Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/886B87BAC28911EFA1B978AF762E951A.roa
File: 886B87BAC28911EFA1B978AF762E951A.roa (raw, json)
Hash identifier: cKlKwDRF9ljoQLrL2mOajJHTNKoA7+nhrOmjVn/Kf8k=
Subject key identifier: 50:6F:CA:34:1B:9D:9F:39:64:29:F9:F1:60:96:89:63:77:1F:79:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E951
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/886B87BAC28911EFA1B978AF762E951A.roa
Signing time: Wed 25 Dec 2024 06:29:03 +0000
ROA not before: Wed 25 Dec 2024 06:28:59 +0000
ROA not after: Wed 10 Dec 2025 06:28:59 +0000
asID: 984
IP address blocks: 156.228.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59729 (0xe951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 25 06:28:59 2024 GMT
Not After : Dec 10 06:28:59 2025 GMT
Subject: CN=676ba62f-47b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:a6:93:9d:c5:ca:dd:19:de:dc:ad:fc:9e:
88:a7:2c:bf:fa:8e:01:37:42:8f:aa:8c:18:3c:b1:
0b:66:80:fd:4f:be:78:eb:ba:e4:9d:57:67:09:06:
92:08:6d:f4:18:fa:b6:33:5e:93:5c:7b:8b:6b:5b:
ba:98:22:89:fc:4e:03:59:d8:fb:e7:58:c2:b9:34:
24:ee:69:e5:7d:3d:61:ed:66:10:10:f8:1c:eb:5f:
0f:18:df:4b:27:16:ba:1a:f8:25:eb:12:5e:ad:0a:
cb:a6:42:9e:7d:65:fd:27:fd:55:59:8c:dc:4b:0a:
e0:f3:fa:4b:45:ac:88:9a:f9:17:16:c4:c0:1e:a9:
58:4f:b0:6a:aa:c2:42:f7:d5:4f:79:2c:58:15:b9:
1c:25:aa:f7:d3:ed:91:0e:6e:43:55:a1:0e:82:11:
74:a2:7e:ec:5e:22:e6:ec:4c:6d:9b:8d:92:fc:c6:
48:39:68:96:f5:28:6e:bc:d1:f5:8f:20:51:45:62:
47:6f:7d:d3:28:a3:a7:c3:e2:ef:4f:0c:6f:c4:2f:
75:8f:c0:6c:18:bb:53:ac:4d:61:71:bf:f1:42:a7:
a6:c9:bf:d3:ae:52:2f:fa:4d:a8:2e:7a:e7:9d:1c:
65:23:b6:19:58:a6:96:a4:a7:b1:b2:7b:24:bc:4d:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6F:CA:34:1B:9D:9F:39:64:29:F9:F1:60:96:89:63:77:1F:79:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/886B87BAC28911EFA1B978AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.73.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3f:c6:de:79:60:8a:fb:46:83:19:de:3b:f2:42:c6:b7:9e:
64:c5:b1:1c:3f:25:16:18:35:ab:b4:bc:e9:ce:ed:82:d7:49:
74:66:43:a1:f5:6f:c8:2f:af:86:61:9d:6a:7b:f3:88:e5:04:
47:d7:9b:7f:7f:49:f7:69:06:7f:e8:3d:46:92:27:e9:b2:4a:
b3:02:f2:bd:42:91:16:dd:b8:b5:94:32:b1:d6:ac:0f:f6:19:
b5:c4:c6:ba:06:8d:02:61:37:97:05:41:2d:7f:f3:6a:28:43:
2d:4e:b7:c1:8c:b9:3c:bf:5d:c3:01:a7:bb:0c:27:53:a0:80:
f9:40:89:54:ad:7e:da:04:51:26:cb:91:61:14:33:d9:d8:fe:
3f:10:9f:7f:63:51:f1:2d:56:57:67:8c:db:16:1d:aa:4b:61:
f3:17:4e:e5:3b:3d:07:19:97:90:14:a9:13:a4:69:4d:cb:ff:
ce:9a:a3:2e:2e:51:5c:37:18:25:5a:eb:1f:41:6d:44:1c:1f:
b7:ec:98:90:38:97:a1:2a:1b:5f:69:8f:4a:d0:a2:0e:ae:40:
6c:8d:d4:ba:a5:77:fe:f1:f7:d0:aa:c3:e7:5e:2e:59:7e:17:
47:45:51:07:3e:b0:a8:da:83:10:a8:2d:26:17:31:6b:99:60:
d1:81:7b:37
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOlRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI1MDYyODU5WhcNMjUxMjEwMDYyODU5WjAYMRYw
FAYDVQQDEw02NzZiYTYyZi00N2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp5qmk53Fyt0Z3tyt/J6Ipyy/+o4BN0KPqowYPLELZoD9T75467rknVdn
CQaSCG30GPq2M16TXHuLa1u6mCKJ/E4DWdj751jCuTQk7mnlfT1h7WYQEPgc618P
GN9LJxa6Gvgl6xJerQrLpkKefWX9J/1VWYzcSwrg8/pLRayImvkXFsTAHqlYT7Bq
qsJC99VPeSxYFbkcJar30+2RDm5DVaEOghF0on7sXiLm7Extm42S/MZIOWiW9Shu
vNH1jyBRRWJHb33TKKOnw+LvTwxvxC91j8BsGLtTrE1hcb/xQqemyb/TrlIv+k2o
LnrnnRxlI7YZWKaWpKexsnskvE0TwQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFBv
yjQbnZ85ZCn58WCWiWN3H3lMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84ODZCODdCQUMyODkxMUVGQTFCOTc4QUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnORJMA0GCSqGSIb3DQEBCwUA
A4IBAQBrP8beeWCK+0aDGd478kLGt55kxbEcPyUWGDWrtLzpzu2C10l0ZkOh9W/I
L6+GYZ1qe/OI5QRH15t/f0n3aQZ/6D1GkifpskqzAvK9QpEW3bi1lDKx1qwP9hm1
xMa6Bo0CYTeXBUEtf/NqKEMtTrfBjLk8v13DAae7DCdToID5QIlUrX7aBFEmy5Fh
FDPZ2P4/EJ9/Y1HxLVZXZ4zbFh2qS2HzF07lOz0HGZeQFKkTpGlNy//OmqMuLlFc
NxglWusfQW1EHB+37JiQOJehKhtfaY9K0KIOrkBsjdS6pXf+8ffQqsPnXi5ZfhdH
RVEHPrCo2oMQqC0mFzFrmWDRgXs3
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:37:04 2025 by rpki-client