Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB5FB6D4DB1A11EFB52305B0762E951A.roa
File: AB5FB6D4DB1A11EFB52305B0762E951A.roa (raw, json)
Hash identifier: +LeUpLGdx4zS1fBlqxd0fqiSOx7E4JRHHNskj6cX9q8=
Subject key identifier: A2:93:E5:4A:3B:57:E6:37:6B:A0:F6:1A:1E:43:35:D6:1E:7B:F3:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011255
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB5FB6D4DB1A11EFB52305B0762E951A.roa
Signing time: Sat 25 Jan 2025 12:48:26 +0000
ROA not before: Sat 25 Jan 2025 12:48:23 +0000
ROA not after: Sat 01 Feb 2025 12:48:23 +0000
asID: 398704
IP address blocks: 156.245.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70229 (0x11255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 12:48:23 2025 GMT
Not After : Feb 1 12:48:23 2025 GMT
Subject: CN=6794dd9a-6c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:21:8b:14:b6:06:8a:e3:bb:cb:cb:73:c6:
a8:89:1a:c2:9c:f3:88:12:d0:8e:52:02:15:ac:bb:
fd:09:3a:4b:c7:e3:e3:19:f2:e1:2b:60:a0:af:aa:
18:d7:b4:28:4c:44:59:d9:eb:de:55:b0:ed:92:93:
67:39:b0:2b:99:de:c5:a2:87:21:73:78:52:22:f8:
5d:e7:b9:43:f7:21:ad:c4:6d:c7:68:2f:7b:3d:ab:
86:ff:06:6c:57:88:83:84:3b:07:4c:a1:bc:92:fb:
70:65:80:c0:49:11:a7:08:d4:ec:ee:eb:e6:b8:59:
73:28:31:63:27:49:2d:70:7d:ab:00:55:0f:77:c5:
01:b3:e0:00:55:74:84:91:52:3c:d0:68:f9:a0:74:
2f:ef:e3:a7:4a:82:75:15:a8:64:47:18:6b:c8:e9:
64:d4:42:98:74:95:88:29:ac:11:15:b3:d5:2a:fa:
5a:09:65:d3:88:17:89:74:b8:de:c2:06:d7:2a:7b:
39:4d:3b:3c:36:2d:7b:4b:d6:0b:16:88:3a:0c:76:
0d:18:97:f9:20:38:38:b2:cd:a9:fa:74:65:04:3d:
40:c0:60:1e:f7:3b:a6:51:eb:09:af:58:24:85:c6:
b6:2b:13:9b:b0:31:98:09:f0:e7:7b:73:25:16:36:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:93:E5:4A:3B:57:E6:37:6B:A0:F6:1A:1E:43:35:D6:1E:7B:F3:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB5FB6D4DB1A11EFB52305B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.244.0/22
Signature Algorithm: sha256WithRSAEncryption
63:31:c1:95:4b:76:16:cc:6c:c5:83:73:ac:ff:72:77:90:8d:
9f:10:e5:d4:50:2d:f6:a0:49:4a:c4:c5:97:55:5c:fd:68:ba:
0e:f2:4c:c2:d1:65:c1:a7:de:31:5a:23:59:0c:67:01:0e:a0:
8a:d3:71:c3:a0:c3:d1:ef:e0:f7:a3:09:34:a9:ca:54:2e:c4:
bd:78:ea:fb:0a:74:fb:75:3c:97:ab:5e:3e:13:68:32:5b:e2:
c3:fe:00:9f:9c:af:f7:09:3e:12:00:f2:20:63:71:88:c3:e1:
6c:1b:83:bd:b8:77:9c:3c:97:53:1a:b6:b0:50:23:7f:2c:3c:
f6:0e:b9:c7:cc:bc:2b:2e:d6:0e:40:37:35:26:3d:f2:7f:cb:
65:5f:9d:fc:55:12:36:89:78:85:f7:e8:72:94:e8:8a:30:f9:
5d:f0:b8:ce:88:91:b6:4f:68:48:4f:a7:2f:4e:99:19:e0:a1:
ac:19:58:21:39:19:4c:27:70:30:22:21:e9:51:e8:80:a2:83:
fb:5c:6b:2f:e4:bc:12:c5:22:32:f7:c4:bb:59:48:70:a1:9f:
65:4d:c6:3b:89:45:03:d7:7e:95:e6:fb:fe:92:8e:74:11:2d:
ba:da:5f:74:13:61:7d:88:48:81:98:1c:83:95:21:42:4a:77:
0e:b9:25:31
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARJVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTI0ODIzWhcNMjUwMjAxMTI0ODIzWjAYMRYw
FAYDVQQDEw02Nzk0ZGQ5YS02Yzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApCshixS2Borju8vLc8aoiRrCnPOIEtCOUgIVrLv9CTpLx+PjGfLhK2Cg
r6oY17QoTERZ2eveVbDtkpNnObArmd7Foochc3hSIvhd57lD9yGtxG3HaC97PauG
/wZsV4iDhDsHTKG8kvtwZYDASRGnCNTs7uvmuFlzKDFjJ0ktcH2rAFUPd8UBs+AA
VXSEkVI80Gj5oHQv7+OnSoJ1FahkRxhryOlk1EKYdJWIKawRFbPVKvpaCWXTiBeJ
dLjewgbXKns5TTs8Ni17S9YLFog6DHYNGJf5IDg4ss2p+nRlBD1AwGAe9zumUesJ
r1gkhca2KxObsDGYCfDne3MlFjav8wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKKT
5Uo7V+Y3a6D2Gh5DNdYee/M6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQjVGQjZENERCMUExMUVGQjUyMzA1QjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPX0MA0GCSqGSIb3DQEBCwUA
A4IBAQBjMcGVS3YWzGzFg3Os/3J3kI2fEOXUUC32oElKxMWXVVz9aLoO8kzC0WXB
p94xWiNZDGcBDqCK03HDoMPR7+D3owk0qcpULsS9eOr7CnT7dTyXq14+E2gyW+LD
/gCfnK/3CT4SAPIgY3GIw+FsG4O9uHecPJdTGrawUCN/LDz2DrnHzLwrLtYOQDc1
Jj3yf8tlX538VRI2iXiF9+hylOiKMPld8LjOiJG2T2hIT6cvTpkZ4KGsGVghORlM
J3AwIiHpUeiAooP7XGsv5LwSxSIy98S7WUhwoZ9lTcY7iUUD136V5vv+ko50ES26
2l90E2F9iEiBmByDlSFCSncOuSUx
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:44:58 2025 by rpki-client