Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF1FA42EDA6E11EFA07785A4762E951A.roa
File: BF1FA42EDA6E11EFA07785A4762E951A.roa (raw, json)
Hash identifier: V3jS/H72pATAc/0vUtGY8pXG+pLlJUmIYCYHeSy5Gsg=
Subject key identifier: A5:90:4F:74:6D:B4:A8:7E:B0:40:FE:E0:17:66:C3:86:0A:37:B8:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF1FA42EDA6E11EFA07785A4762E951A.roa
Signing time: Fri 24 Jan 2025 16:17:46 +0000
ROA not before: Fri 24 Jan 2025 16:17:42 +0000
ROA not after: Mon 03 Mar 2025 16:17:42 +0000
asID: 203020
IP address blocks: 156.235.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69538 (0x10fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 16:17:42 2025 GMT
Not After : Mar 3 16:17:42 2025 GMT
Subject: CN=6793bd2a-6cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:05:32:a6:dc:8e:0c:64:81:05:b1:5c:eb:
14:6d:9d:5c:05:05:95:e6:a3:9e:a5:27:7e:71:26:
82:02:09:b2:8c:7e:12:bf:fe:c8:ec:8d:f9:78:23:
01:65:85:31:77:44:6c:bc:5b:ed:28:34:f6:45:10:
a9:c1:b6:9e:98:0a:84:8c:5e:5d:9d:54:58:1c:74:
61:8e:3f:fe:bc:d0:94:b3:44:bc:c7:f0:f6:5d:50:
3f:d3:37:fe:f6:15:58:94:29:d4:76:3f:03:f2:b6:
8a:71:ac:76:82:9b:32:34:79:90:c4:01:68:a5:18:
06:d6:eb:8c:eb:c7:8f:ff:d4:e8:e1:f3:71:aa:a9:
ac:0f:3c:1e:8a:96:65:99:ca:5b:5b:70:ba:85:f1:
f9:0b:71:71:7b:b1:17:9f:03:96:00:2f:b6:24:c1:
b9:3b:2a:44:13:9d:44:f7:8a:25:61:20:3b:14:4f:
ef:10:ae:27:9c:3c:a6:6e:30:8c:89:26:5a:56:db:
ad:9d:32:31:b6:34:17:81:db:26:6c:a8:4d:1b:71:
be:d5:58:27:88:63:c4:5c:71:7e:40:be:60:bc:46:
b9:19:62:26:99:99:77:e3:b3:9a:1e:20:42:43:44:
a8:be:e8:df:56:cd:81:ef:f6:e9:59:15:c8:e9:c6:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:90:4F:74:6D:B4:A8:7E:B0:40:FE:E0:17:66:C3:86:0A:37:B8:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF1FA42EDA6E11EFA07785A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.32.0/20
Signature Algorithm: sha256WithRSAEncryption
87:f3:21:6a:24:91:07:34:a1:64:9b:ed:d6:1e:86:72:d0:4c:
7f:e5:c4:92:bd:8b:7d:06:d9:d0:71:57:63:65:f3:14:d3:d0:
b0:c6:4e:22:7d:da:7a:31:b4:99:06:0e:6a:11:d1:f9:35:29:
cf:21:7c:fc:03:68:2d:8e:12:64:ce:2d:c7:99:48:a9:b2:46:
15:b5:cd:49:27:7c:77:80:ee:29:05:ef:b9:d9:3f:66:50:36:
fd:dd:f5:92:61:d5:c7:74:3e:10:b1:7c:0e:8e:4a:fe:01:b8:
3d:9c:e1:c4:94:ac:07:66:00:c6:47:08:6c:be:be:c8:ee:8a:
21:96:08:67:43:a4:64:a2:89:6d:05:6f:c8:19:6d:84:b5:12:
79:13:ec:f1:7c:68:45:8a:4b:bc:19:82:44:fb:36:02:a0:6e:
4d:5d:81:98:70:bc:7d:33:a8:1b:1c:75:70:69:0c:9f:c3:5c:
68:6b:db:2c:c7:ac:3d:be:4a:16:c1:dc:e5:6d:fd:94:21:0d:
3f:0f:24:9b:bd:42:49:66:74:b0:80:51:bd:ba:75:50:84:f7:
d3:8e:f0:3e:2b:b1:aa:3e:fc:c5:83:f7:fb:28:d9:2d:da:9f:
ee:7e:7f:9f:12:31:99:71:a4:c3:89:40:24:05:63:5a:5b:a9:
f1:b0:06:fa
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ+iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MTYxNzQyWhcNMjUwMzAzMTYxNzQyWjAYMRYw
FAYDVQQDEw02NzkzYmQyYS02Y2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnvwFMqbcjgxkgQWxXOsUbZ1cBQWV5qOepSd+cSaCAgmyjH4Sv/7I7I35
eCMBZYUxd0RsvFvtKDT2RRCpwbaemAqEjF5dnVRYHHRhjj/+vNCUs0S8x/D2XVA/
0zf+9hVYlCnUdj8D8raKcax2gpsyNHmQxAFopRgG1uuM68eP/9To4fNxqqmsDzwe
ipZlmcpbW3C6hfH5C3Fxe7EXnwOWAC+2JMG5OypEE51E94olYSA7FE/vEK4nnDym
bjCMiSZaVtutnTIxtjQXgdsmbKhNG3G+1VgniGPEXHF+QL5gvEa5GWImmZl347Oa
HiBCQ0SovujfVs2B7/bpWRXI6cZdJwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKWQ
T3RttKh+sED+4Bdmw4YKN7jCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRjFGQTQyRURBNkUxMUVGQTA3Nzg1QTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOsgMA0GCSqGSIb3DQEBCwUA
A4IBAQCH8yFqJJEHNKFkm+3WHoZy0Ex/5cSSvYt9BtnQcVdjZfMU09Cwxk4ifdp6
MbSZBg5qEdH5NSnPIXz8A2gtjhJkzi3HmUipskYVtc1JJ3x3gO4pBe+52T9mUDb9
3fWSYdXHdD4QsXwOjkr+Abg9nOHElKwHZgDGRwhsvr7I7oohlghnQ6RkooltBW/I
GW2EtRJ5E+zxfGhFiku8GYJE+zYCoG5NXYGYcLx9M6gbHHVwaQyfw1xoa9ssx6w9
vkoWwdzlbf2UIQ0/DySbvUJJZnSwgFG9unVQhPfTjvA+K7GqPvzFg/f7KNkt2p/u
fn+fEjGZcaTDiUAkBWNaW6nxsAb6
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:18:00 2025 by rpki-client