Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A26D57F2D7C811EF8D658272762E951A.roa
File: A26D57F2D7C811EF8D658272762E951A.roa (raw, json)
Hash identifier: cCdmc38hYMIPMTJWVZ0dVvgXFYjl1jypp5HofW58J5A=
Subject key identifier: 77:31:6A:01:1C:28:B8:62:64:12:E6:1C:37:FE:82:CB:1E:B3:81:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CC0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A26D57F2D7C811EF8D658272762E951A.roa
Signing time: Tue 21 Jan 2025 07:23:39 +0000
ROA not before: Tue 21 Jan 2025 07:23:35 +0000
ROA not after: Tue 25 Feb 2025 07:23:35 +0000
asID: 202656
IP address blocks: 156.236.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68800 (0x10cc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:23:35 2025 GMT
Not After : Feb 25 07:23:35 2025 GMT
Subject: CN=678f4b7b-5886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:4e:3d:0c:64:10:4c:cd:e7:38:6d:48:4f:
08:41:9c:2b:1a:9b:7a:73:67:f3:ff:d1:f3:43:d0:
bd:3e:b8:0e:31:3e:c7:63:6f:59:2c:91:e9:8b:35:
a5:b7:57:62:65:c0:3b:59:19:d3:d0:c3:45:ae:ae:
d2:52:e7:5d:f4:df:04:84:1c:8b:68:41:c8:62:2e:
92:0f:82:8d:45:1a:6a:ca:44:47:f5:b9:20:49:8b:
86:b0:e9:ad:73:03:06:64:a6:2b:ff:59:3c:a7:e0:
71:ac:e4:05:5e:ce:29:a4:77:51:16:62:91:e1:02:
9b:87:32:da:cd:fc:44:0d:fe:ef:b7:61:fd:7b:fd:
c0:93:75:07:69:06:32:b1:fc:5e:ed:0c:bd:c3:12:
77:65:26:14:87:11:a1:1e:24:f8:52:90:b3:7b:f1:
13:88:b1:67:61:14:b1:fd:d2:c7:94:f9:1c:a2:e2:
2c:91:a9:13:11:4b:46:0d:31:c5:41:1c:81:77:04:
3a:d8:ec:24:d9:84:df:75:c6:8d:a5:6c:01:9b:32:
12:9d:4d:96:b4:08:de:80:e1:26:f9:1a:ad:76:e0:
ce:6f:fc:b3:93:bf:8c:79:5b:c5:01:78:94:b1:9d:
97:d8:59:08:19:b1:f2:7d:25:1b:52:36:2c:40:10:
06:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:31:6A:01:1C:28:B8:62:64:12:E6:1C:37:FE:82:CB:1E:B3:81:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A26D57F2D7C811EF8D658272762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.107.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d2:99:20:b0:3c:ed:e5:0a:fb:9d:e1:18:b2:06:96:5f:b1:
7a:78:bd:b6:6e:27:60:19:89:70:f8:7f:ac:40:b4:f9:4e:b0:
e7:89:99:39:bd:2a:5b:65:3e:61:dd:31:1d:64:a3:a8:c9:24:
91:ff:c9:56:bc:0c:b5:7e:0b:09:92:3c:83:30:d6:b6:86:1d:
77:8a:d4:cd:d4:e7:f5:3f:e5:9f:fc:cf:ed:f4:4a:cd:0b:05:
f8:4f:d0:19:2b:45:33:82:a1:69:a5:27:eb:c4:4a:95:7d:8a:
f3:a1:31:3b:ea:4b:63:53:5b:92:ef:ae:17:26:78:4d:5f:46:
c8:1d:72:e5:1c:21:3e:5c:6e:3f:9c:7a:2a:ec:df:08:ef:71:
61:84:f2:5f:f1:92:75:3e:79:d7:5a:1c:0e:ee:ac:55:41:b8:
d0:6d:bd:28:38:61:ca:b7:fb:b3:64:64:50:79:69:cd:96:1e:
87:5a:66:0d:0c:a6:1a:a6:df:0f:af:29:0c:12:26:f4:e9:b2:
38:ec:62:7a:72:83:c8:8b:8f:54:97:ea:7f:de:8b:66:19:73:
8e:e4:a0:ba:7a:b6:06:65:76:c7:8e:23:95:44:d8:51:f5:69:
41:1e:01:6b:89:3e:01:59:09:bd:85:37:25:ca:69:0c:b3:d1:
14:71:df:f5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQzAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIxMDcyMzM1WhcNMjUwMjI1MDcyMzM1WjAYMRYw
FAYDVQQDEw02NzhmNGI3Yi01ODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1wFOPQxkEEzN5zhtSE8IQZwrGpt6c2fz/9HzQ9C9PrgOMT7HY29ZLJHp
izWlt1diZcA7WRnT0MNFrq7SUudd9N8EhByLaEHIYi6SD4KNRRpqykRH9bkgSYuG
sOmtcwMGZKYr/1k8p+BxrOQFXs4ppHdRFmKR4QKbhzLazfxEDf7vt2H9e/3Ak3UH
aQYysfxe7Qy9wxJ3ZSYUhxGhHiT4UpCze/ETiLFnYRSx/dLHlPkcouIskakTEUtG
DTHFQRyBdwQ62Owk2YTfdcaNpWwBmzISnU2WtAjegOEm+RqtduDOb/yzk7+MeVvF
AXiUsZ2X2FkIGbHyfSUbUjYsQBAG4QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHcx
agEcKLhiZBLmHDf+gsses4FkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMjZENTdGMkQ3QzgxMUVGOEQ2NTgyNzI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOxrMA0GCSqGSIb3DQEBCwUA
A4IBAQBx0pkgsDzt5Qr7neEYsgaWX7F6eL22bidgGYlw+H+sQLT5TrDniZk5vSpb
ZT5h3TEdZKOoySSR/8lWvAy1fgsJkjyDMNa2hh13itTN1Of1P+Wf/M/t9ErNCwX4
T9AZK0UzgqFppSfrxEqVfYrzoTE76ktjU1uS764XJnhNX0bIHXLlHCE+XG4/nHoq
7N8I73FhhPJf8ZJ1PnnXWhwO7qxVQbjQbb0oOGHKt/uzZGRQeWnNlh6HWmYNDKYa
pt8PrykMEib06bI47GJ6coPIi49Ul+p/3otmGXOO5KC6erYGZXbHjiOVRNhR9WlB
HgFriT4BWQm9hTclymkMs9EUcd/1
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:56 2025 by rpki-client