Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC37AD80DA7611EFB66D9958762E951A.roa
File: BC37AD80DA7611EFB66D9958762E951A.roa (raw, json)
Hash identifier: k7BuPSI/lZ3+1fAyWCXBnVHPjTN6nk9cj2RnBFU5egM=
Subject key identifier: 5D:B4:F2:D2:81:FB:FF:1A:BE:E2:FC:16:F3:66:A6:E3:41:25:A1:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FCC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC37AD80DA7611EFB66D9958762E951A.roa
Signing time: Fri 24 Jan 2025 17:14:57 +0000
ROA not before: Fri 24 Jan 2025 17:14:53 +0000
ROA not after: Tue 25 Feb 2025 17:14:53 +0000
asID: 44559
IP address blocks: 156.246.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69580 (0x10fcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 17:14:53 2025 GMT
Not After : Feb 25 17:14:53 2025 GMT
Subject: CN=6793ca91-0913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:c5:3d:11:f3:2f:25:f9:60:fa:95:e9:7b:
0a:ed:ce:be:bd:46:3b:03:d5:ea:ea:47:84:d1:0e:
bd:30:ed:63:85:7e:ed:ab:b0:45:4b:16:af:f4:3b:
88:91:d6:b8:66:dd:a9:f7:60:7e:a1:7d:eb:65:1d:
38:c4:58:31:66:52:54:04:c3:ef:92:45:24:7c:ad:
a1:1d:40:d1:d0:43:75:57:0e:f2:50:27:72:02:9a:
41:82:45:3e:4d:a2:ac:ac:74:b6:3f:e7:39:53:38:
db:1f:a1:86:3a:1e:c9:30:ee:3e:b2:a9:11:63:7f:
bb:b6:35:9f:57:46:69:fc:f0:55:22:29:21:2e:63:
7e:ee:b0:16:28:a2:87:e7:70:3e:b3:0d:05:88:cf:
50:1a:4a:cf:63:dc:a1:17:78:a6:60:6a:86:6f:82:
e9:2f:df:4f:6e:30:11:e5:9c:4d:d2:0d:0d:58:b3:
ed:3c:87:a3:88:ef:01:89:dc:d6:af:7a:f0:63:e2:
c7:8d:9c:69:84:2c:07:64:f5:bc:df:02:91:40:4a:
30:8c:31:42:bc:ec:3e:cd:99:8d:9f:b5:3f:11:e6:
29:1c:65:98:b2:f6:60:ef:d9:6f:8c:6d:1e:28:a3:
47:88:91:eb:dd:a4:ac:35:4e:69:73:78:56:83:e8:
e7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B4:F2:D2:81:FB:FF:1A:BE:E2:FC:16:F3:66:A6:E3:41:25:A1:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC37AD80DA7611EFB66D9958762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.185.0/24
Signature Algorithm: sha256WithRSAEncryption
89:16:63:bf:14:ea:40:18:52:99:aa:fb:c6:88:7e:35:ff:03:
3c:b5:a7:92:18:6b:b6:e8:c5:4b:34:26:16:51:6c:7f:d8:63:
6d:61:e2:6a:e7:8a:7a:59:76:c9:c4:92:eb:65:bb:9a:ab:aa:
14:f7:89:8a:ad:08:d2:9e:e5:9f:bb:cd:1e:ca:93:68:1b:43:
c9:51:9c:ae:53:95:f0:4c:a7:42:25:66:9e:c0:01:45:39:3d:
63:4f:51:81:25:5b:90:b6:5c:60:a0:d8:fa:6d:5e:c6:92:08:
7e:e2:4d:d6:52:55:55:0b:08:0a:16:04:2f:71:b1:04:8c:3a:
4e:d5:d4:26:b0:c4:ce:54:13:9f:25:1b:af:24:90:24:f4:b1:
1a:f9:c3:96:a7:37:a8:40:4f:43:49:b5:16:99:40:aa:9f:82:
99:0a:fa:a8:78:4c:63:4b:54:42:83:17:01:d6:d5:6d:12:f9:
a7:44:de:e4:0e:54:4b:70:a7:b9:7f:d1:19:e3:42:0e:f0:1e:
ab:26:55:a3:c5:53:19:c5:54:66:d0:c0:30:cc:b8:43:61:98:
76:61:3f:f3:cc:90:44:90:ec:74:13:d1:04:fc:56:b1:3a:d4:
5e:31:0f:e7:83:54:f6:68:03:87:cd:a7:70:1c:a2:4c:d8:26:
0e:3c:c6:88
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ/MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MTcxNDUzWhcNMjUwMjI1MTcxNDUzWjAYMRYw
FAYDVQQDEw02NzkzY2E5MS0wOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwnvFPRHzLyX5YPqV6XsK7c6+vUY7A9Xq6keE0Q69MO1jhX7tq7BFSxav
9DuIkda4Zt2p92B+oX3rZR04xFgxZlJUBMPvkkUkfK2hHUDR0EN1Vw7yUCdyAppB
gkU+TaKsrHS2P+c5UzjbH6GGOh7JMO4+sqkRY3+7tjWfV0Zp/PBVIikhLmN+7rAW
KKKH53A+sw0FiM9QGkrPY9yhF3imYGqGb4LpL99PbjAR5ZxN0g0NWLPtPIejiO8B
idzWr3rwY+LHjZxphCwHZPW83wKRQEowjDFCvOw+zZmNn7U/EeYpHGWYsvZg79lv
jG0eKKNHiJHr3aSsNU5pc3hWg+jn8wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF20
8tKB+/8avuL8FvNmpuNBJaGYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQzM3QUQ4MERBNzYxMUVGQjY2RDk5NTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPa5MA0GCSqGSIb3DQEBCwUA
A4IBAQCJFmO/FOpAGFKZqvvGiH41/wM8taeSGGu26MVLNCYWUWx/2GNtYeJq54p6
WXbJxJLrZbuaq6oU94mKrQjSnuWfu80eypNoG0PJUZyuU5XwTKdCJWaewAFFOT1j
T1GBJVuQtlxgoNj6bV7Gkgh+4k3WUlVVCwgKFgQvcbEEjDpO1dQmsMTOVBOfJRuv
JJAk9LEa+cOWpzeoQE9DSbUWmUCqn4KZCvqoeExjS1RCgxcB1tVtEvmnRN7kDlRL
cKe5f9EZ40IO8B6rJlWjxVMZxVRm0MAwzLhDYZh2YT/zzJBEkOx0E9EE/FaxOtRe
MQ/ng1T2aAOHzadwHKJM2CYOPMaI
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:56 2025 by rpki-client