Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F090C78D56C11EF8CBF5C81762E951A.roa
File: 8F090C78D56C11EF8CBF5C81762E951A.roa (raw, json)
Hash identifier: 3i9SY4j05DAOJ6vzMh5Khw0c/zGKlrkBlaNjYPhUQGY=
Subject key identifier: 1F:08:52:2E:C9:FC:30:5E:2D:65:B9:F1:E1:18:5F:93:1F:AC:B7:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F090C78D56C11EF8CBF5C81762E951A.roa
Signing time: Sat 18 Jan 2025 07:19:30 +0000
ROA not before: Sat 18 Jan 2025 07:19:27 +0000
ROA not after: Sat 22 Feb 2025 07:19:27 +0000
asID: 18013
IP address blocks: 156.239.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68373 (0x10b15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 07:19:27 2025 GMT
Not After : Feb 22 07:19:27 2025 GMT
Subject: CN=678b5602-87d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:d0:e3:8a:f5:c1:3d:42:d3:06:4f:fe:0b:
4a:56:7a:4f:41:45:8a:01:a4:ae:d9:9b:c1:2b:2e:
2f:9f:d5:e7:49:71:02:84:6c:5f:22:87:85:73:4e:
c0:4b:77:b7:29:8b:b0:4f:41:5d:b7:e3:c5:2f:42:
87:e0:3f:66:20:bf:b6:d2:6c:cc:51:a9:c4:a2:9f:
76:5b:fe:46:17:81:90:90:5d:a1:dd:e2:45:1d:dc:
a2:66:30:35:76:f9:f8:73:ec:10:32:31:89:cd:00:
72:16:fd:de:a9:28:fe:9d:54:59:a3:11:58:71:48:
c7:11:9d:14:2e:85:2b:2a:5c:ff:95:8b:e7:75:f1:
99:03:30:0d:8b:58:d6:50:5e:a0:dd:ce:9a:32:c2:
3d:7a:9d:7d:74:94:b8:e0:ca:76:8a:ff:70:68:52:
fd:52:87:5f:99:72:6b:01:9d:c3:d9:8f:45:17:d4:
ab:d0:98:cf:25:28:43:98:ee:41:5d:16:62:58:86:
33:4b:f9:18:82:58:1a:e3:97:95:6c:e2:da:36:1c:
03:f5:c0:ca:c0:02:4b:fe:48:76:4e:8c:78:bc:d5:
ff:10:68:27:e6:4d:cf:91:c9:79:91:57:97:76:14:
e7:eb:ea:53:81:69:ba:7f:4a:09:7a:8f:64:0c:60:
8a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:08:52:2E:C9:FC:30:5E:2D:65:B9:F1:E1:18:5F:93:1F:AC:B7:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F090C78D56C11EF8CBF5C81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:e1:49:61:67:e4:02:5b:99:97:9c:4f:41:16:bb:42:e7:92:
d6:6f:21:16:a2:30:a7:f8:c0:6c:18:1e:b3:9f:61:3b:16:3e:
fa:f3:86:5e:84:6d:68:f3:73:c7:b7:3d:e6:02:ad:ad:29:24:
d3:c6:51:34:f6:e4:71:87:f6:af:25:ea:95:91:b9:5b:d2:4f:
85:3e:f0:79:12:23:15:a0:f8:2b:ab:4c:7c:87:97:bb:3b:c6:
ec:20:5b:9b:5d:07:fa:e2:d5:28:72:f5:1c:0d:f0:01:f9:01:
c8:65:bd:54:b8:3a:d4:18:4b:ab:c0:1e:54:8b:32:2e:80:0d:
5e:65:ca:3e:cf:fe:a1:40:0f:7f:97:ef:bd:bf:b5:19:8a:02:
36:ce:dd:e0:7e:eb:15:39:67:f3:bc:00:09:d2:cd:99:74:0e:
0b:77:79:b4:c0:5c:85:d5:2c:62:57:55:5d:36:24:f1:16:60:
c4:a9:9e:11:32:10:32:8e:70:e3:31:90:88:13:37:e2:51:b0:
d0:4c:81:ce:d0:f7:0a:6c:c5:6b:87:6f:37:18:81:66:bf:b9:
e2:01:43:3e:1c:19:40:f8:ec:35:3f:a5:12:bf:b0:c0:c9:c0:
c2:4d:9f:24:15:11:2c:ba:fb:d6:e3:d2:ed:a9:3e:cb:1d:8b:
b7:fb:d9:ae
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQsVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE4MDcxOTI3WhcNMjUwMjIyMDcxOTI3WjAYMRYw
FAYDVQQDEw02NzhiNTYwMi04N2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwrDQ44r1wT1C0wZP/gtKVnpPQUWKAaSu2ZvBKy4vn9XnSXEChGxfIoeF
c07AS3e3KYuwT0Fdt+PFL0KH4D9mIL+20mzMUanEop92W/5GF4GQkF2h3eJFHdyi
ZjA1dvn4c+wQMjGJzQByFv3eqSj+nVRZoxFYcUjHEZ0ULoUrKlz/lYvndfGZAzAN
i1jWUF6g3c6aMsI9ep19dJS44Mp2iv9waFL9UodfmXJrAZ3D2Y9FF9Sr0JjPJShD
mO5BXRZiWIYzS/kYglga45eVbOLaNhwD9cDKwAJL/kh2Tox4vNX/EGgn5k3Pkcl5
kVeXdhTn6+pTgWm6f0oJeo9kDGCKGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB8I
Ui7J/DBeLWW58eEYX5MfrLfyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RjA5MEM3OEQ1NkMxMUVGOENCRjVDODE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnO8YMA0GCSqGSIb3DQEBCwUA
A4IBAQCy4UlhZ+QCW5mXnE9BFrtC55LWbyEWojCn+MBsGB6zn2E7Fj7684ZehG1o
83PHtz3mAq2tKSTTxlE09uRxh/avJeqVkblb0k+FPvB5EiMVoPgrq0x8h5e7O8bs
IFubXQf64tUocvUcDfAB+QHIZb1UuDrUGEurwB5UizIugA1eZco+z/6hQA9/l++9
v7UZigI2zt3gfusVOWfzvAAJ0s2ZdA4Ld3m0wFyF1SxiV1VdNiTxFmDEqZ4RMhAy
jnDjMZCIEzfiUbDQTIHO0PcKbMVrh283GIFmv7niAUM+HBlA+Ow1P6USv7DAycDC
TZ8kFREsuvvW49LtqT7LHYu3+9mu
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:31 2025 by rpki-client