Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6B61360DA8111EFAF2EE2A1762E951A.roa
File: A6B61360DA8111EFAF2EE2A1762E951A.roa (raw, json)
Hash identifier: cRbtnAX+OQHJM16eaWbS/ets8d20qETQGdKt7q0x/lU=
Subject key identifier: 03:3A:02:86:2A:D5:4B:73:68:03:C1:6C:3F:BA:92:28:DA:57:BF:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011014
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6B61360DA8111EFAF2EE2A1762E951A.roa
Signing time: Fri 24 Jan 2025 18:33:05 +0000
ROA not before: Fri 24 Jan 2025 18:33:02 +0000
ROA not after: Tue 25 Feb 2025 18:33:02 +0000
asID: 44559
IP address blocks: 156.246.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69652 (0x11014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 18:33:02 2025 GMT
Not After : Feb 25 18:33:02 2025 GMT
Subject: CN=6793dce1-5697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:ae:1b:fd:0e:e8:3b:98:0e:a3:f7:5f:b9:
45:e8:b8:16:7c:be:a0:ff:98:7f:37:c4:04:4e:ea:
aa:de:a5:6c:99:83:f6:eb:a9:93:f6:39:ea:a0:91:
aa:96:65:00:28:91:c6:bf:21:ca:49:86:60:ed:7a:
14:4e:6f:eb:f6:e1:e4:08:eb:d9:c8:d5:a3:9c:42:
26:0f:a3:54:5c:35:90:cb:d2:34:d0:01:29:bb:ec:
4d:81:d6:31:b6:de:e3:c1:13:d5:6f:6f:32:a8:23:
ee:fd:4e:c2:5b:5c:69:d7:dd:2b:a6:b5:2c:dd:30:
f8:83:2d:87:2d:a2:76:ea:13:a0:d6:95:58:ea:e3:
ed:ce:16:81:78:de:fa:e1:8a:05:77:3c:42:dc:b2:
bb:40:a2:80:27:e1:00:f6:d9:11:1f:87:4e:db:19:
39:58:41:13:43:ba:f7:31:37:b1:25:7c:08:83:d6:
20:24:6e:30:cc:07:b3:03:8d:39:be:b5:08:cd:c1:
9a:12:b4:5c:cf:98:00:d6:40:d6:4a:5a:c2:73:c9:
2a:36:be:67:1d:fd:c6:a9:f9:8b:b3:49:3d:2a:c0:
4b:86:3b:9e:62:c6:7a:97:f9:21:f7:33:21:39:e7:
7c:28:96:94:19:a2:58:45:d2:98:dc:c6:b7:eb:b2:
f3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3A:02:86:2A:D5:4B:73:68:03:C1:6C:3F:BA:92:28:DA:57:BF:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6B61360DA8111EFAF2EE2A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:50:1b:59:2c:bf:b3:c3:af:5c:10:30:bb:fa:2f:13:51:7f:
96:1d:34:6b:d1:e3:27:a2:f8:a9:97:04:a0:8e:e9:39:ed:af:
5a:4d:de:ec:50:34:f0:f0:06:9c:56:81:42:6f:40:a3:2a:f6:
8d:27:95:b9:d6:56:60:51:3b:f4:da:77:12:d7:9a:69:cc:e8:
29:fa:8b:4d:1d:30:d8:73:5a:39:c8:fe:53:ea:02:c4:ec:2e:
72:34:01:49:39:9f:09:c9:e1:7f:38:25:6e:28:29:40:7d:c6:
18:e0:2a:3d:12:5f:4b:cd:52:bc:a4:10:f4:3e:4f:b0:33:31:
02:d0:0b:1f:b0:b0:eb:a3:3e:5e:c8:83:4a:4f:e5:9d:59:ce:
33:12:fb:18:88:f9:45:f3:16:ae:99:24:c0:72:ef:19:43:99:
3c:19:ae:fe:2d:5b:34:b4:53:17:a7:e3:48:b8:4b:43:99:41:
9c:e4:64:28:bf:a5:25:d2:da:21:54:7f:bb:3c:27:fa:3b:98:
d4:3a:b0:e9:88:98:9e:31:06:a9:4d:c8:f3:93:77:77:bd:df:
0f:56:43:ac:7f:59:ec:54:d7:ab:22:34:98:0f:24:be:31:65:
00:c7:2a:b7:97:62:46:09:f9:53:9a:36:e0:14:a2:f5:7e:54:
7b:f3:9b:88
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARAUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MTgzMzAyWhcNMjUwMjI1MTgzMzAyWjAYMRYw
FAYDVQQDEw02NzkzZGNlMS01Njk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqeiuG/0O6DuYDqP3X7lF6LgWfL6g/5h/N8QETuqq3qVsmYP266mT9jnq
oJGqlmUAKJHGvyHKSYZg7XoUTm/r9uHkCOvZyNWjnEImD6NUXDWQy9I00AEpu+xN
gdYxtt7jwRPVb28yqCPu/U7CW1xp190rprUs3TD4gy2HLaJ26hOg1pVY6uPtzhaB
eN764YoFdzxC3LK7QKKAJ+EA9tkRH4dO2xk5WEETQ7r3MTexJXwIg9YgJG4wzAez
A405vrUIzcGaErRcz5gA1kDWSlrCc8kqNr5nHf3GqfmLs0k9KsBLhjueYsZ6l/kh
9zMhOed8KJaUGaJYRdKY3Ma367LzjQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAM6
AoYq1UtzaAPBbD+6kijaV79ZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNkI2MTM2MERBODExMUVGQUYyRUUyQTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPasMA0GCSqGSIb3DQEBCwUA
A4IBAQClUBtZLL+zw69cEDC7+i8TUX+WHTRr0eMnoviplwSgjuk57a9aTd7sUDTw
8AacVoFCb0CjKvaNJ5W51lZgUTv02ncS15ppzOgp+otNHTDYc1o5yP5T6gLE7C5y
NAFJOZ8JyeF/OCVuKClAfcYY4Co9El9LzVK8pBD0Pk+wMzEC0AsfsLDroz5eyINK
T+WdWc4zEvsYiPlF8xaumSTAcu8ZQ5k8Ga7+LVs0tFMXp+NIuEtDmUGc5GQov6Ul
0tohVH+7PCf6O5jUOrDpiJieMQapTcjzk3d3vd8PVkOsf1nsVNerIjSYDyS+MWUA
xyq3l2JGCflTmjbgFKL1flR785uI
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:10:35 2025 by rpki-client