Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A12E2570DA7E11EFA872AF8D762E951A.roa
File: A12E2570DA7E11EFA872AF8D762E951A.roa (raw, json)
Hash identifier: pdHRHEpulXkvqzMbWRp/6G0m7B7zTnGCMDojlEQOzzE=
Subject key identifier: A5:B6:33:FF:E0:7E:85:EC:56:1E:86:C9:01:26:41:29:FD:71:73:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011000
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A12E2570DA7E11EFA872AF8D762E951A.roa
Signing time: Fri 24 Jan 2025 18:11:28 +0000
ROA not before: Fri 24 Jan 2025 18:11:24 +0000
ROA not after: Tue 25 Feb 2025 18:11:24 +0000
asID: 44559
IP address blocks: 156.246.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69632 (0x11000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 18:11:24 2025 GMT
Not After : Feb 25 18:11:24 2025 GMT
Subject: CN=6793d7d0-88af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4c:49:7a:78:c8:10:c0:1d:17:60:03:c8:41:
21:50:30:a5:c2:0e:5c:47:09:2c:4d:79:2f:2c:cd:
2b:5a:2e:82:8b:a9:4b:88:d2:84:bd:4b:13:78:5a:
d1:fd:00:e9:52:99:f7:a6:bd:f2:b8:af:51:87:7e:
37:97:a5:d0:a4:ab:e4:29:a3:cb:b7:df:32:1e:3b:
f8:be:5a:6b:08:4f:a6:7f:85:02:a2:10:27:ad:9b:
bd:0b:4c:87:2b:31:c2:bf:ea:7d:75:3f:60:4a:12:
e6:9d:93:09:4a:cf:36:b0:ae:dd:56:64:3b:1f:31:
a5:96:5c:e3:a5:1c:8a:de:34:1c:19:42:ea:e6:a6:
aa:2a:55:41:fd:9f:05:4b:30:e7:0f:5c:5a:85:78:
b4:83:a1:89:24:ed:fc:14:76:4f:bb:c3:7e:a4:ec:
2b:b7:ff:19:25:0e:43:b9:61:ec:2e:97:20:9c:aa:
bb:af:bb:6b:e1:d5:b6:53:9a:89:5f:9a:6a:87:0b:
e4:3d:79:2d:a0:a6:9f:ac:8d:29:92:47:a5:21:c4:
5d:4b:08:69:5c:2d:a9:f0:bc:8a:7c:1e:07:ef:91:
1b:30:eb:e3:a5:1e:79:2f:d3:96:d7:e7:76:82:fb:
62:b7:79:51:06:70:ea:e6:9a:b1:32:11:0b:9e:37:
ae:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B6:33:FF:E0:7E:85:EC:56:1E:86:C9:01:26:41:29:FD:71:73:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A12E2570DA7E11EFA872AF8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.157.0/24
Signature Algorithm: sha256WithRSAEncryption
41:1b:a0:4a:0c:15:0a:8f:0e:bd:40:78:10:0a:df:19:28:89:
c5:8b:c2:84:97:ce:3a:07:da:8d:76:93:c2:86:e3:01:62:64:
15:9e:98:73:c4:1c:ef:84:33:f5:db:09:04:5a:a5:fe:f6:35:
53:7f:5b:7d:a1:4d:8c:30:00:02:2d:48:bc:6b:52:ab:e1:66:
bb:9b:a6:1f:f1:c9:40:d7:0a:49:e1:7a:c9:df:21:07:ba:1e:
d2:88:18:18:4c:8a:a9:85:f8:0c:a3:44:7a:6a:52:27:f6:00:
75:28:ba:1b:d1:4d:6d:62:db:51:e2:0a:07:a4:09:c7:52:91:
08:fd:5e:13:4e:98:b6:a5:0b:30:21:0c:8e:d9:c0:02:55:2b:
aa:5b:15:ce:2e:78:0e:fe:85:2a:25:9d:97:68:ca:ee:0d:54:
26:36:67:ce:59:31:5e:5e:0f:fd:71:fd:91:2f:a8:9f:09:2a:
51:58:40:31:79:02:1a:fb:db:e7:d7:2d:25:af:51:74:2a:c9:
bf:51:22:2a:b3:7b:77:f2:66:94:2e:a9:1d:8c:22:81:80:7b:
e8:94:29:e2:cf:a0:38:e0:a1:64:6a:92:37:0a:5d:d2:e1:e2:
fc:d6:72:d2:09:20:e8:c9:52:22:68:76:33:39:19:05:45:09:
57:56:66:9b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARAAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MTgxMTI0WhcNMjUwMjI1MTgxMTI0WjAYMRYw
FAYDVQQDEw02NzkzZDdkMC04OGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA10xJenjIEMAdF2ADyEEhUDClwg5cRwksTXkvLM0rWi6Ci6lLiNKEvUsT
eFrR/QDpUpn3pr3yuK9Rh343l6XQpKvkKaPLt98yHjv4vlprCE+mf4UCohAnrZu9
C0yHKzHCv+p9dT9gShLmnZMJSs82sK7dVmQ7HzGlllzjpRyK3jQcGULq5qaqKlVB
/Z8FSzDnD1xahXi0g6GJJO38FHZPu8N+pOwrt/8ZJQ5DuWHsLpcgnKq7r7tr4dW2
U5qJX5pqhwvkPXktoKafrI0pkkelIcRdSwhpXC2p8LyKfB4H75EbMOvjpR55L9OW
1+d2gvtit3lRBnDq5pqxMhELnjeulwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKW2
M//gfoXsVh6GyQEmQSn9cXMuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMTJFMjU3MERBN0UxMUVGQTg3MkFGOEQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPadMA0GCSqGSIb3DQEBCwUA
A4IBAQBBG6BKDBUKjw69QHgQCt8ZKInFi8KEl846B9qNdpPChuMBYmQVnphzxBzv
hDP12wkEWqX+9jVTf1t9oU2MMAACLUi8a1Kr4Wa7m6Yf8clA1wpJ4XrJ3yEHuh7S
iBgYTIqphfgMo0R6alIn9gB1KLob0U1tYttR4goHpAnHUpEI/V4TTpi2pQswIQyO
2cACVSuqWxXOLngO/oUqJZ2XaMruDVQmNmfOWTFeXg/9cf2RL6ifCSpRWEAxeQIa
+9vn1y0lr1F0Ksm/USIqs3t38maULqkdjCKBgHvolCniz6A44KFkapI3Cl3S4eL8
1nLSCSDoyVIiaHYzORkFRQlXVmab
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:13 2025 by rpki-client