Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80143ECACCC211EF9444E5A3762E951A.roa
File: 80143ECACCC211EF9444E5A3762E951A.roa (raw, json)
Hash identifier: Gw2IuWItmovK48WtW1zdAmNMze+kunVJ54E5WGugL3g=
Subject key identifier: 8A:09:5D:18:DD:52:80:2B:C1:DC:C3:95:B8:86:17:23:38:AA:68:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA34
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80143ECACCC211EF9444E5A3762E951A.roa
Signing time: Tue 07 Jan 2025 06:42:02 +0000
ROA not before: Tue 07 Jan 2025 06:41:58 +0000
ROA not after: Sat 13 Dec 2025 06:41:58 +0000
asID: 984
IP address blocks: 156.233.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64052 (0xfa34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 06:41:58 2025 GMT
Not After : Dec 13 06:41:58 2025 GMT
Subject: CN=677cccb9-dca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:e6:5f:cb:e0:cb:90:4c:60:35:5b:d0:45:
99:6b:f5:c4:e0:ba:17:46:53:7a:d6:8d:d4:ce:0f:
61:8b:9f:75:2c:6c:54:bb:98:82:0e:82:b9:37:6d:
07:1e:19:9c:0b:16:62:3e:e4:66:a0:60:7d:53:3d:
9c:83:e2:b6:60:7c:92:93:76:9e:ba:a8:43:7f:7d:
cc:85:c1:a1:a4:37:86:b6:1b:91:6f:1d:32:ca:90:
8b:ea:14:ae:99:a1:c0:73:40:b2:7d:1e:76:f8:0e:
23:cc:7d:87:d3:f8:7b:c3:38:30:46:f0:2a:9f:2e:
81:1b:2d:ef:ea:30:db:bc:6d:60:27:7f:bb:62:5f:
48:5b:97:c4:a2:ca:e1:7d:63:5b:df:68:1a:b1:46:
1c:b9:67:0d:37:d0:46:09:0d:5f:e5:dc:5a:26:b2:
82:c5:ef:d4:2f:37:de:2f:84:fb:f8:13:bd:f8:cc:
00:bd:d9:01:25:ca:a0:06:c7:67:32:d5:03:8d:ea:
8f:f0:1c:be:94:ec:74:9d:06:1a:66:ce:d4:fa:f0:
6a:0a:a0:52:8a:3d:3f:f9:84:8b:3c:4f:00:76:f5:
22:7b:55:7c:2c:23:95:f2:76:74:37:5c:c1:03:83:
99:68:2e:cf:aa:d3:4b:df:2f:b1:84:bb:1c:82:14:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:09:5D:18:DD:52:80:2B:C1:DC:C3:95:B8:86:17:23:38:AA:68:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80143ECACCC211EF9444E5A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.47.0/24
Signature Algorithm: sha256WithRSAEncryption
82:73:99:8c:f6:41:cb:5d:95:2e:14:62:0f:c8:42:58:f7:cd:
44:0a:0b:50:3f:f8:a4:6e:3d:5f:55:6d:89:27:ed:5b:96:52:
65:7f:e2:7a:23:aa:eb:d6:9a:d6:6b:f7:1e:0a:bc:cf:15:fa:
25:31:15:15:6b:7a:0e:52:a7:19:4b:ff:1b:60:1b:3f:0e:7e:
af:63:1c:d4:4b:69:f2:99:23:1d:13:c0:85:80:c1:ae:53:7a:
d3:c7:4b:5f:9f:16:cc:c1:2d:45:97:2b:13:c3:2c:eb:9c:2b:
c1:a2:68:5d:e0:cd:2d:c4:f2:88:7a:90:fa:45:70:29:32:d5:
af:bf:d2:35:56:ad:e4:38:c7:87:99:90:a4:8a:c8:09:4a:5f:
b7:7f:c9:43:78:a3:de:46:a7:21:47:b4:86:69:93:59:40:4d:
ff:16:43:85:08:95:a4:78:b3:99:0c:23:c9:4e:68:fe:f0:ce:
5e:e4:ce:e6:34:e0:89:cf:cb:02:fa:fa:83:4f:b0:3a:ea:ce:
de:b9:ce:f1:44:5b:4c:a1:38:cf:38:a4:3c:b3:38:5c:a3:5a:
ae:fe:95:63:47:4c:1b:49:6d:62:6d:67:bf:cc:33:6f:53:cf:
45:d8:ca:81:5e:4e:8f:67:56:f6:80:4d:16:ec:9b:f7:1a:a4:
20:19:dc:36
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPo0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDY0MTU4WhcNMjUxMjEzMDY0MTU4WjAYMRYw
FAYDVQQDEw02NzdjY2NiOS1kY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1L3mX8vgy5BMYDVb0EWZa/XE4LoXRlN61o3Uzg9hi591LGxUu5iCDoK5
N20HHhmcCxZiPuRmoGB9Uz2cg+K2YHySk3aeuqhDf33MhcGhpDeGthuRbx0yypCL
6hSumaHAc0CyfR52+A4jzH2H0/h7wzgwRvAqny6BGy3v6jDbvG1gJ3+7Yl9IW5fE
osrhfWNb32gasUYcuWcNN9BGCQ1f5dxaJrKCxe/ULzfeL4T7+BO9+MwAvdkBJcqg
BsdnMtUDjeqP8By+lOx0nQYaZs7U+vBqCqBSij0/+YSLPE8AdvUie1V8LCOV8nZ0
N1zBA4OZaC7PqtNL3y+xhLscghQsrwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIoJ
XRjdUoArwdzDlbiGFyM4qmgZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MDE0M0VDQUNDQzIxMUVGOTQ0NEU1QTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOkvMA0GCSqGSIb3DQEBCwUA
A4IBAQCCc5mM9kHLXZUuFGIPyEJY981ECgtQP/ikbj1fVW2JJ+1bllJlf+J6I6rr
1prWa/ceCrzPFfolMRUVa3oOUqcZS/8bYBs/Dn6vYxzUS2nymSMdE8CFgMGuU3rT
x0tfnxbMwS1FlysTwyzrnCvBomhd4M0txPKIepD6RXApMtWvv9I1Vq3kOMeHmZCk
isgJSl+3f8lDeKPeRqchR7SGaZNZQE3/FkOFCJWkeLOZDCPJTmj+8M5e5M7mNOCJ
z8sC+vqDT7A66s7euc7xRFtMoTjPOKQ8szhco1qu/pVjR0wbSW1ibWe/zDNvU89F
2MqBXk6PZ1b2gE0W7Jv3GqQgGdw2
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:24:39 2025 by rpki-client