Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C82149B6DE3C11EFB0A64F53762E951A.roa
File: C82149B6DE3C11EFB0A64F53762E951A.roa (raw, json)
Hash identifier: cQBu3dznzt8LhB2h46THgzSzfrq/rpg/yiFGljNVA/4=
Subject key identifier: AF:FB:C4:4D:82:8F:BD:7D:7B:65:71:0B:CF:78:41:E4:46:5E:12:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C82149B6DE3C11EFB0A64F53762E951A.roa
Signing time: Wed 29 Jan 2025 12:30:11 +0000
ROA not before: Wed 29 Jan 2025 12:30:06 +0000
ROA not after: Wed 05 Feb 2025 12:30:06 +0000
asID: 54801
IP address blocks: 156.229.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71085 (0x115ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 29 12:30:06 2025 GMT
Not After : Feb 5 12:30:06 2025 GMT
Subject: CN=679a1f53-2f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:de:2b:62:50:30:1d:9c:09:21:0a:13:0c:
c8:2c:c5:65:f2:9a:9c:a2:33:a2:64:2f:6c:71:5f:
0f:59:5b:e2:97:c0:df:b2:02:e9:3f:8c:67:35:f6:
53:16:46:5e:f2:1b:38:5d:b6:ef:13:4c:56:a6:f0:
8f:fa:53:5e:69:93:62:59:6d:b7:d7:7a:a8:60:1d:
cd:04:de:c5:5d:bd:d7:3d:ce:94:1d:b6:f2:e9:55:
af:d7:af:4f:77:09:2a:ed:00:43:22:1a:11:c7:c5:
04:7e:eb:1c:96:21:b7:a4:5c:51:79:f9:20:55:47:
0c:1b:18:22:47:fe:2e:ad:55:23:2f:a0:47:04:0f:
58:6a:e5:c5:20:78:e0:f3:69:e2:fd:49:0d:8a:1a:
78:45:28:e8:82:4e:56:a7:be:bd:4d:ec:c9:74:4f:
7d:23:dd:df:71:f9:a7:78:43:65:ec:1b:32:3a:d0:
d5:b1:39:24:36:cb:33:d9:96:1d:d0:01:7e:70:a2:
72:2f:d3:46:c8:14:1e:32:b6:06:d1:f1:53:f8:01:
26:97:1f:c7:2b:df:f4:e4:34:1f:b0:9b:a4:0e:07:
46:d5:69:73:e1:92:3d:ff:0b:55:62:8e:5b:48:c2:
5a:a6:9f:34:2d:d5:cc:3d:55:18:e4:8c:a5:92:ad:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FB:C4:4D:82:8F:BD:7D:7B:65:71:0B:CF:78:41:E4:46:5E:12:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C82149B6DE3C11EFB0A64F53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.128.0/19
Signature Algorithm: sha256WithRSAEncryption
14:24:07:42:18:14:0a:5c:01:70:8e:d3:71:86:61:8c:f2:8d:
5e:11:29:db:9b:70:fe:f7:c0:1d:d8:18:e1:82:e1:82:03:5c:
8e:10:f3:1c:2c:6f:2b:8d:2d:cb:5c:a8:53:cc:92:35:e8:fb:
b6:4e:ac:04:60:7c:4e:30:04:c0:9c:39:28:47:63:34:73:ae:
d4:20:45:68:64:58:3a:38:03:bd:91:7e:ef:22:1d:11:f0:50:
5d:34:99:91:6e:08:bc:7c:6f:af:25:62:5c:f3:a1:d7:be:0f:
97:8b:dc:b0:80:e9:4b:e9:60:f6:a4:aa:6f:f9:c3:2c:5e:02:
01:20:2f:f4:3a:a9:ab:76:d5:83:88:6f:91:ea:ac:3a:fb:eb:
5f:57:e6:79:b1:9f:cf:99:42:18:18:7b:54:fb:19:c6:56:09:
f7:ec:90:e1:df:c7:55:37:96:ec:c6:c8:d2:d7:95:a6:eb:e3:
8b:ae:ec:09:da:f0:df:e2:de:00:ee:10:29:10:8b:88:90:a3:
b4:e7:68:51:bc:07:31:09:8d:e0:80:46:8c:58:79:e1:87:76:
cc:15:79:a7:b5:7f:65:72:8d:68:1c:1f:c9:59:c7:97:8b:f4:
b3:23:25:0c:b3:1d:9b:ea:6e:65:0b:3c:95:48:fd:ce:25:a3:
8d:1f:8c:73
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARWtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI5MTIzMDA2WhcNMjUwMjA1MTIzMDA2WjAYMRYw
FAYDVQQDEw02NzlhMWY1My0yZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0MTeK2JQMB2cCSEKEwzILMVl8pqcojOiZC9scV8PWVvil8DfsgLpP4xn
NfZTFkZe8hs4XbbvE0xWpvCP+lNeaZNiWW2313qoYB3NBN7FXb3XPc6UHbby6VWv
169Pdwkq7QBDIhoRx8UEfuscliG3pFxRefkgVUcMGxgiR/4urVUjL6BHBA9YauXF
IHjg82ni/UkNihp4RSjogk5Wp769TezJdE99I93fcfmneENl7BsyOtDVsTkkNssz
2ZYd0AF+cKJyL9NGyBQeMrYG0fFT+AEmlx/HK9/05DQfsJukDgdG1Wlz4ZI9/wtV
Yo5bSMJapp80LdXMPVUY5Iylkq30wQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFK/7
xE2Cj719e2VxC894QeRGXhJxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DODIxNDlCNkRFM0MxMUVGQjBBNjRGNTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnOWAMA0GCSqGSIb3DQEBCwUA
A4IBAQAUJAdCGBQKXAFwjtNxhmGM8o1eESnbm3D+98Ad2BjhguGCA1yOEPMcLG8r
jS3LXKhTzJI16Pu2TqwEYHxOMATAnDkoR2M0c67UIEVoZFg6OAO9kX7vIh0R8FBd
NJmRbgi8fG+vJWJc86HXvg+Xi9ywgOlL6WD2pKpv+cMsXgIBIC/0OqmrdtWDiG+R
6qw6++tfV+Z5sZ/PmUIYGHtU+xnGVgn37JDh38dVN5bsxsjS15Wm6+OLruwJ2vDf
4t4A7hApEIuIkKO052hRvAcxCY3ggEaMWHnhh3bMFXmntX9lco1oHB/JWceXi/Sz
IyUMsx2b6m5lCzyVSP3OJaONH4xz
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:13 2025 by rpki-client