Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C15F622EDCD011EF86036BB4762E951A.roa
File: C15F622EDCD011EF86036BB4762E951A.roa (raw, json)
Hash identifier: /3GX/9dn6+nEsSjqwciXdCTL030UhbIR5RYmSATJ1xQ=
Subject key identifier: 66:0F:99:6E:B6:CB:46:07:69:CB:FA:0D:57:35:44:39:F6:CD:ED:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011543
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C15F622EDCD011EF86036BB4762E951A.roa
Signing time: Mon 27 Jan 2025 17:04:23 +0000
ROA not before: Mon 27 Jan 2025 17:04:19 +0000
ROA not after: Sat 15 Feb 2025 17:04:19 +0000
asID: 39600
IP address blocks: 156.237.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70979 (0x11543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:04:19 2025 GMT
Not After : Feb 15 17:04:19 2025 GMT
Subject: CN=6797bc97-7f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:3a:18:6b:e4:f2:da:3e:19:fa:42:85:5f:
76:f5:e9:8c:60:3d:24:d6:17:2f:06:43:7d:8a:79:
7a:41:64:39:65:9e:95:79:e3:2f:23:38:66:d7:b9:
ee:33:d1:42:8d:3b:9f:96:8d:10:7e:8d:a6:3c:0c:
85:dc:77:74:6a:be:72:38:4d:2b:31:6a:f3:2e:37:
bf:6f:78:6e:3f:5b:97:2e:ab:53:ba:f9:96:4f:81:
d6:ab:38:4a:07:66:2b:84:63:61:1d:39:cd:d2:25:
a1:6a:9a:1f:bc:01:12:42:8c:86:6f:fe:e0:58:e9:
00:df:03:7a:7c:4e:17:87:ac:13:99:f9:0e:5d:87:
ed:b0:11:99:45:bb:c6:19:c7:c9:51:ae:5e:ed:89:
e7:25:05:71:a1:0f:95:d2:37:25:f8:8f:27:78:e5:
09:2a:77:a4:96:5d:93:6f:b3:38:12:10:06:9a:8f:
0a:c3:e0:4e:b6:4d:65:47:11:f7:33:5f:95:bd:4d:
2a:85:db:f4:da:43:d7:63:a2:bf:03:3e:4e:de:e0:
2e:26:e2:a2:07:26:33:45:5b:8b:bf:f3:ba:b4:39:
ef:30:f6:48:ee:cc:c7:cf:3e:c5:35:f2:1f:2d:c1:
2f:d3:61:b6:06:71:21:70:9e:ec:17:d4:ad:69:a1:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:99:6E:B6:CB:46:07:69:CB:FA:0D:57:35:44:39:F6:CD:ED:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C15F622EDCD011EF86036BB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:0f:08:34:99:f7:d5:6f:66:75:49:1e:32:14:fe:62:8e:98:
01:04:99:62:f4:7b:28:b1:b0:db:9b:3a:f2:21:f2:3d:14:42:
69:8a:66:5f:f1:8c:44:fd:4e:cc:ed:63:c0:c8:5b:e9:ae:fa:
63:2d:4b:c8:05:5a:87:66:ea:47:59:17:35:f7:59:c3:c2:de:
bf:f7:eb:64:0f:87:a1:8e:b1:2c:c6:0c:00:90:e8:ae:b1:87:
f4:c4:c0:f9:04:ea:f2:aa:ea:1b:76:c3:b1:0c:11:be:74:93:
44:71:25:f6:bc:c8:3c:7c:39:70:cd:4e:05:65:27:a2:0e:25:
1a:69:19:6e:8e:0d:a0:30:c4:cc:cc:8a:8c:da:ed:a1:8b:b0:
ed:00:80:0f:81:e7:10:8d:27:62:df:79:23:b0:e7:92:bf:bd:
c8:5c:8e:9b:9f:92:56:b7:1a:2a:25:dd:05:b0:49:01:c5:26:
0f:6b:b6:3f:f4:be:b9:6e:06:e0:60:fe:6e:77:58:a8:4d:00:
55:6f:1b:f1:63:c5:be:69:d5:39:bb:6a:38:16:0a:2d:18:70:
9f:9f:a0:0e:7e:a9:49:2a:81:eb:b5:ce:d9:52:4c:03:d6:6a:
1c:4b:31:25:91:66:c9:9b:3a:b5:20:be:1a:2e:f9:f5:9d:4f:
79:53:07:02
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARVDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI3MTcwNDE5WhcNMjUwMjE1MTcwNDE5WjAYMRYw
FAYDVQQDEw02Nzk3YmM5Ny03ZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAskQ6GGvk8to+GfpChV929emMYD0k1hcvBkN9inl6QWQ5ZZ6VeeMvIzhm
17nuM9FCjTuflo0Qfo2mPAyF3Hd0ar5yOE0rMWrzLje/b3huP1uXLqtTuvmWT4HW
qzhKB2YrhGNhHTnN0iWhapofvAESQoyGb/7gWOkA3wN6fE4Xh6wTmfkOXYftsBGZ
RbvGGcfJUa5e7YnnJQVxoQ+V0jcl+I8neOUJKnekll2Tb7M4EhAGmo8Kw+BOtk1l
RxH3M1+VvU0qhdv02kPXY6K/Az5O3uAuJuKiByYzRVuLv/O6tDnvMPZI7szHzz7F
NfIfLcEv02G2BnEhcJ7sF9StaaGSwQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGYP
mW62y0YHacv6DVc1RDn2ze3TMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMTVGNjIyRURDRDAxMUVGODYwMzZCQjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO1qMA0GCSqGSIb3DQEBCwUA
A4IBAQCgDwg0mffVb2Z1SR4yFP5ijpgBBJli9HsosbDbmzryIfI9FEJpimZf8YxE
/U7M7WPAyFvprvpjLUvIBVqHZupHWRc191nDwt6/9+tkD4ehjrEsxgwAkOiusYf0
xMD5BOryquobdsOxDBG+dJNEcSX2vMg8fDlwzU4FZSeiDiUaaRlujg2gMMTMzIqM
2u2hi7DtAIAPgecQjSdi33kjsOeSv73IXI6bn5JWtxoqJd0FsEkBxSYPa7Y/9L65
bgbgYP5ud1ioTQBVbxvxY8W+adU5u2o4FgotGHCfn6AOfqlJKoHrtc7ZUkwD1moc
SzElkWbJmzq1IL4aLvn1nU95UwcC
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:45:18 2025 by rpki-client