Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD7305D6DCB211EFAE7AF16C762E951A.roa
File: AD7305D6DCB211EFAE7AF16C762E951A.roa (raw, json)
Hash identifier: g35moMkeEPVRSYkULD3DdKm8SUlWxubvHunl8YR9zJQ=
Subject key identifier: 3F:85:0D:9D:EE:5D:76:D4:D0:AA:A3:A8:BA:3A:16:13:CE:48:61:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01150F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD7305D6DCB211EFAE7AF16C762E951A.roa
Signing time: Mon 27 Jan 2025 13:29:04 +0000
ROA not before: Mon 27 Jan 2025 13:29:01 +0000
ROA not after: Sat 08 Feb 2025 13:29:01 +0000
asID: 22773
IP address blocks: 156.238.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70927 (0x1150f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 13:29:01 2025 GMT
Not After : Feb 8 13:29:01 2025 GMT
Subject: CN=67978a20-65d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:2c:73:74:e9:95:3e:db:27:06:94:72:f6:
3f:a7:56:d0:61:dc:1a:a3:d9:92:4c:fe:f6:35:4a:
49:2c:fe:93:01:ee:86:42:c4:60:a7:0c:44:aa:cb:
0f:39:e7:65:c2:cc:2f:17:3c:f7:92:cb:00:2b:53:
2c:dd:74:fa:72:96:07:15:d3:ef:fe:da:c4:f5:11:
a4:4f:9b:bf:70:d9:06:2b:16:9d:64:dc:c6:13:3b:
ea:59:78:bb:44:dd:e2:32:c8:93:77:6a:44:81:4b:
ec:01:ca:6f:d4:ff:27:65:64:16:68:03:5f:0a:32:
11:a5:22:33:50:db:74:78:96:50:09:e1:d6:ba:7d:
a0:25:72:53:f1:7a:23:3e:81:e9:39:0b:38:ae:f4:
6f:40:15:c6:fa:92:a4:fa:fb:ab:f0:68:ff:7e:24:
a1:ed:35:c5:6f:60:49:62:aa:16:2b:09:8f:92:18:
d5:66:9a:89:85:dd:cc:e5:10:4b:69:c2:9e:0c:f1:
53:31:3a:83:d9:57:ec:22:ec:a0:8b:03:45:26:94:
81:8b:c3:2a:c5:dc:86:0a:dc:9b:5e:a0:12:bc:f1:
36:94:8f:73:a5:f6:fd:3a:22:0c:60:80:ca:84:fa:
c5:b6:6f:65:86:89:d2:0a:eb:72:ca:22:4b:26:7d:
33:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:85:0D:9D:EE:5D:76:D4:D0:AA:A3:A8:BA:3A:16:13:CE:48:61:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD7305D6DCB211EFAE7AF16C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.144.0/20
Signature Algorithm: sha256WithRSAEncryption
07:13:fb:ae:8f:b9:31:b5:77:5e:1f:51:ae:30:dd:50:85:f3:
1e:0b:b0:e0:47:47:c3:58:ee:99:41:96:27:9c:05:b8:eb:9a:
81:d3:f0:30:d0:36:4e:44:1e:2e:35:c9:2e:e9:b4:f0:d2:b2:
50:43:e4:ad:cd:7e:49:e5:6e:62:a0:f1:a4:b8:fc:ae:33:a9:
13:29:0b:eb:25:23:c9:cd:d5:7f:91:52:05:3d:68:5c:19:4b:
04:76:d4:fe:98:4f:f9:5e:17:a4:2e:ac:47:cf:78:60:11:4b:
eb:f2:40:7c:68:34:a3:a5:ec:0c:8d:82:0e:05:2e:a4:05:be:
03:7c:a6:7c:cd:f7:88:c2:7b:f9:97:4f:4f:21:f8:c4:75:02:
99:2c:03:1e:fd:5c:2b:6e:90:9f:00:c1:a1:37:f2:9f:4c:83:
e2:59:fc:ba:44:75:d6:4e:ad:9f:cd:9a:b1:18:47:e4:cc:6b:
9c:86:46:98:b1:3f:48:0b:7e:32:bb:4a:71:a4:1c:17:3d:70:
e4:47:08:36:10:e2:f0:28:72:d1:2b:c2:11:a8:97:a1:b2:67:
ac:39:67:40:41:ac:dc:7d:f2:0a:dc:48:ef:b4:82:fd:10:fc:
3c:e3:68:74:3a:e4:cb:13:e1:36:d2:15:9d:58:f8:bd:65:09:
43:b8:25:f5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARUPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MTMyOTAxWhcNMjUwMjA4MTMyOTAxWjAYMRYw
FAYDVQQDEw02Nzk3OGEyMC02NWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApbksc3TplT7bJwaUcvY/p1bQYdwao9mSTP72NUpJLP6TAe6GQsRgpwxE
qssPOedlwswvFzz3kssAK1Ms3XT6cpYHFdPv/trE9RGkT5u/cNkGKxadZNzGEzvq
WXi7RN3iMsiTd2pEgUvsAcpv1P8nZWQWaANfCjIRpSIzUNt0eJZQCeHWun2gJXJT
8XojPoHpOQs4rvRvQBXG+pKk+vur8Gj/fiSh7TXFb2BJYqoWKwmPkhjVZpqJhd3M
5RBLacKeDPFTMTqD2VfsIuygiwNFJpSBi8MqxdyGCtybXqASvPE2lI9zpfb9OiIM
YIDKhPrFtm9lhonSCutyyiJLJn0zMwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD+F
DZ3uXXbU0KqjqLo6FhPOSGEWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRDczMDVENkRDQjIxMUVGQUU3QUYxNkM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnO6QMA0GCSqGSIb3DQEBCwUA
A4IBAQAHE/uuj7kxtXdeH1GuMN1QhfMeC7DgR0fDWO6ZQZYnnAW465qB0/Aw0DZO
RB4uNcku6bTw0rJQQ+StzX5J5W5ioPGkuPyuM6kTKQvrJSPJzdV/kVIFPWhcGUsE
dtT+mE/5XhekLqxHz3hgEUvr8kB8aDSjpewMjYIOBS6kBb4DfKZ8zfeIwnv5l09P
IfjEdQKZLAMe/VwrbpCfAMGhN/KfTIPiWfy6RHXWTq2fzZqxGEfkzGuchkaYsT9I
C34yu0pxpBwXPXDkRwg2EOLwKHLRK8IRqJehsmesOWdAQazcffIK3EjvtIL9EPw8
42h0OuTLE+E20hWdWPi9ZQlDuCX1
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:29 2025 by rpki-client