Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EF83580DB1D11EF9E580F44762E951A.roa
File: 9EF83580DB1D11EF9E580F44762E951A.roa (raw, json)
Hash identifier: 9pC75QS7nUeNEKQhZ2x09tgGldTgYVlqWefuBmQEVJ4=
Subject key identifier: 3F:F9:05:6E:A9:DF:35:21:95:02:B6:85:B4:79:A9:55:8F:44:2F:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011269
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EF83580DB1D11EF9E580F44762E951A.roa
Signing time: Sat 25 Jan 2025 13:09:34 +0000
ROA not before: Sat 25 Jan 2025 13:09:30 +0000
ROA not after: Sat 01 Feb 2025 13:09:30 +0000
asID: 62468
IP address blocks: 156.245.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70249 (0x11269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 13:09:30 2025 GMT
Not After : Feb 1 13:09:30 2025 GMT
Subject: CN=6794e28e-e80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:27:11:b3:6c:42:be:86:a0:d7:83:4c:1c:
c7:45:d3:a1:ff:31:2d:c8:c5:7a:2d:89:3a:33:e1:
50:4f:f8:1b:c8:fb:b6:74:aa:65:6f:4d:5e:14:07:
ed:f3:91:6e:e3:54:5b:6f:12:e5:40:ea:e8:50:80:
43:2e:c4:9e:e7:94:97:81:fb:06:a6:2b:b4:2e:06:
32:c1:10:b0:00:fd:0d:02:58:06:04:16:8e:90:1a:
73:28:ae:c7:dd:16:f2:17:1e:c8:08:3a:ef:55:19:
70:76:62:84:e0:c3:e6:db:63:d3:8d:b7:c6:ba:22:
85:74:10:5a:88:ad:d5:a6:5b:ce:b1:6b:07:a3:09:
ec:82:ad:e8:c5:c3:63:3e:ca:20:1c:a3:80:5e:ea:
77:db:d9:2c:28:0f:a1:a0:fa:53:90:b2:09:91:c9:
f1:8f:78:0e:e9:c2:35:6c:b2:b6:05:20:71:b6:78:
65:ad:01:cc:6e:68:2a:d2:bb:09:46:2a:07:6c:d8:
ab:9f:17:53:b8:90:d9:ce:4e:4c:a0:12:91:c6:40:
66:0e:0c:45:dd:c3:34:4e:45:38:20:0d:64:14:36:
d1:6f:f0:cf:7c:5b:0f:26:28:e6:ed:22:c9:d9:0a:
cd:34:31:cc:c4:ec:2d:d7:8c:04:0d:82:77:72:f2:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F9:05:6E:A9:DF:35:21:95:02:B6:85:B4:79:A9:55:8F:44:2F:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EF83580DB1D11EF9E580F44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.209.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:62:6d:60:57:3b:ea:a1:d8:fd:73:9a:47:48:15:8c:24:9d:
08:3c:ee:c4:49:5a:1f:27:86:a2:b9:10:6d:5e:32:50:88:b6:
52:2a:ac:cf:96:d6:99:65:7e:e5:6f:ba:e7:46:55:11:fe:de:
1d:b5:98:95:2c:fe:64:61:48:18:62:06:18:a2:38:18:b9:19:
3e:13:24:95:13:8b:50:be:44:af:4f:67:ad:a9:f6:29:06:a5:
e5:14:da:75:9b:1e:fe:1f:d1:31:17:2b:18:1d:8d:c0:96:b7:
44:d7:49:29:40:11:2a:19:d2:9d:e6:a6:64:f0:af:13:ae:d2:
e0:51:c9:3c:49:23:f4:da:7a:5e:23:4c:7a:65:c9:b0:07:5d:
50:fb:6e:3d:6b:0b:a8:06:9f:6b:20:a6:83:d9:8e:52:c7:41:
db:95:03:aa:83:d7:83:7e:f7:be:12:a7:aa:ed:9d:dd:09:89:
f4:5e:0c:99:37:1e:96:df:35:4d:3e:e3:4b:2a:a5:7a:eb:fc:
fb:3a:e0:57:0c:9e:14:02:2c:c8:0a:a9:81:3b:6f:50:19:27:
0b:ce:bb:8a:2a:0d:9f:e0:d7:c9:70:51:06:15:3a:98:51:0f:
56:84:e7:e3:83:7e:c0:21:db:d7:da:2d:f5:c6:87:d6:90:5b:
cf:ff:d4:8f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARJpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTMwOTMwWhcNMjUwMjAxMTMwOTMwWjAYMRYw
FAYDVQQDEw02Nzk0ZTI4ZS1lODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtr0nEbNsQr6GoNeDTBzHRdOh/zEtyMV6LYk6M+FQT/gbyPu2dKplb01e
FAft85Fu41RbbxLlQOroUIBDLsSe55SXgfsGpiu0LgYywRCwAP0NAlgGBBaOkBpz
KK7H3RbyFx7ICDrvVRlwdmKE4MPm22PTjbfGuiKFdBBaiK3VplvOsWsHownsgq3o
xcNjPsogHKOAXup329ksKA+hoPpTkLIJkcnxj3gO6cI1bLK2BSBxtnhlrQHMbmgq
0rsJRioHbNirnxdTuJDZzk5MoBKRxkBmDgxF3cM0TkU4IA1kFDbRb/DPfFsPJijm
7SLJ2QrNNDHMxOwt14wEDYJ3cvIljQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD/5
BW6p3zUhlQK2hbR5qVWPRC8UMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RUY4MzU4MERCMUQxMUVGOUU1ODBGNDQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPXRMA0GCSqGSIb3DQEBCwUA
A4IBAQCyYm1gVzvqodj9c5pHSBWMJJ0IPO7ESVofJ4aiuRBtXjJQiLZSKqzPltaZ
ZX7lb7rnRlUR/t4dtZiVLP5kYUgYYgYYojgYuRk+EySVE4tQvkSvT2etqfYpBqXl
FNp1mx7+H9ExFysYHY3AlrdE10kpQBEqGdKd5qZk8K8TrtLgUck8SSP02npeI0x6
ZcmwB11Q+249awuoBp9rIKaD2Y5Sx0HblQOqg9eDfve+Eqeq7Z3dCYn0XgyZNx6W
3zVNPuNLKqV66/z7OuBXDJ4UAizICqmBO29QGScLzruKKg2f4NfJcFEGFTqYUQ9W
hOfjg37AIdvX2i31xofWkFvP/9SP
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:40:57 2025 by rpki-client