Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DD65A98D7F911EF93713CAE762E951A.roa
File: 7DD65A98D7F911EF93713CAE762E951A.roa (raw, json)
Hash identifier: 4Nd8/qsRKCvlV8f08+B7xkiBT9tbLs3mxauRVeGUh34=
Subject key identifier: 47:7F:AD:ED:BE:D8:33:AC:9B:C9:4A:D8:1E:30:F9:33:F0:02:AB:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DCA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DD65A98D7F911EF93713CAE762E951A.roa
Signing time: Tue 21 Jan 2025 13:13:23 +0000
ROA not before: Tue 21 Jan 2025 13:13:19 +0000
ROA not after: Sat 01 Feb 2025 13:13:19 +0000
asID: 48031
IP address blocks: 156.246.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69066 (0x10dca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:13:19 2025 GMT
Not After : Feb 1 13:13:19 2025 GMT
Subject: CN=678f9d73-1a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3a:fd:09:6e:5e:05:14:53:02:72:f0:f2:b5:
e6:70:09:e0:9b:a2:aa:9f:d7:7b:dd:62:33:45:62:
13:80:12:44:1a:1c:95:dc:3f:4c:c6:fb:46:42:99:
e1:fa:07:b7:26:a2:e9:06:08:f4:f0:75:04:d4:a1:
1f:94:29:07:af:de:9b:ae:38:d8:4e:dc:0c:c9:53:
39:d1:c0:f7:16:cf:07:6b:1c:e4:2f:95:85:bb:e8:
c2:14:95:5f:4c:35:75:1d:e5:90:cf:f7:85:23:ed:
65:bc:76:66:0f:74:f1:74:75:38:a6:e5:75:1c:92:
ab:fa:fd:1b:ea:02:71:5b:ce:d1:7b:7e:69:c5:ba:
31:bf:32:52:44:ba:eb:33:88:c6:5c:82:9e:bd:2a:
53:a4:02:22:72:9f:af:37:66:c7:72:38:f0:42:01:
88:79:4f:c7:27:31:93:b3:3d:53:56:50:cc:4e:8c:
d4:de:13:b3:bd:f9:d7:3c:fe:c6:2d:fd:75:e6:f3:
5e:65:15:67:e3:60:1f:2e:a9:2c:e8:71:91:cc:ea:
b3:61:a1:ca:5c:a9:d2:2e:cc:de:13:ff:ab:b9:c5:
cc:9c:68:a9:bd:83:16:54:10:e3:ac:ff:69:bb:de:
71:d8:c4:70:ac:4b:d3:4e:9f:ac:cf:7e:46:a0:e0:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7F:AD:ED:BE:D8:33:AC:9B:C9:4A:D8:1E:30:F9:33:F0:02:AB:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DD65A98D7F911EF93713CAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.134.0/24
Signature Algorithm: sha256WithRSAEncryption
20:77:bc:7e:61:ad:32:bb:d9:e3:47:f2:37:d9:b9:97:8d:df:
67:53:5b:f2:1b:0a:3b:d5:f5:bb:3d:db:9e:6f:bd:c2:c5:8f:
46:78:4d:4a:87:d4:e9:6c:f4:be:bc:0d:1c:bf:19:b9:3c:4e:
dc:8e:fb:77:c6:38:da:eb:bc:7e:c5:13:95:ee:f3:30:e0:d9:
b0:95:51:86:4b:35:f3:48:a3:ad:9c:3f:91:16:3e:bb:87:e3:
8e:b2:03:35:25:8f:1e:96:45:f2:90:c5:58:fb:bd:51:61:ca:
83:6a:a3:98:ea:15:22:25:33:d5:14:19:aa:dc:5b:7e:b6:d3:
16:c4:0c:71:4f:19:49:da:84:9c:fa:83:25:07:d4:d1:3e:af:
9f:11:2d:b5:ce:d1:44:7e:39:bc:57:e2:a7:03:56:87:22:04:
00:0b:c1:9b:06:97:22:32:80:6d:e0:f7:55:ac:cf:b9:ff:96:
14:3c:0b:8b:2c:ba:c3:19:e3:7d:dd:1c:b3:a3:70:d4:8b:a9:
21:cc:c3:36:f1:0a:7d:c7:b7:ad:44:96:b0:4a:3d:d7:6f:43:
a7:66:50:35:b4:41:e8:d0:4e:ad:a6:70:43:5e:86:95:1b:85:
c2:b3:5e:a0:11:39:5a:f0:25:01:df:38:83:7b:63:14:a6:d7:
94:3d:ba:fb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ3KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMTMxMzE5WhcNMjUwMjAxMTMxMzE5WjAYMRYw
FAYDVQQDEw02NzhmOWQ3My0xYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6Dr9CW5eBRRTAnLw8rXmcAngm6Kqn9d73WIzRWITgBJEGhyV3D9MxvtG
Qpnh+ge3JqLpBgj08HUE1KEflCkHr96brjjYTtwMyVM50cD3Fs8HaxzkL5WFu+jC
FJVfTDV1HeWQz/eFI+1lvHZmD3TxdHU4puV1HJKr+v0b6gJxW87Re35pxboxvzJS
RLrrM4jGXIKevSpTpAIicp+vN2bHcjjwQgGIeU/HJzGTsz1TVlDMTozU3hOzvfnX
PP7GLf115vNeZRVn42AfLqks6HGRzOqzYaHKXKnSLszeE/+rucXMnGipvYMWVBDj
rP9pu95x2MRwrEvTTp+sz35GoOASRQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEd/
re2+2DOsm8lK2B4w+TPwAqt/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83REQ2NUE5OEQ3RjkxMUVGOTM3MTNDQUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPaGMA0GCSqGSIb3DQEBCwUA
A4IBAQAgd7x+Ya0yu9njR/I32bmXjd9nU1vyGwo71fW7Pdueb73CxY9GeE1Kh9Tp
bPS+vA0cvxm5PE7cjvt3xjja67x+xROV7vMw4NmwlVGGSzXzSKOtnD+RFj67h+OO
sgM1JY8elkXykMVY+71RYcqDaqOY6hUiJTPVFBmq3Ft+ttMWxAxxTxlJ2oSc+oMl
B9TRPq+fES21ztFEfjm8V+KnA1aHIgQAC8GbBpciMoBt4PdVrM+5/5YUPAuLLLrD
GeN93Ryzo3DUi6khzMM28Qp9x7etRJawSj3Xb0OnZlA1tEHo0E6tpnBDXoaVG4XC
s16gETla8CUB3ziDe2MUpteUPbr7
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:55:25 2025 by rpki-client