Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBB924DED50211EFA4BDE7BA762E951A.roa
File: BBB924DED50211EFA4BDE7BA762E951A.roa (raw, json)
Hash identifier: 8BD96a1uxQfDLi3XciEpawo/4Wt3Ps2Llgmjebloses=
Subject key identifier: C3:BD:A7:29:06:09:CB:29:08:4E:99:89:61:34:9E:09:2E:94:94:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBB924DED50211EFA4BDE7BA762E951A.roa
Signing time: Fri 17 Jan 2025 18:41:59 +0000
ROA not before: Fri 17 Jan 2025 18:41:55 +0000
ROA not after: Fri 31 Jan 2025 18:41:55 +0000
asID: 39600
IP address blocks: 156.255.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68178 (0x10a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 18:41:55 2025 GMT
Not After : Jan 31 18:41:55 2025 GMT
Subject: CN=678aa477-69fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:68:74:20:fd:fa:cc:31:e7:a8:3a:1c:90:43:
15:2c:26:29:d2:56:3b:1d:46:f6:3f:7c:f4:eb:a0:
3f:1b:21:a4:05:66:95:1e:b8:f0:5a:35:da:ee:9c:
0d:22:ca:24:e6:5b:1d:ea:ed:61:5b:a9:70:1f:70:
ac:90:17:f9:6d:fe:cf:1b:63:0e:3e:10:df:bc:7a:
a3:e5:1c:07:82:9e:6d:ce:d1:c2:31:7a:76:a8:19:
12:32:ba:9e:d2:2f:3e:eb:7a:dd:68:a7:e0:d6:9c:
da:ac:3a:b3:8b:ea:5c:dd:34:30:be:2d:ca:ea:86:
a1:50:f5:f4:f9:09:48:04:1c:0a:5b:8d:f2:24:8d:
5f:2d:57:27:b9:c0:c5:eb:76:e1:84:e9:4e:a8:0a:
36:d2:f9:87:63:e8:e4:2c:03:f4:f0:98:7b:0d:14:
3a:a4:14:80:db:0b:89:da:fb:f1:53:cb:18:84:96:
11:39:a1:fb:2f:19:4e:b2:24:42:da:e0:5b:41:c9:
64:2b:2b:95:c7:46:5c:4c:7b:34:d2:97:5d:81:c2:
04:cc:2f:43:25:9d:7d:2f:4f:57:18:05:aa:a3:3c:
fe:eb:d3:62:9f:6f:d3:59:62:b9:73:89:64:71:6c:
55:92:a1:3a:e1:64:1a:f8:c1:ba:8b:0f:d5:95:7f:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BD:A7:29:06:09:CB:29:08:4E:99:89:61:34:9E:09:2E:94:94:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBB924DED50211EFA4BDE7BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.80.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:6c:14:b8:b7:83:a4:be:74:24:b8:b1:81:a5:70:88:45:d8:
7c:f6:67:21:3c:29:f6:1e:c1:49:71:41:88:b6:06:0a:96:04:
98:7a:7a:d0:ae:3a:b3:0c:46:66:88:0b:a0:45:55:c3:be:40:
51:b8:39:01:c2:9c:58:57:30:c3:39:47:03:85:07:72:5a:67:
37:39:72:1c:6a:fc:ed:2d:87:ed:57:e6:0e:11:ef:68:7b:27:
ec:81:55:00:37:0a:9b:08:a1:5c:93:85:c5:30:83:b7:84:ce:
87:99:6f:ba:8f:b3:41:df:e6:ab:48:0a:c8:5e:ac:45:e9:45:
eb:db:cc:b4:bc:85:8d:65:fa:4e:80:2b:cc:65:bc:9c:f4:62:
5d:d0:76:e0:fe:02:9d:97:9c:1a:2d:1b:a0:82:f2:54:8c:c4:
ae:e8:0d:fc:8f:1a:e6:e5:66:51:c7:63:f3:59:13:71:d5:9b:
29:d6:38:74:1e:e8:3e:4c:6b:2b:ce:45:44:a1:8d:30:5e:15:
5c:87:2a:87:33:bf:da:88:3d:6d:75:87:d0:1f:e9:d6:70:54:
52:78:c2:56:4c:b6:00:05:1f:8f:bb:5e:94:da:9d:ee:46:1e:
6f:a0:88:97:1f:e5:dc:10:9c:a5:29:24:61:63:6d:7c:5b:7f:
c0:11:e2:3c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQpSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MTg0MTU1WhcNMjUwMTMxMTg0MTU1WjAYMRYw
FAYDVQQDEw02NzhhYTQ3Ny02OWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7Wh0IP36zDHnqDockEMVLCYp0lY7HUb2P3z066A/GyGkBWaVHrjwWjXa
7pwNIsok5lsd6u1hW6lwH3CskBf5bf7PG2MOPhDfvHqj5RwHgp5tztHCMXp2qBkS
Mrqe0i8+63rdaKfg1pzarDqzi+pc3TQwvi3K6oahUPX0+QlIBBwKW43yJI1fLVcn
ucDF63bhhOlOqAo20vmHY+jkLAP08Jh7DRQ6pBSA2wuJ2vvxU8sYhJYROaH7LxlO
siRC2uBbQclkKyuVx0ZcTHs00pddgcIEzC9DJZ19L09XGAWqozz+69Nin2/TWWK5
c4lkcWxVkqE64WQa+MG6iw/VlX/LCwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMO9
pykGCcspCE6ZiWE0ngkulJTrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQkI5MjRERUQ1MDIxMUVGQTRCREU3QkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnP9QMA0GCSqGSIb3DQEBCwUA
A4IBAQCwbBS4t4OkvnQkuLGBpXCIRdh89mchPCn2HsFJcUGItgYKlgSYenrQrjqz
DEZmiAugRVXDvkBRuDkBwpxYVzDDOUcDhQdyWmc3OXIcavztLYftV+YOEe9oeyfs
gVUANwqbCKFck4XFMIO3hM6HmW+6j7NB3+arSArIXqxF6UXr28y0vIWNZfpOgCvM
Zbyc9GJd0Hbg/gKdl5waLRuggvJUjMSu6A38jxrm5WZRx2PzWRNx1Zsp1jh0Hug+
TGsrzkVEoY0wXhVchyqHM7/aiD1tdYfQH+nWcFRSeMJWTLYABR+Pu16U2p3uRh5v
oIiXH+XcEJylKSRhY218W3/AEeI8
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:31:43 2025 by rpki-client