Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B277CC30D8A011EFBD17B879762E951A.roa
File: B277CC30D8A011EFBD17B879762E951A.roa (raw, json)
Hash identifier: EacoYSOQy34E4YaoF6g+fE23xailhvZgicoQ90IRtb4=
Subject key identifier: 88:69:FB:5B:D5:E6:F0:DB:18:53:91:D6:71:2F:FB:AA:A4:CE:E3:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B277CC30D8A011EFBD17B879762E951A.roa
Signing time: Wed 22 Jan 2025 09:10:17 +0000
ROA not before: Wed 22 Jan 2025 09:10:13 +0000
ROA not after: Sun 09 Feb 2025 09:10:13 +0000
asID: 6079
IP address blocks: 156.237.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69225 (0x10e69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 22 09:10:13 2025 GMT
Not After : Feb 9 09:10:13 2025 GMT
Subject: CN=6790b5f9-2b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:5f:15:63:0f:5a:1f:92:c4:e4:e7:bf:28:
71:be:ae:72:71:dc:87:a7:3e:38:1e:05:3a:7f:3f:
5a:cd:f5:69:24:6d:ec:c4:22:a7:96:f7:9f:66:9a:
54:51:13:7b:91:46:24:1f:74:4c:39:ae:db:cf:33:
fd:a0:2f:be:3d:ec:af:8c:0d:05:be:45:30:84:ad:
10:6b:cc:16:90:50:fc:a5:cf:36:3d:0c:3d:60:f7:
78:2f:94:68:a3:92:b4:5c:ba:10:04:f6:ad:54:97:
cd:5f:8a:4e:2d:9c:f4:42:64:c3:47:a3:d3:1f:aa:
93:2b:e2:16:60:68:ed:91:1a:8f:b2:1a:47:7b:e0:
b8:b5:f3:a4:95:6f:45:b3:83:e3:27:45:99:33:33:
7f:e9:70:8d:16:8c:5b:ed:43:95:2f:46:b4:2f:97:
46:8a:fa:92:b7:02:07:2e:3b:01:83:93:d4:e8:96:
75:06:e8:0b:34:b6:30:4d:6f:33:e1:f6:1d:3d:99:
3a:1e:f7:3f:e3:fb:aa:f4:9e:63:5e:5c:81:19:05:
17:70:1b:4d:78:97:0b:8b:2f:70:80:c2:2b:9c:50:
ea:70:66:51:5c:8a:aa:cf:b0:59:9e:c3:a6:b9:3c:
9f:cc:d9:9e:3f:cd:ef:a9:11:34:87:18:c1:c9:41:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:69:FB:5B:D5:E6:F0:DB:18:53:91:D6:71:2F:FB:AA:A4:CE:E3:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B277CC30D8A011EFBD17B879762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.16.0/20
Signature Algorithm: sha256WithRSAEncryption
15:a8:98:05:a4:6a:93:9e:e5:c3:4e:02:2f:bf:e3:21:9d:bb:
63:ca:b4:30:6f:7e:bc:6a:0f:7b:b2:7b:89:ac:f8:0a:b3:06:
60:31:57:50:c8:81:a7:3e:a4:63:d7:17:34:c1:2c:2f:13:2f:
4a:a7:3a:da:d4:8f:2d:3b:f2:32:ac:eb:95:7f:ad:b5:ac:0c:
24:0d:f5:03:5f:23:fd:fd:46:bf:35:8b:0d:89:db:3f:dc:e8:
4f:f2:97:2b:c4:38:14:16:6f:5e:c9:32:f1:1a:53:c6:7f:d7:
8b:16:3c:44:ce:41:c1:66:61:87:0b:33:b8:ee:7d:ca:1e:e3:
fc:c9:32:c7:78:10:69:1d:5f:f3:01:5d:42:55:c3:81:09:17:
72:77:3d:f0:0b:38:76:21:a1:58:56:94:e4:6b:93:10:4d:cf:
5c:38:ad:16:76:77:6d:2f:60:f5:56:3c:61:dc:cd:b5:aa:f2:
9d:25:2f:7c:40:5d:81:61:1c:39:48:84:40:9d:85:85:65:6e:
c5:e9:5e:8a:a0:9a:46:4d:26:c3:b1:a4:59:8a:e6:8b:56:5c:
c8:4d:f3:a6:8e:5e:66:1b:55:fe:07:3b:df:9c:f3:c4:51:8a:
df:f1:57:2f:a3:48:9e:46:71:76:14:53:39:c6:80:7b:ec:8e:
c1:f5:6f:d5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ5pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIyMDkxMDEzWhcNMjUwMjA5MDkxMDEzWjAYMRYw
FAYDVQQDEw02NzkwYjVmOS0yYjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvcZfFWMPWh+SxOTnvyhxvq5ycdyHpz44HgU6fz9azfVpJG3sxCKnlvef
ZppUURN7kUYkH3RMOa7bzzP9oC++PeyvjA0FvkUwhK0Qa8wWkFD8pc82PQw9YPd4
L5Roo5K0XLoQBPatVJfNX4pOLZz0QmTDR6PTH6qTK+IWYGjtkRqPshpHe+C4tfOk
lW9Fs4PjJ0WZMzN/6XCNFoxb7UOVL0a0L5dGivqStwIHLjsBg5PU6JZ1BugLNLYw
TW8z4fYdPZk6Hvc/4/uq9J5jXlyBGQUXcBtNeJcLiy9wgMIrnFDqcGZRXIqqz7BZ
nsOmuTyfzNmeP83vqRE0hxjByUEbEQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIhp
+1vV5vDbGFOR1nEv+6qkzuPIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMjc3Q0MzMEQ4QTAxMUVGQkQxN0I4Nzk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnO0QMA0GCSqGSIb3DQEBCwUA
A4IBAQAVqJgFpGqTnuXDTgIvv+MhnbtjyrQwb368ag97snuJrPgKswZgMVdQyIGn
PqRj1xc0wSwvEy9Kpzra1I8tO/IyrOuVf621rAwkDfUDXyP9/Ua/NYsNids/3OhP
8pcrxDgUFm9eyTLxGlPGf9eLFjxEzkHBZmGHCzO47n3KHuP8yTLHeBBpHV/zAV1C
VcOBCRdydz3wCzh2IaFYVpTka5MQTc9cOK0WdndtL2D1Vjxh3M21qvKdJS98QF2B
YRw5SIRAnYWFZW7F6V6KoJpGTSbDsaRZiuaLVlzITfOmjl5mG1X+BzvfnPPEUYrf
8Vcvo0ieRnF2FFM5xoB77I7B9W/V
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:53:43 2025 by rpki-client