Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D63BBA90DB1211EF9F1E4C7D762E951A.roa
File: D63BBA90DB1211EF9F1E4C7D762E951A.roa (raw, json)
Hash identifier: 7/whoUVQbyKbAo4o8l18KgEFKyXEVbnEUJXP1V2OucM=
Subject key identifier: 07:C7:90:F3:2C:2A:D2:12:A3:84:FA:31:C7:30:33:0F:76:74:5C:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01122B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D63BBA90DB1211EF9F1E4C7D762E951A.roa
Signing time: Sat 25 Jan 2025 11:52:22 +0000
ROA not before: Sat 25 Jan 2025 11:52:18 +0000
ROA not after: Sun 23 Feb 2025 11:52:18 +0000
asID: 202656
IP address blocks: 156.246.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70187 (0x1122b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 11:52:18 2025 GMT
Not After : Feb 23 11:52:18 2025 GMT
Subject: CN=6794d076-b787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:34:48:a8:15:66:3e:d0:0e:67:92:8a:47:
5e:41:c4:f5:4d:c5:20:34:1b:bc:50:d3:48:1b:a9:
2f:7a:09:fd:a0:0d:1a:dc:b5:09:81:f7:f8:4d:61:
b9:0f:b2:dc:bc:91:b2:37:d4:d6:c0:99:cc:ad:c4:
ad:e3:1a:0c:4e:1a:54:fc:68:37:f4:8f:4f:00:e5:
ed:9e:58:b9:af:2a:1a:30:42:3a:32:1e:a4:03:f5:
c7:1b:38:08:5f:64:a6:ab:69:0e:7f:0f:0d:9e:cd:
5a:8d:cb:5c:ec:4d:01:2b:f8:43:f7:f4:61:ad:34:
ad:ce:84:06:3f:fb:55:aa:9a:77:8e:e6:fb:64:e5:
68:fa:b1:77:7b:22:9e:73:0b:d1:bd:70:6d:69:cb:
b3:85:13:97:35:4b:e6:e1:b6:51:a9:27:3c:42:d9:
e7:f9:c5:55:57:ee:11:fa:38:de:28:49:0f:00:d2:
03:78:7d:0c:27:77:e2:74:bd:37:de:5f:ec:2e:32:
b3:53:de:08:3d:81:b8:be:7c:b5:17:74:90:5c:bf:
60:0e:47:09:6a:21:09:c3:0f:8d:27:28:54:a8:90:
0a:f5:e9:e4:6f:c0:c2:65:9a:62:5f:0e:d8:d2:14:
97:2a:11:d3:79:65:91:ae:1a:a1:8a:c2:c3:25:b8:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C7:90:F3:2C:2A:D2:12:A3:84:FA:31:C7:30:33:0F:76:74:5C:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D63BBA90DB1211EF9F1E4C7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.161.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e6:1d:75:9c:98:21:c7:67:b7:b8:15:31:69:09:c2:6f:24:
1c:ff:b1:fe:b6:cb:94:1a:a1:72:cf:7a:b1:de:e2:73:b0:b6:
2b:e0:95:02:f8:1e:8d:bb:ff:f1:f2:06:63:b1:b5:2f:b4:06:
41:03:35:d4:95:0e:d8:1f:18:4f:72:e2:7b:ef:6b:fb:35:1c:
3b:4c:2b:bd:8c:92:2b:b7:bf:c4:8e:a3:12:f8:9b:e0:ca:e8:
a9:66:10:04:e0:91:9e:0d:58:0e:06:9b:35:8b:a8:19:1a:52:
97:fd:b8:12:75:8e:67:ee:2f:94:6a:16:43:c3:25:0f:74:36:
7f:7b:3e:f9:68:6d:93:47:03:51:a1:88:42:8d:08:61:f8:99:
9a:ba:e5:5f:5c:fe:d6:30:86:71:77:ea:e3:7e:44:f0:61:94:
d3:13:92:3a:da:a7:e4:46:f6:8f:88:84:a2:9c:50:54:9d:dd:
21:51:c8:f4:df:c2:80:3f:9e:c2:51:0a:9d:05:e9:b1:7f:e1:
5c:e4:0d:43:89:f9:3d:e7:91:0f:29:2a:a4:2a:80:55:2e:9c:
e2:7a:2e:a0:9e:37:d7:c0:29:99:eb:ef:f9:89:b3:9c:f7:e6:
8a:27:44:d9:73:48:8c:f3:1b:1b:e8:3a:59:49:73:fe:24:da:
5f:07:84:6a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARIrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MTE1MjE4WhcNMjUwMjIzMTE1MjE4WjAYMRYw
FAYDVQQDEw02Nzk0ZDA3Ni1iNzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp7U0SKgVZj7QDmeSikdeQcT1TcUgNBu8UNNIG6kvegn9oA0a3LUJgff4
TWG5D7LcvJGyN9TWwJnMrcSt4xoMThpU/Gg39I9PAOXtnli5ryoaMEI6Mh6kA/XH
GzgIX2Smq2kOfw8Nns1ajctc7E0BK/hD9/RhrTStzoQGP/tVqpp3jub7ZOVo+rF3
eyKecwvRvXBtacuzhROXNUvm4bZRqSc8Qtnn+cVVV+4R+jjeKEkPANIDeH0MJ3fi
dL033l/sLjKzU94IPYG4vny1F3SQXL9gDkcJaiEJww+NJyhUqJAK9enkb8DCZZpi
Xw7Y0hSXKhHTeWWRrhqhisLDJbjpcwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAfH
kPMsKtISo4T6MccwMw92dFyIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENjNCQkE5MERCMTIxMUVGOUYxRTRDN0Q3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPahMA0GCSqGSIb3DQEBCwUA
A4IBAQAA5h11nJghx2e3uBUxaQnCbyQc/7H+tsuUGqFyz3qx3uJzsLYr4JUC+B6N
u//x8gZjsbUvtAZBAzXUlQ7YHxhPcuJ772v7NRw7TCu9jJIrt7/EjqMS+Jvgyuip
ZhAE4JGeDVgOBps1i6gZGlKX/bgSdY5n7i+UahZDwyUPdDZ/ez75aG2TRwNRoYhC
jQhh+JmauuVfXP7WMIZxd+rjfkTwYZTTE5I62qfkRvaPiISinFBUnd0hUcj038KA
P57CUQqdBemxf+Fc5A1Difk955EPKSqkKoBVLpziei6gnjfXwCmZ6+/5ibOc9+aK
J0TZc0iM8xsb6DpZSXP+JNpfB4Rq
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:09 2025 by rpki-client