Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B30280F6DAF211EF8A0BEAA5762E951A.roa
File: B30280F6DAF211EF8A0BEAA5762E951A.roa (raw, json)
Hash identifier: JP10kulxJkOgw7BuXIqyPwp6IaZqSyobMJBPfB3xTFQ=
Subject key identifier: 27:7F:60:27:FF:B8:ED:51:1C:73:C7:27:94:72:F1:A0:47:7E:88:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01115D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B30280F6DAF211EF8A0BEAA5762E951A.roa
Signing time: Sat 25 Jan 2025 08:02:19 +0000
ROA not before: Sat 25 Jan 2025 08:02:16 +0000
ROA not after: Fri 07 Feb 2025 08:02:16 +0000
asID: 5065
IP address blocks: 156.229.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69981 (0x1115d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:02:16 2025 GMT
Not After : Feb 7 08:02:16 2025 GMT
Subject: CN=67949a8b-5570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:dc:a0:6c:1f:2b:a4:19:48:bf:e5:64:c7:
bc:99:4f:40:37:11:34:ff:c1:9b:29:ef:17:58:6e:
de:57:99:0d:06:02:2f:31:3c:8e:34:d3:36:b1:bc:
65:1b:7f:20:e4:71:96:71:16:6d:59:93:61:f0:17:
2e:d2:74:66:93:e4:c8:35:17:8b:7e:e7:59:60:d6:
28:89:d6:75:19:85:5c:eb:f7:69:c7:07:3c:2f:c2:
a3:d8:c6:87:7e:1a:e1:d3:9d:15:85:5b:62:11:35:
0c:52:de:69:6e:4a:f5:59:41:a8:19:39:ba:6c:47:
9b:5d:83:7f:35:b6:68:44:af:56:7d:55:59:fc:55:
43:6a:96:d6:33:9b:76:1f:3b:e5:dd:24:43:28:b3:
1f:aa:5a:b0:40:19:54:e4:7f:d6:74:8d:a4:db:bd:
2d:16:23:c8:54:7e:e1:0d:a4:7e:89:31:da:27:c7:
c3:e7:ac:39:49:5a:17:01:48:fb:af:77:92:b7:5e:
4e:56:6a:db:9c:64:29:fe:40:fc:95:03:ef:2e:70:
65:91:fc:41:41:2f:3e:7f:cc:c3:be:08:92:8a:e0:
d6:c6:0a:87:88:2a:e4:de:5b:34:17:d4:b7:c4:1a:
d4:95:cb:04:e0:83:db:17:14:4d:96:36:ae:41:f0:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7F:60:27:FF:B8:ED:51:1C:73:C7:27:94:72:F1:A0:47:7E:88:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B30280F6DAF211EF8A0BEAA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.61.0/24
Signature Algorithm: sha256WithRSAEncryption
08:04:c9:b4:48:cf:f7:0f:82:ad:3b:07:27:43:72:be:07:eb:
b7:4f:2a:23:d7:39:ae:d9:df:5e:6c:b2:65:92:c5:52:d3:9b:
a7:e0:d6:27:92:c0:cd:e8:d8:bf:89:f0:a3:bc:7d:01:82:05:
89:61:6f:31:45:34:35:70:f8:6d:f2:cf:76:c5:75:06:d0:fe:
d6:08:87:fc:68:82:42:28:e6:59:2a:b2:01:6b:fc:a6:2e:1a:
14:da:c1:2c:0d:b5:3e:f8:31:9d:d8:be:40:bd:7f:5d:a2:6a:
0e:d2:98:ec:39:2e:1b:31:49:0a:67:76:dd:0c:99:4b:07:78:
fb:0b:56:73:ed:a1:c0:50:f9:93:af:58:3e:12:f8:01:f6:24:
b2:f4:e0:f0:03:66:ea:20:e7:23:fd:12:b1:d6:d2:fa:20:07:
04:9f:14:70:04:cd:4f:7d:fe:9a:56:c9:c0:2c:ac:04:5d:f3:
ea:a9:ef:70:2e:c3:0a:bf:a3:cf:00:24:0c:6f:5e:72:f5:7a:
d5:7d:60:33:85:e7:9c:93:09:21:47:37:c1:47:5c:69:52:5c:
6b:b5:3e:bd:29:51:22:5a:2c:c9:d6:6c:aa:bf:78:09:9e:9b:
8c:01:10:3a:eb:e9:c4:14:9e:4b:2b:b2:9a:a8:b4:bc:85:c1:
12:c1:a0:e2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARFdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MDgwMjE2WhcNMjUwMjA3MDgwMjE2WjAYMRYw
FAYDVQQDEw02Nzk0OWE4Yi01NTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyJTcoGwfK6QZSL/lZMe8mU9ANxE0/8GbKe8XWG7eV5kNBgIvMTyONNM2
sbxlG38g5HGWcRZtWZNh8Bcu0nRmk+TINReLfudZYNYoidZ1GYVc6/dpxwc8L8Kj
2MaHfhrh050VhVtiETUMUt5pbkr1WUGoGTm6bEebXYN/NbZoRK9WfVVZ/FVDapbW
M5t2Hzvl3SRDKLMfqlqwQBlU5H/WdI2k270tFiPIVH7hDaR+iTHaJ8fD56w5SVoX
AUj7r3eSt15OVmrbnGQp/kD8lQPvLnBlkfxBQS8+f8zDvgiSiuDWxgqHiCrk3ls0
F9S3xBrUlcsE4IPbFxRNljauQfCpzwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCd/
YCf/uO1RHHPHJ5Ry8aBHfohUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMzAyODBGNkRBRjIxMUVGOEEwQkVBQTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOU9MA0GCSqGSIb3DQEBCwUA
A4IBAQAIBMm0SM/3D4KtOwcnQ3K+B+u3Tyoj1zmu2d9ebLJlksVS05un4NYnksDN
6Ni/ifCjvH0BggWJYW8xRTQ1cPht8s92xXUG0P7WCIf8aIJCKOZZKrIBa/ymLhoU
2sEsDbU++DGd2L5AvX9domoO0pjsOS4bMUkKZ3bdDJlLB3j7C1Zz7aHAUPmTr1g+
EvgB9iSy9ODwA2bqIOcj/RKx1tL6IAcEnxRwBM1Pff6aVsnALKwEXfPqqe9wLsMK
v6PPACQMb15y9XrVfWAzheeckwkhRzfBR1xpUlxrtT69KVEiWizJ1myqv3gJnpuM
ARA66+nEFJ5LK7KaqLS8hcESwaDi
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:03 2025 by rpki-client