60:da:26:d2:0e:
e6:49:8b:15:ae:b4:c5:1e:b4:d3:79:a5:d5:3b:6e:
2b:f7:00:94:44:91:1e:2e:70:10:54:0f:94:17:a1:
15:70:34:b5:4d:a3:b0:77:12:42:19:3c:58:b0:1a:
b1:98:4f:27:4c:c2:32:0d:76:43:99:22:8b:90:8e:
fb:02:47:99:14:a6:67:53:1c:d3:8c:92:36:29:26:
01:a2:b9:bd:74:b8:f1:9b:24:80:47:32:33:fc:1e:
2d:f3:6b:34:bd:24:1d:6a:1d:3d:06:13:de:6e:15:
db:32:3d:02:ed:31:86:af:68:3a:43:2c:8d:72:87:
8a:c5:1f:1c:2a:aa:03:7b:be:2d:d8:99:a8:76:5d:
e5:c7:7d:80:44:95:c8:93:6b:4a:87:82:e0:37:0b:
cc:92:40:c7:d8:26:f8:9b:37:2e:fe:b3:0f:55:97:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EA:22:60:56:93:9A:22:D3:5A:BE:7A:7A:13:37:C2:56:04:A1:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70DBB96CD70B11EFB6E78A99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.172.0/22
Signature Algorithm: sha256WithRSAEncryption
45:cb:fa:29:5d:a2:be:cf:a4:94:b9:32:ea:2f:98:09:e4:ac:
a2:7f:b3:55:4b:02:5f:37:1d:67:96:9b:87:55:5a:db:ad:1c:
ac:d7:39:dc:d1:5a:03:48:c2:af:f6:2e:27:10:1f:9a:22:d5:
09:22:0b:40:c5:c8:2b:e3:7e:50:f1:1b:0a:58:c9:02:e4:1b:
51:20:4b:69:1b:12:26:61:19:ab:e0:d0:29:20:49:1a:ed:f8:
ed:d4:6d:21:3a:c9:cd:6a:7a:0f:46:08:c6:3d:75:e5:66:98:
cf:be:8b:bf:44:ac:66:5f:51:5e:50:19:99:e2:87:86:8c:c8:
2f:32:85:d6:26:55:73:15:1d:2c:1a:1e:d4:14:b8:f3:5d:d4:
dd:d6:48:8d:f3:04:33:d6:27:8a:33:2c:9b:49:3f:cb:51:ae:
23:74:61:ac:9f:6b:64:66:fb:f6:ec:64:73:a6:8d:f5:3e:3a:
3b:0a:68:78:a1:81:df:bd:2e:22:4b:2d:57:59:00:fd:fb:93:
e7:b4:41:6d:e5:be:bf:35:60:bb:fb:5d:e2:8a:46:e0:39:99:
94:6f:53:2b:0d:eb:c6:ff:c2:63:56:a5:5e:0f:af:c9:fa:a5:
9d:0c:bf:10:25:d1:58:8a:5c:36:ad:29:8c:f6:49:be:29:f9:
0d:b4:4e:b8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQwJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIwMDg0OTE3WhcNMjUwMjAxMDg0OTE3WjAYMRYw
FAYDVQQDEw02NzhlMGUxMS1kMzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoDkZ9RAvtPjnZ8QWtQFovcg4rm/5S8WjSBqr1qjUmNrwi8AwDLgCPGLU
Od3ljtm7l9bU5Ym7QRHMGo1Ut56s43JzHghmBV5bWHKjZbzEbsQYHRCvYNom0g7m
SYsVrrTFHrTTeaXVO24r9wCURJEeLnAQVA+UF6EVcDS1TaOwdxJCGTxYsBqxmE8n
TMIyDXZDmSKLkI77AkeZFKZnUxzTjJI2KSYBorm9dLjxmySARzIz/B4t82s0vSQd
ah09BhPebhXbMj0C7TGGr2g6QyyNcoeKxR8cKqoDe74t2Jmodl3lx32ARJXIk2tK
h4LgNwvMkkDH2Cb4mzcu/rMPVZeQ0QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBzq
ImBWk5oi01q+enoTN8JWBKH/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MERCQjk2Q0Q3MEIxMUVGQjZFNzhBOTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPasMA0GCSqGSIb3DQEBCwUA
A4IBAQBFy/opXaK+z6SUuTLqL5gJ5Kyif7NVSwJfNx1nlpuHVVrbrRys1znc0VoD
SMKv9i4nEB+aItUJIgtAxcgr435Q8RsKWMkC5BtRIEtpGxImYRmr4NApIEka7fjt
1G0hOsnNanoPRgjGPXXlZpjPvou/RKxmX1FeUBmZ4oeGjMgvMoXWJlVzFR0sGh7U
FLjzXdTd1kiN8wQz1ieKMyybST/LUa4jdGGsn2tkZvv27GRzpo31Pjo7Cmh4oYHf
vS4iSy1XWQD9+5PntEFt5b6/NWC7+13iikbgOZmUb1MrDevG/8JjVqVeD6/J+qWd
DL8QJdFYilw2rSmM9km+KfkNtE64
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:18 2025 by rpki-client