Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89737D7CD7CC11EF8857EE8A762E951A.roa
File: 89737D7CD7CC11EF8857EE8A762E951A.roa (raw, json)
Hash identifier: pP+co9OzarftO1kVg7CZEatRyNcjFAW7IYaf4uTfFN0=
Subject key identifier: 12:61:42:04:F2:77:D5:65:4B:54:D4:57:5B:AD:0C:6C:1B:CA:4D:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89737D7CD7CC11EF8857EE8A762E951A.roa
Signing time: Tue 21 Jan 2025 07:51:35 +0000
ROA not before: Tue 21 Jan 2025 07:51:31 +0000
ROA not after: Sat 01 Feb 2025 07:51:31 +0000
asID: 44559
IP address blocks: 156.246.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68826 (0x10cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:51:31 2025 GMT
Not After : Feb 1 07:51:31 2025 GMT
Subject: CN=678f5207-d0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:3d:4c:d7:d2:0d:46:e9:cf:5c:66:2b:d9:
ac:14:e3:de:e5:32:ce:0a:7f:3a:b5:82:bb:52:f9:
6c:e5:91:4e:6e:9a:46:72:8b:0c:8c:7c:45:3e:b9:
a4:8f:9b:f1:42:18:92:71:cc:69:bb:af:d5:bf:cf:
e5:60:19:c1:08:06:bd:e5:29:d5:fd:cf:9d:58:ed:
2e:a8:1a:86:68:0e:bb:a6:76:86:22:29:e5:92:4a:
5d:5f:c5:42:4f:92:05:70:eb:dc:c3:09:5b:8d:c9:
5c:eb:47:a5:59:f1:3e:90:70:03:45:00:0b:08:a0:
24:54:0f:73:5e:49:a4:6a:63:9a:c2:65:d0:6f:99:
41:70:45:92:b9:06:85:33:ea:9f:67:ac:60:01:23:
20:4a:01:81:1c:e4:07:31:10:9d:10:99:fa:b9:a5:
a9:f9:a5:a5:d1:38:0f:bd:e8:8e:72:af:df:a9:f8:
5d:c1:7d:11:ac:e5:1e:f2:82:69:85:19:5b:a8:83:
35:d3:d7:43:e8:44:36:5b:54:70:d0:63:33:65:1a:
e0:9b:a8:c3:da:64:92:bb:12:65:5d:ab:5e:0b:db:
03:31:e1:65:13:04:45:49:d5:2e:f1:db:73:e2:74:
1e:21:81:9b:dd:19:11:ee:76:45:0a:40:8f:06:af:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:61:42:04:F2:77:D5:65:4B:54:D4:57:5B:AD:0C:6C:1B:CA:4D:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89737D7CD7CC11EF8857EE8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.184.0/24
Signature Algorithm: sha256WithRSAEncryption
43:26:d9:0f:4e:6b:8f:4f:31:26:8a:8c:53:af:8c:ef:44:3a:
2f:92:24:97:73:4f:0b:36:46:65:af:f2:8c:3f:10:7f:62:f9:
b3:96:4d:dc:fd:55:5f:4c:66:3a:f5:1c:5f:76:bb:2e:e7:6c:
41:88:64:5f:45:a5:e1:a6:9b:39:a7:fd:e5:f7:2c:dc:75:1d:
8e:55:77:96:6b:e8:7e:55:b2:60:3b:12:a0:3c:ee:3c:bd:15:
c2:e7:86:93:7c:73:ba:ab:8b:33:e0:7e:17:8b:ef:dd:a9:78:
6e:34:0f:39:b7:1f:26:93:88:46:1c:5d:f5:c9:eb:8e:64:d9:
ae:c8:e1:83:e6:88:d2:cd:62:ff:1b:0b:4e:6d:9b:46:37:b7:
89:84:dd:8e:5d:ca:ad:b7:b4:b1:c1:bd:8a:e6:23:15:5e:72:
ec:5d:9c:4f:85:f3:70:5e:cd:b9:0e:21:30:47:b4:59:9c:f9:
38:98:56:f8:1a:2c:cd:ee:d4:0b:0c:92:b9:2b:04:86:52:3c:
e0:83:05:35:fc:09:60:c6:e9:f2:95:7d:e9:ed:e4:8f:46:7d:
99:38:d3:8f:41:d9:e8:4d:21:c4:56:5f:f1:3d:69:9f:20:f5:
9f:5f:1c:11:bd:ff:00:88:68:75:90:27:3c:45:6a:58:d5:a1:
04:c4:5b:c4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQzaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMDc1MTMxWhcNMjUwMjAxMDc1MTMxWjAYMRYw
FAYDVQQDEw02NzhmNTIwNy1kMGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtqw9TNfSDUbpz1xmK9msFOPe5TLOCn86tYK7Uvls5ZFObppGcosMjHxF
Prmkj5vxQhiSccxpu6/Vv8/lYBnBCAa95SnV/c+dWO0uqBqGaA67pnaGIinlkkpd
X8VCT5IFcOvcwwlbjclc60elWfE+kHADRQALCKAkVA9zXkmkamOawmXQb5lBcEWS
uQaFM+qfZ6xgASMgSgGBHOQHMRCdEJn6uaWp+aWl0TgPveiOcq/fqfhdwX0RrOUe
8oJphRlbqIM109dD6EQ2W1Rw0GMzZRrgm6jD2mSSuxJlXateC9sDMeFlEwRFSdUu
8dtz4nQeIYGb3RkR7nZFCkCPBq8uDwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBJh
QgTyd9VlS1TUV1utDGwbyk2zMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84OTczN0Q3Q0Q3Q0MxMUVGODg1N0VFOEE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPa4MA0GCSqGSIb3DQEBCwUA
A4IBAQBDJtkPTmuPTzEmioxTr4zvRDovkiSXc08LNkZlr/KMPxB/Yvmzlk3c/VVf
TGY69Rxfdrsu52xBiGRfRaXhpps5p/3l9yzcdR2OVXeWa+h+VbJgOxKgPO48vRXC
54aTfHO6q4sz4H4Xi+/dqXhuNA85tx8mk4hGHF31yeuOZNmuyOGD5ojSzWL/GwtO
bZtGN7eJhN2OXcqtt7Sxwb2K5iMVXnLsXZxPhfNwXs25DiEwR7RZnPk4mFb4GizN
7tQLDJK5KwSGUjzggwU1/AlgxunylX3p7eSPRn2ZONOPQdnoTSHEVl/xPWmfIPWf
XxwRvf8AiGh1kCc8RWpY1aEExFvE
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:45 2025 by rpki-client