Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDA546D2DD6811EF8AFBEC41762E951A.roa
File: CDA546D2DD6811EF8AFBEC41762E951A.roa (raw, json)
Hash identifier: yK4VNe3y7ZF4HKOCqRIIzpuGLk5inYs/pS54N71Rs0w=
Subject key identifier: B6:D0:C4:9D:52:4D:3D:05:95:3C:06:2C:CD:C8:26:C0:D4:A1:0E:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011592
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDA546D2DD6811EF8AFBEC41762E951A.roa
Signing time: Tue 28 Jan 2025 11:12:47 +0000
ROA not before: Tue 28 Jan 2025 11:12:43 +0000
ROA not after: Fri 14 Feb 2025 11:12:43 +0000
asID: 5065
IP address blocks: 156.229.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71058 (0x11592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 11:12:43 2025 GMT
Not After : Feb 14 11:12:43 2025 GMT
Subject: CN=6798bbaf-2aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:0a:49:4b:71:fc:38:7f:26:fa:0b:67:dd:
ea:21:57:86:b1:bc:c0:6c:93:6c:b5:ce:a9:62:8c:
6e:4d:3e:20:e9:8c:64:09:9c:77:3a:cf:fc:05:d2:
5a:ee:2e:7d:67:a2:9d:e2:26:96:ea:5f:78:3b:50:
d5:be:6f:8a:49:f6:e8:de:ae:e5:9a:cd:fd:f5:fb:
ab:ff:f1:22:fd:32:7e:a5:d0:fc:e8:1c:b2:4b:23:
89:bb:0d:52:ff:62:7b:34:c8:09:7b:2a:26:ec:e1:
ec:b8:88:13:72:82:85:ec:f8:95:27:c0:56:e8:bf:
07:34:f7:a6:16:54:2d:97:29:84:da:b8:43:e6:48:
b0:15:7b:50:2a:16:0a:8e:0d:e5:8c:ff:5c:06:5d:
79:51:e0:68:5a:a5:88:ad:1c:06:6b:b2:8a:95:5e:
fc:39:6c:45:7a:65:7f:fc:b6:0a:10:a6:b3:1c:8e:
9a:06:e3:04:30:4a:d8:68:ea:de:e3:88:44:10:a8:
00:e6:58:81:b5:cd:eb:9c:52:39:6c:97:49:c7:76:
c8:e6:89:63:db:63:53:9f:86:0a:f0:d9:e3:d6:1a:
f8:a9:a4:8e:13:5c:61:3b:ca:49:9a:d7:c0:2f:3a:
8b:ae:48:05:b7:3c:99:66:66:03:05:64:7d:25:9e:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D0:C4:9D:52:4D:3D:05:95:3C:06:2C:CD:C8:26:C0:D4:A1:0E:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDA546D2DD6811EF8AFBEC41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.60.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d6:bd:0d:48:0e:28:72:11:4d:8c:9b:82:0d:1b:e7:4a:f3:
9d:d9:32:a1:8b:7e:da:34:48:0a:9b:c6:8d:5d:65:39:d9:db:
06:2c:7e:d8:cf:89:c9:44:7b:62:f4:a6:14:bd:37:d2:a9:70:
df:62:ce:3a:a0:d3:dd:07:94:ce:fd:e8:2a:d0:7b:24:fb:59:
2f:f5:1e:f2:27:32:20:85:96:a2:7c:12:05:da:69:58:d2:20:
bf:5e:5c:87:f1:ce:2a:ea:d5:44:cd:81:f0:a6:7f:8f:ea:1b:
3c:87:72:64:81:c4:94:77:98:24:f9:17:20:42:ec:57:35:b1:
11:dc:36:02:96:e2:aa:dd:b6:78:4d:03:4d:ee:2f:0e:0b:b5:
2d:18:61:d0:83:cc:1a:b2:5e:f5:96:d4:b9:6a:af:1a:40:e2:
db:cd:8c:5e:ff:0d:34:b5:3d:88:0d:de:61:09:2e:f1:e9:6a:
0f:06:fe:78:71:f6:e0:e4:38:4f:ee:3e:f0:93:f1:17:f9:1d:
5f:0c:67:92:fb:20:a0:34:06:f8:cc:f2:b1:36:a6:89:8b:ff:
69:66:d3:c2:a0:0a:b3:18:b1:41:30:3d:26:23:4f:a3:74:c5:
a9:4e:62:a6:4e:d2:38:b5:e7:d3:58:2c:64:c3:a7:5c:eb:a6:
7c:8c:41:ea
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARWSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI4MTExMjQzWhcNMjUwMjE0MTExMjQzWjAYMRYw
FAYDVQQDEw02Nzk4YmJhZi0yYWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu0oKSUtx/Dh/JvoLZ93qIVeGsbzAbJNstc6pYoxuTT4g6YxkCZx3Os/8
BdJa7i59Z6Kd4iaW6l94O1DVvm+KSfbo3q7lms399fur//Ei/TJ+pdD86ByySyOJ
uw1S/2J7NMgJeyom7OHsuIgTcoKF7PiVJ8BW6L8HNPemFlQtlymE2rhD5kiwFXtQ
KhYKjg3ljP9cBl15UeBoWqWIrRwGa7KKlV78OWxFemV//LYKEKazHI6aBuMEMErY
aOre44hEEKgA5liBtc3rnFI5bJdJx3bI5olj22NTn4YK8Nnj1hr4qaSOE1xhO8pJ
mtfALzqLrkgFtzyZZmYDBWR9JZ7gxQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLbQ
xJ1STT0FlTwGLM3IJsDUoQ5gMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DREE1NDZEMkRENjgxMUVGOEFGQkVDNDE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOU8MA0GCSqGSIb3DQEBCwUA
A4IBAQCC1r0NSA4ochFNjJuCDRvnSvOd2TKhi37aNEgKm8aNXWU52dsGLH7Yz4nJ
RHti9KYUvTfSqXDfYs46oNPdB5TO/egq0Hsk+1kv9R7yJzIghZaifBIF2mlY0iC/
XlyH8c4q6tVEzYHwpn+P6hs8h3JkgcSUd5gk+RcgQuxXNbER3DYCluKq3bZ4TQNN
7i8OC7UtGGHQg8wasl71ltS5aq8aQOLbzYxe/w00tT2IDd5hCS7x6WoPBv54cfbg
5DhP7j7wk/EX+R1fDGeS+yCgNAb4zPKxNqaJi/9pZtPCoAqzGLFBMD0mI0+jdMWp
TmKmTtI4tefTWCxkw6dc66Z8jEHq
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:32 2025 by rpki-client