Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE949474D17B11EFB64287A5762E951A.roa
File: CE949474D17B11EFB64287A5762E951A.roa (raw, json)
Hash identifier: mrpzgZFnKvhhp+AXXLxFdx8e7eI2l4fTtoMZejFxflQ=
Subject key identifier: F8:C3:35:31:BB:05:A0:28:50:DF:7E:B4:33:9F:E7:A8:0B:5D:E6:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010676
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE949474D17B11EFB64287A5762E951A.roa
Signing time: Mon 13 Jan 2025 06:58:35 +0000
ROA not before: Mon 13 Jan 2025 06:58:31 +0000
ROA not after: Thu 20 Feb 2025 06:58:31 +0000
asID: 213995
IP address blocks: 156.253.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67190 (0x10676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 13 06:58:31 2025 GMT
Not After : Feb 20 06:58:31 2025 GMT
Subject: CN=6784b99b-b9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:3c:55:74:95:f6:71:e0:d7:f1:e5:23:5e:
2b:2f:f2:67:74:28:f4:f1:64:cb:3f:79:60:50:e4:
f3:ac:a0:04:73:8f:b2:1c:bc:d7:01:9c:47:2f:48:
da:96:fc:35:cb:cf:b0:62:e7:82:27:c1:c1:72:8a:
6b:84:56:c2:11:d1:d9:b9:c6:07:03:97:ae:05:db:
ce:b3:75:a7:09:4d:03:7e:38:09:6d:77:e7:41:c9:
8a:a8:e4:a1:9d:03:4c:78:26:45:3d:d1:25:e8:bd:
49:1c:68:7d:1c:ae:33:d2:1c:7a:06:b3:15:a7:5c:
13:a3:35:23:dc:bc:81:6e:ab:02:d3:d2:4a:13:6f:
be:fb:38:93:0a:55:7b:f7:88:aa:08:0f:7a:02:ef:
6e:be:2f:29:be:e9:27:52:32:1b:3e:e2:71:59:85:
e0:83:fa:4b:45:eb:91:02:1b:d2:ce:80:54:49:21:
2b:cb:cd:9f:34:ac:64:c2:98:71:a7:a9:be:df:51:
dc:78:e7:f1:6b:fb:38:10:13:7b:6a:24:bb:bf:a4:
52:17:ca:ad:2b:78:0c:fc:02:e6:53:67:29:0a:40:
a7:7d:8d:66:62:69:06:b7:b8:85:ad:a7:d1:f0:ca:
23:36:18:46:fb:5d:c7:f2:1d:c1:e4:dc:fc:1d:fc:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C3:35:31:BB:05:A0:28:50:DF:7E:B4:33:9F:E7:A8:0B:5D:E6:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE949474D17B11EFB64287A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.228.0/24
Signature Algorithm: sha256WithRSAEncryption
07:0d:f8:a8:58:ae:49:59:43:e2:89:41:42:ab:87:b1:32:bc:
4d:b5:5e:10:a9:28:1a:51:b5:29:8d:c7:30:8b:3a:0d:97:82:
04:eb:31:f2:ce:e2:cb:54:c5:9f:9a:25:3c:bd:26:71:2c:fc:
a5:99:ea:eb:f9:77:6f:4f:2b:90:bf:37:4a:e2:24:0f:54:27:
bb:60:ce:91:01:5f:7c:3c:8d:a9:cc:60:82:29:58:a2:8f:33:
85:47:33:1e:b7:a5:a7:98:a1:0f:6f:5b:45:b8:7b:0d:6c:6e:
74:69:50:cb:d0:af:04:80:3e:6a:9c:be:38:c1:57:43:9d:77:
73:60:2f:14:8a:b7:8c:43:e5:e2:b8:7d:f7:02:81:43:b0:03:
1a:ee:1a:02:02:6b:e4:a3:65:ff:c2:81:be:bd:d4:20:85:14:
c7:66:64:8c:46:7e:90:7a:69:98:b1:36:41:5d:cd:77:a0:66:
9c:52:81:8d:ae:4a:80:b8:a1:c4:95:aa:40:79:07:54:18:70:
6e:12:57:93:75:99:a7:af:c0:10:79:6c:47:12:dd:23:a4:5e:
45:26:d6:d9:19:bb:db:61:bc:7e:e8:97:ab:d3:57:44:e0:fc:
53:14:f9:77:41:42:93:59:50:13:72:55:25:ef:1c:70:a8:99:
3f:17:4b:b4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQZ2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEzMDY1ODMxWhcNMjUwMjIwMDY1ODMxWjAYMRYw
FAYDVQQDEw02Nzg0Yjk5Yi1iOWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1sA8VXSV9nHg1/HlI14rL/JndCj08WTLP3lgUOTzrKAEc4+yHLzXAZxH
L0jalvw1y8+wYueCJ8HBcoprhFbCEdHZucYHA5euBdvOs3WnCU0DfjgJbXfnQcmK
qOShnQNMeCZFPdEl6L1JHGh9HK4z0hx6BrMVp1wTozUj3LyBbqsC09JKE2+++ziT
ClV794iqCA96Au9uvi8pvuknUjIbPuJxWYXgg/pLReuRAhvSzoBUSSEry82fNKxk
wphxp6m+31HceOfxa/s4EBN7aiS7v6RSF8qtK3gM/ALmU2cpCkCnfY1mYmkGt7iF
rafR8MojNhhG+13H8h3B5Nz8HfwFaQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPjD
NTG7BaAoUN9+tDOf56gLXeb7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRTk0OTQ3NEQxN0IxMUVGQjY0Mjg3QTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP3kMA0GCSqGSIb3DQEBCwUA
A4IBAQAHDfioWK5JWUPiiUFCq4exMrxNtV4QqSgaUbUpjccwizoNl4IE6zHyzuLL
VMWfmiU8vSZxLPylmerr+XdvTyuQvzdK4iQPVCe7YM6RAV98PI2pzGCCKViijzOF
RzMet6WnmKEPb1tFuHsNbG50aVDL0K8EgD5qnL44wVdDnXdzYC8UireMQ+XiuH33
AoFDsAMa7hoCAmvko2X/woG+vdQghRTHZmSMRn6QemmYsTZBXc13oGacUoGNrkqA
uKHElapAeQdUGHBuEleTdZmnr8AQeWxHEt0jpF5FJtbZGbvbYbx+6Jer01dE4PxT
FPl3QUKTWVATclUl7xxwqJk/F0u0
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:41 2025 by rpki-client